last executing test programs:

1.101961328s ago: executing program 0 (id=1055):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910be00000000007f0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0xe78}, 0x10}, 0x94)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000a40)={0xa, 0x4e23, 0x80000001, @local, 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f0000000f40)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}}], 0x1, 0x8080)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x10}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x8090)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x58, 0x800000, 0x8, 0x7, 0x8dd})
write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x4081, @empty, 0x101}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x9, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
sendto$inet6(r5, 0x0, 0x0, 0x10, 0x0, 0x0)

1.099067836s ago: executing program 0 (id=1057):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
r1 = socket$phonet(0x23, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000680)={0x0, 0xb7, "f9d7e19929ce74774a2f4ee2f2e8c5f286818dd289d7d8cbb198797ba844a0a5e70659e3949f8ac6151097ecbd73ab1740dd72953c33c66fad2967706ae0cce88e74a20e052cb7200533e6c1ca5533f7b1fe4e72fed305dc088f7280e69357eb4f10194a563db5300c9c4fbe9eabe86d0f1b6f5b4e7ba4c21dbe1b3c6b985b8ad3f333b63ac2ec1e028a6bc35e55d3b504639bed04f0830bf9092692d54c9655430909766e074921c8ea7a7a73da3b2f26b97a393414a7"}, &(0x7f0000000400)=0xbf)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x40, r5, 0x1, 0x14, 0x0, {0x3}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x20008000) (async)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x40, r5, 0x1, 0x14, 0x0, {0x3}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8880}, 0x20008000)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES16=<r6=>r5, @ANYBLOB="02002abd7000ffdbdb25030000008c000480340007800800020000020000080003000800000008000100160000000800010002000000080004005006000008000100110000003c0007800800030000000000080002000e0000000800020004000000080001000c0000000800040009000000080001002000000008000400010000000900010073797a30000000000900010073797a31000000001c0009800800020002000000080002000300000008000100fbffffff240002800400040008000100c20500000800010007000000080001000e00000004000400"], 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYRES32=r6], 0xbc}}, 0x8871) (async)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r5, @ANYRES32=r6], 0xbc}}, 0x8871)
sendmmsg(r1, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)
sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x300, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004010000040000000900000000080100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000006c0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
close(r8)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="11ffc3000002"})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r9 = socket(0x10, 0x3, 0x20020000)
sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) (async)
sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0)

1.003566028s ago: executing program 0 (id=1060):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = getuid()
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x8d0, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8a7, 0xe5, 0x0, 0x1, [@generic="75cc903a4ae39e09c12f0f07bb1b2175f98a46d75dba002c407b91edd9ecc1c5782f1eece1ad0e4b35846303fa7c7c34ec6173e12ba9497f2878c7ae6c784c1b865055048e74b541ccb4edc3aa262ffde7cdfcd821c31b8067a6", @typed={0x7, 0x1d1, 0x0, 0x0, @str='\\^\x00'}, @generic="cbf55f1a74bf85625e7d48ec982efae182e9db55795a5bb6f6e4e882582272ea483c13e2e3cccd18893bad59020dcc44aae4b4774ce3602aa8804367b3e9d95e2b3de6c223c824f0fb1f6214fe619e21f30e717088ac32d8955683eede152f13cbb4a9fd62a5477c9733bc517dc00564cb0cb95a5ebc19459b4176c137cc5728813b4626f15f0708d926a9cc790aadf71b6030ea2259740e81d8429cb0717ea77d18d411b1af994839f6578d223c9420d1ac36904de41d845d2b5e1fed054a29279a0abb6c46c181e63fc9e043030d495e06", @nested={0x65, 0x89, 0x0, 0x1, [@generic="1dff25940ec7d831ccc33fd7bc4b4bbe59b8e81937fda7c951d1d5e5344d6832e9eca7c8c54521", @generic="69b80b", @typed={0x4, 0xfd}, @generic="02e7a2fcf0f270347a11c07bc1591bc1b13bf49c3714e8e401c3577ade28b170cfae2fe27b602ccb3ad9c9", @typed={0x8, 0xf2, 0x0, 0x0, @uid=r2}]}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@private0}, @nested={0x5ca, 0x11f, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r2}, @generic="61a31cce0616271513f0d1bc926436a556f68a1a2e01605845be4e1e1f1679dec37cd42a9ab8ea8c11ba74435f472e745d1565700e82ac041fae170cf3b0e8598981f788ec91b80a3d918192ccb5cf58aa773b8ef24edf77666d3352432ff195b8a7f6914d66d20d392af8611cc5b4a7f22fe25988ccbc063f7dd6fb57a8dd65f10437aa4bd4", @nested={0x20, 0xe2, 0x0, 0x1, [@nested={0xc, 0x63, 0x0, 0x1, [@typed={0x8, 0x144, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x4, 0xd6}, @nested={0x4, 0xfc}, @typed={0x8, 0x26, 0x0, 0x0, @fd=r1}]}, @generic="70e1764fb1082c3ea4a09982133e0058fe6f4c743b884cc93aa08592f797b5f3d8bfafc5084eac83bdff4b657265687bd6352304528e32f930da574abce73a05fc5f3fee10ee537699850f0ed5f5645c9916f3281fe588460d3308fc3e07b261bdb1d605c3b3e92cd0d43c7f9519c6dc2eabc4de119cc49b8e5565bd1c6e4a352b787e295c0f2754e0d27ce2f60509c4d455baaf102910e489e109591083c7e8a56c99a2025424f06681e29dc47aee78c5f1fa3f742288", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x9}, @generic="14e88f86b388bf4b9b7d6e2f6c1d46bfd9b033e8b41e81f98b29d903a7b23fef1c2228d63a4e9ed8daf8030911bb86fa33f281455aa21594faaf4dfc46ceab426eab18f3b779218e520d783654051d3015d51393d4b9c2b11a31feaf302483de238587564e11941b892f7e74373028e3eaca863f3bc15d6f75c324a957e20a1b91ffbe23f60f2fe41e17669965b79e96c13d97194a0a5151ecdf912cad0d46e8d35d8629f532170d", @generic="0863bc712b52e5784090ac944c4924f4e5cde6dccf10ed5cfc02089676b8ea4b88c4363cdb427699b1fc1b31dae7458c6ba28d468ae0d794743f852841ea2be8c0216b9dce29fdb6c75e33d905d7ac6e82d46ab72a2e8579a9ffe5ecccb54b614f7dcf42b83195df17734540ca892cff01fb22ed9e6a51ecc1db03fef95ff85d2c47d7a3d5a8c318ba23a120ab1205f16526d76f2dec63d4dace275e1bd478854954eeac113372e2c33f8cd978df8254016e4c069c963a4b5a5982f92d3165f097b82299dbb528eaefc0da845a36a6997135ec4283402cbc6f480dbb6bae7b", @generic="5395fdb1b2a9865bad7f112f4351d51aa3090000000000000000", @nested={0x112, 0xba, 0x0, 0x1, [@nested={0x4, 0x94}, @generic="b5e6797177b757dda80b82ca6f4e768217c717b7275aaa44370805f5b6a7fb39db3acfc2ea504c8e1559b547ce", @nested={0x4, 0x126}, @generic="17f0ef9baa4e3c710ba993d08e3a6185c9b6bd0b476ff80c90eba2e7f33511644adea77077d2b01435148be52037199685383c2811e0accea8c4616f89c3a96a9202fab251373d25b7458893a99c6712a5527914eedda7df412655381a95bdfb651702a4a3b397c0f9c2f9964bffd774f54db1c11eb40ce04cca230079db7b84570b699849f812b5fedefe253d5eb25e533ab0ab2dbbe67675c17217115da2b51bfc771bc6c69503a8c9a561007c3cd21ed3a41d74e3d3711443d7258fdc5523f29c0f4c3dfb556c6cf5bda32f720493073bb02c5edec9633c"]}, @nested={0x1a1, 0xad, 0x0, 0x1, [@generic="e57da05366ec230d1d4160f179d190ff816a969967aaa1275f3d127f3ad16ed819060ccd3eafb9c6f7f952571c7a8e5783e9237d2286aba9bd9b8bf1243f09faede7a4ef89abca4e96676ca6b4adf28acec58801511101db12a3deb5576a8ca63d38a1f5b10594967bc31b1eee0666236d0de6c682a13fbe14d44d7fa508d665bad0551e06617247c6678074e56bc956d9da6cdb8cca60a1f44eade30b537731398bfe0377d4da7cb538b06feccdba79169921c75e0ac5", @typed={0x5, 0x68, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x2f}, @generic="f41c5573d4136a7a7f6aac609e31a7880a8788e333c86ed7d70b9456e57d7db3cc3a39a0ade619a1610a90f86c3fa05a712974628b1221fa20945a606cd94ed3784791d68c08044eb801d451568439a22849024278b689c82240d52d37e4f5d8166bf6bb24ae38d18ef146af61922fffecf6f91f3fb25308db6663a4311fadf57f62724ad042a776769743d65cdbe1b699e012418498c750d2fc6abcd85f42388b1d8485166e6a5a601110b63e9b2128086af57b1f1cbd77b298c107a1c38a306bac51ee36df5224f9a1dde1befaa4f4224f98de1d5f8d8fdafb"]}]}, @generic="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"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r3, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b9000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xcc, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x80}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x2aa2494b5d8f9ac6}, 0x44001)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0)

876.807641ms ago: executing program 1 (id=1061):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
r0 = socket$kcm(0x21, 0x2, 0xa)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="a1000000fddbdf250000000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x4, @local, 0x152}}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0xfc00)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0}}], 0x1, 0x4040880)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r5, 0x29, 0x1f, 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, 0x0, 0x4)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x80000)
r6 = socket$unix(0x1, 0x1, 0x0)
close(r6)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0xd, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@lsrr={0x83, 0x1f, 0xf0, [@broadcast, @empty, @private=0xa010102, @empty, @loopback, @multicast1, @empty]}]}}, @info_reply={0x10, 0x0, 0x0, 0xfff9, 0x6}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

807.570432ms ago: executing program 0 (id=1063):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
read(r1, 0x0, 0x42)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20)
sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)

695.01941ms ago: executing program 1 (id=1064):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000640)=""/195, 0x36, 0xc3, 0x0, 0x6, 0x10000}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000020a0103000000000000000000000000140000001100010000000000000000000001000a"], 0x88}}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xfa, &(0x7f0000000440)=""/250, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a09000000010000000000"], 0x4c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x9, 0xe, 0x1, 0x7f, 0x80000000, 0x7, 0x9, 0x9}, 0x20)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x1e, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x81}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = socket$netlink(0x10, 0x3, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000"], 0x50)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000500))
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0xa, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0)
r8 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)

693.528858ms ago: executing program 0 (id=1065):
r0 = socket$kcm(0x29, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}, {0x0, 0x6, 0x8, 0x101}, {0x8, 0x4, 0x4, 0x1}, {0xa5c6, 0x5, 0x8, 0xff}, {0x9, 0x4, 0x10, 0x4}]}, 0x10)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = getgid()
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, r8}, 0xc)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x201, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xfeea)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0)
pipe(&(0x7f0000002740))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x1000)
syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c0100001a0007930000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRES16=r12], 0x18c}}, 0x0)

557.694418ms ago: executing program 1 (id=1068):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

457.936115ms ago: executing program 2 (id=1069):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x69f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0xc0000) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x68}, 0x1, 0xba01}, 0x810)

457.435325ms ago: executing program 1 (id=1070):
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4})
r5 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @opaque="86f79dbf77ab802c7f3cec19c5a8d8bedef27dc4d05e14deb36cbe369e251292a7baebcaa954dcf6"}}}}}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb181e7d37bcf9e433c29", 0x28}], 0x2}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x18, 0x121, 0x0, 0x0, {0x23, 0x0, 0x21}}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200020001200010a000000000000000080000004"], 0x26}}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x1, 0x3})
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1}}}})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xfce)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000013c0)=0x1)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001380)=@generic={&(0x7f0000001340)='./file0\x00', r1}, 0x18)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40)

228.291507ms ago: executing program 2 (id=1071):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000f90f001fff00"/20, @ANYRES16=r0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRESDEC, @ANYRES8=<r1=>r0], 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9000911", 0x19}, {&(0x7f0000002580)="09c69e16e1536fcff84a6c972f929bd77111f8ed22e8b95278dba0549bed73bf9af7deee6b05e3387473", 0x2a}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000001400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="08f8236674c3920000781f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000190)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r13}, 0x10)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r14}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)

226.827981ms ago: executing program 0 (id=1072):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
recvmmsg(r2, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

157.570067ms ago: executing program 2 (id=1073):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb79}, 0x14}, 0x1, 0xd7150000, 0x0, 0x80}, 0x24004052)

155.746555ms ago: executing program 1 (id=1074):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
recvmmsg(r1, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x4a932a9659d613d6, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000380)={0x1, 0xff}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000b00))
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x4000080)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x8000) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="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"], 0x48}}, 0x0)

154.909755ms ago: executing program 2 (id=1075):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)

56.979201ms ago: executing program 1 (id=1076):
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf252100000008000300", @ANYRES32, @ANYBLOB="14002f80fc106a5efa69034e84503fe8f758e048f0e391a45f612bd7416093f4b64dccc0ab76171886289e70a0e6555577a5daab15b381fc"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x814) (async)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a0000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="a50a00000500000061112400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

264.329µs ago: executing program 2 (id=1077):
syz_extract_tcp_res$synack(&(0x7f0000001000)={0x41424344, <r0=>0x41424344}, 0x1, 0x0) (async)
syz_extract_tcp_res(&(0x7f0000001040)={0x41424344, <r1=>0x41424344}, 0x9, 0x3)
syz_emit_ethernet(0x1ef, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "253898", 0x1b9, 0x6, 0x0, @private1, @empty, {[@dstopts={0x2f, 0x1e, '\x00', [@pad1, @generic={0x8a, 0xd0, "5c3e7218b6d0a3e509ab04e1dcc4bbd0bb846f6bf0dbe3814bc87734e009f638b9d92ea15fa50d0deb8a999c7a355166cccb2a1a537190846e4d4a37d7e334818369dba61067f78a4a7306f8d7c8c4db93dd70dfcd1b919e3f2d712d8c6319d87cb177c7926721a4cd8613b200672ed8673563d064becc92462d210cbf1c00395d24483ec3b2ee096239eb215c5e009068b860907a5ee8f2d3d8cb97fe93db8e52ea7c0b45e5ee253201426646325289e002289e903f7a38530224a2f57f356ceee3c28dcd983342cb2f2ea04625f43c"}, @enc_lim={0x4, 0x1, 0xb}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xe1}, @jumbo={0xc2, 0x4, 0x7fff}]}, @fragment={0x1, 0x0, 0x5, 0x0, 0x0, 0x6, 0x66}, @fragment={0x2, 0x0, 0x1, 0x1, 0x0, 0x9, 0x64}, @srh={0x84, 0x2, 0x4, 0x1, 0x1, 0x60, 0xfffe, [@dev={0xfe, 0x80, '\x00', 0x1c}]}, @srh={0x8, 0x0, 0x4, 0x0, 0x2, 0x18, 0x5}], {{0x4e24, 0x4e22, r0, r1, 0x0, 0x0, 0x13, 0x91e36e6861d5fce2, 0x4800, 0x0, 0x4, {[@exp_fastopen={0xfe, 0xd, 0xf989, "884b0f3a4a3c72372a"}, @sack_perm={0x4, 0x2}, @generic={0x1, 0xb, "46f5a2fc548655a6ff"}, @nop, @window={0x3, 0x3, 0xc9}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "4e02021c206de53f85804533de300d75"}, @exp_smc={0xfe, 0x6}]}}, {"c2c7643aeb4c015d8a9edc52ee9bb1cd0bd8f003e0f66ef83f5c82d398a6bfb7f25a6062d657d436737d08a70a07bce1bddccf83e7ff0158248b0eb7cf"}}}}}}}, 0x0)

0s ago: executing program 2 (id=1078):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="f31428d6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @private0, @loopback}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYBLOB="000000001400"], 0x38}}, 0x0) (async)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) (async)
write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) (async)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0), 0x4) (async)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async)
ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000200))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52907' (ED25519) to the list of known hosts.
syzkaller login: [   56.899797][ T5835] cgroup: Unknown subsys name 'net'
[   57.041050][ T5835] cgroup: Unknown subsys name 'cpuset'
[   57.048089][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.261477][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.504856][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.516335][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.520293][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.524060][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.528229][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.560900][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.566623][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.577232][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.581111][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.587408][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.591297][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.607447][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.611717][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.617916][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.623670][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.878331][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   65.057779][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.060806][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.064035][ T5849] bridge_slave_0: entered allmulticast mode
[   65.070088][ T5849] bridge_slave_0: entered promiscuous mode
[   65.085215][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.093923][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.097770][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.100757][ T5849] bridge_slave_1: entered allmulticast mode
[   65.104591][ T5849] bridge_slave_1: entered promiscuous mode
[   65.217731][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.237338][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.308619][ T5849] team0: Port device team_slave_0 added
[   65.311536][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.314539][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.317743][ T5855] bridge_slave_0: entered allmulticast mode
[   65.321687][ T5855] bridge_slave_0: entered promiscuous mode
[   65.327976][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.335580][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.339418][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.342705][ T5855] bridge_slave_1: entered allmulticast mode
[   65.347594][ T5855] bridge_slave_1: entered promiscuous mode
[   65.353265][ T5849] team0: Port device team_slave_1 added
[   65.420377][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.423268][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.434110][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.452942][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.458200][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.461027][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.471756][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.501949][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.584877][ T5855] team0: Port device team_slave_0 added
[   65.591158][ T5849] hsr_slave_0: entered promiscuous mode
[   65.594286][ T5849] hsr_slave_1: entered promiscuous mode
[   65.610355][ T5855] team0: Port device team_slave_1 added
[   65.633368][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.636908][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.639843][ T5852] bridge_slave_0: entered allmulticast mode
[   65.643778][ T5852] bridge_slave_0: entered promiscuous mode
[   65.671845][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.674341][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.678028][ T5852] bridge_slave_1: entered allmulticast mode
[   65.680932][ T5852] bridge_slave_1: entered promiscuous mode
[   65.690389][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.692566][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.700714][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.726588][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.728836][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.737196][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.765984][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.777523][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.853357][ T5855] hsr_slave_0: entered promiscuous mode
[   65.857106][ T5855] hsr_slave_1: entered promiscuous mode
[   65.859904][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.862344][ T5855] Cannot create hsr debugfs directory
[   65.866444][ T5852] team0: Port device team_slave_0 added
[   65.893519][ T5852] team0: Port device team_slave_1 added
[   65.930657][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.932872][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.941586][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.962919][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.965158][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.975275][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.038870][ T5852] hsr_slave_0: entered promiscuous mode
[   66.041641][ T5852] hsr_slave_1: entered promiscuous mode
[   66.044052][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   66.046839][ T5852] Cannot create hsr debugfs directory
[   66.138790][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.160093][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.169523][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.197177][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.332151][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.341168][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.349810][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.356998][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.424700][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.430481][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.445134][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.456525][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.458863][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.498265][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   66.516351][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.518763][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.523492][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.525773][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.568137][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.588363][ T5236] Bluetooth: hci0: command tx timeout
[   66.604347][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   66.626878][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.629929][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.648206][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.651317][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.667051][ T5859] Bluetooth: hci2: command tx timeout
[   66.669978][ T5236] Bluetooth: hci1: command tx timeout
[   66.711065][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.741641][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.759493][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.762035][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.772001][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.774808][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.820887][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.849929][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.888420][ T5849] veth0_vlan: entered promiscuous mode
[   66.918714][ T5849] veth1_vlan: entered promiscuous mode
[   66.941134][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.977095][ T5849] veth0_macvtap: entered promiscuous mode
[   66.994866][ T5849] veth1_macvtap: entered promiscuous mode
[   67.008052][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.038179][ T5855] veth0_vlan: entered promiscuous mode
[   67.044285][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.056510][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.081692][ T5864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.087810][ T5855] veth1_vlan: entered promiscuous mode
[   67.091263][ T5864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.102494][ T5864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.111339][ T5852] veth0_vlan: entered promiscuous mode
[   67.116529][ T5864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.129950][ T5852] veth1_vlan: entered promiscuous mode
[   67.199250][ T5855] veth0_macvtap: entered promiscuous mode
[   67.230234][ T5855] veth1_macvtap: entered promiscuous mode
[   67.236832][ T4658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.239369][ T4658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.250464][ T5852] veth0_macvtap: entered promiscuous mode
[   67.269996][ T4658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.271388][ T5852] veth1_macvtap: entered promiscuous mode
[   67.272461][ T4658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.289423][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.293512][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.306748][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.313664][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.325110][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.330242][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.333952][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.335172][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.348987][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.352448][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.360694][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.392046][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.395114][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.420150][ T5918] bridge_slave_0: left allmulticast mode
[   67.431778][ T5918] bridge_slave_0: left promiscuous mode
[   67.434256][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.441174][ T5918] bridge_slave_1: left allmulticast mode
[   67.443487][ T5918] bridge_slave_1: left promiscuous mode
[   67.446358][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.453362][ T5919] netlink: 'syz.1.2': attribute type 8 has an invalid length.
[   67.458090][ T5918] bond0: (slave bond_slave_0): Releasing backup interface
[   67.463794][ T5918] bond0: (slave bond_slave_1): Releasing backup interface
[   67.475618][ T5918] team0: Port device team_slave_0 removed
[   67.483732][ T5918] team0: Port device team_slave_1 removed
[   67.486478][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.489409][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.493683][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.497636][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.563242][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.570551][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.605916][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.617149][ T4658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.619740][ T4658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.644935][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.665183][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.678387][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.791054][ T3076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.796195][ T3076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.933618][ T5927] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   67.994422][ T5931] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5'.
[   68.000021][ T5931] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5'.
[   68.003678][ T5931] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5'.
[   68.112015][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.118025][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   68.160464][ T5931] Zero length message leads to an empty skb
[   68.250107][ T5939] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.317660][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   68.398148][ T5946] bridge_slave_1: left allmulticast mode
[   68.403548][ T5946] bridge_slave_1: left promiscuous mode
[   68.410996][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.420261][ T5946] bridge_slave_0: left allmulticast mode
[   68.422837][ T5946] bridge_slave_0: left promiscuous mode
[   68.425530][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.747115][ T5236] Bluetooth: hci1: command tx timeout
[   68.747668][ T5859] Bluetooth: hci2: command tx timeout
[   69.322630][ T5981] v: renamed from ip6_vti0 (while UP)
[   69.342631][ T5968] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET)
[   69.423567][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   69.662178][ T5993] tipc: Started in network mode
[   69.663910][ T5993] tipc: Node identity 0ef79114133b, cluster identity 4711
[   69.666782][ T5993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.669364][ T5999] syzkaller0: entered promiscuous mode
[   69.671086][ T5999] syzkaller0: entered allmulticast mode
[   69.690207][ T6002] tipc: Resetting bearer <eth:syzkaller0>
[   69.699025][ T5992] tipc: Resetting bearer <eth:syzkaller0>
[   69.712001][ T5992] tipc: Disabling bearer <eth:syzkaller0>
[   69.714644][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   70.021776][ T5902] IPVS: starting estimator thread 0...
[   70.033436][ T6017] syzkaller1: entered promiscuous mode
[   70.035456][ T6017] syzkaller1: entered allmulticast mode
[   70.106451][ T6018] IPVS: using max 61 ests per chain, 146400 per kthread
[   70.384771][ T6028] syzkaller1: entered promiscuous mode
[   70.389531][ T6028] syzkaller1: entered allmulticast mode
[   70.446520][ T6030] syzkaller1: entered promiscuous mode
[   70.448374][ T6030] syzkaller1: entered allmulticast mode
[   70.503612][ T6032] gretap0: entered promiscuous mode
[   70.509705][ T6032] 0{X: renamed from gretap0
[   70.512710][ T6032] 0{X: left promiscuous mode
[   70.514292][ T6032] 0{X: entered allmulticast mode
[   70.518831][ T6032] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   70.826893][ T5859] Bluetooth: hci1: command tx timeout
[   70.838063][ T5859] Bluetooth: hci2: command tx timeout
[   70.992359][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.091075][ T6051] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   71.170695][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.429327][ T6066] netlink: 'syz.0.48': attribute type 4 has an invalid length.
[   71.480047][ T6068] netlink: 'syz.0.48': attribute type 4 has an invalid length.
[   72.559397][ T6075] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   72.614446][ T6075] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.633378][ T6080] __nla_validate_parse: 7 callbacks suppressed
[   72.633391][ T6080] netlink: 248 bytes leftover after parsing attributes in process `syz.0.53'.
[   72.908791][ T5859] Bluetooth: hci2: command tx timeout
[   72.908863][ T5236] Bluetooth: hci1: command tx timeout
[   72.983222][ T6105] netlink: 'syz.0.56': attribute type 10 has an invalid length.
[   73.004442][ T6105] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.038449][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.051202][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.067337][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.071580][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.225131][ T6115] netlink: 72 bytes leftover after parsing attributes in process `syz.0.61'.
[   73.257278][ T6115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.61'.
[   74.022620][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'.
[   74.031296][ T6145] netlink: 'syz.2.67': attribute type 21 has an invalid length.
[   74.136143][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.201837][ T6145] netlink: 'syz.2.67': attribute type 6 has an invalid length.
[   74.210842][ T6145] netlink: 64 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.220952][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.558157][ T6181] ip6erspan0: entered allmulticast mode
[   74.572500][ T6179] tipc: Started in network mode
[   74.578731][ T6179] tipc: Node identity 3a06bd54f75a, cluster identity 4711
[   74.598877][ T6179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.612056][ T6179] syzkaller0: entered promiscuous mode
[   74.620797][ T6179] syzkaller0: entered allmulticast mode
[   74.630342][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'.
[   74.728173][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'.
[   74.905303][ T6201] tipc: Resetting bearer <eth:syzkaller0>
[   74.929700][ T6229] netlink: 'syz.2.76': attribute type 1 has an invalid length.
[   74.965717][ T6201] tipc: Disabling bearer <eth:syzkaller0>
[   74.995427][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.150326][ T6248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.80'.
[   75.153131][ T6248] nbd: must specify at least one socket
[   75.246816][ T6253] netlink: 'syz.2.83': attribute type 4 has an invalid length.
[   76.068172][ T6278] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   76.074898][ T6278] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   76.139411][ T6282] macvlan2: entered promiscuous mode
[   76.142702][ T6282] macvlan2: entered allmulticast mode
[   77.549269][ T6309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.698329][ T6319] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   77.705031][ T6321] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   77.712051][ T6309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.769457][ T6321] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.781640][ T6317] bond3: (slave geneve3): making interface the new active one
[   77.787739][ T6317] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   77.835241][ T6309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.911251][ T6309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.029083][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.042098][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.066668][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.069259][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.122716][ T6348] bond0: option ad_select: unable to set because the bond device is up
[   78.249436][ T6354] batman_adv: batadv0: Adding interface: gretap1
[   78.261913][ T6354] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.299506][ T6354] batman_adv: batadv0: Interface activated: gretap1
[   78.402157][ T6359] netlink: 'syz.0.120': attribute type 21 has an invalid length.
[   78.439593][ T6359] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   79.064125][ T5856] IPVS: starting estimator thread 0...
[   79.177785][ T6393] IPVS: using max 62 ests per chain, 148800 per kthread
[   79.220060][ T6400] Bluetooth: MGMT ver 1.23
[   79.238294][ T6401] __nla_validate_parse: 3 callbacks suppressed
[   79.238309][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.127'.
[   79.280992][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'.
[   79.331209][   T12] IPVS: stop unused estimator thread 0...
[   79.345621][ T6406] netlink: 'syz.0.128': attribute type 10 has an invalid length.
[   79.351486][ T6406] syz_tun: entered promiscuous mode
[   79.370426][ T6406] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   79.380102][ T6406] netlink: 'syz.0.128': attribute type 10 has an invalid length.
[   79.395331][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.399445][ T6406] team0: Port device bond0 added
[   79.916586][ T6451] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   79.944093][ T6451] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.967861][ T6454] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   79.973037][ T6454] warning: `syz.2.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.993173][ T6454] bond0: (slave bond_slave_0): Releasing backup interface
[   79.998905][ T6454] bond0: (slave bond_slave_1): Releasing backup interface
[   80.010560][ T6454] team0: Port device team_slave_0 removed
[   80.020696][ T6454] team0: Port device team_slave_1 removed
[   80.071969][ T6454] netlink: 'syz.2.134': attribute type 4 has an invalid length.
[   80.104548][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[   80.126846][ T6454] netlink: 120 bytes leftover after parsing attributes in process `syz.2.134'.
[   80.134422][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[   80.251899][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[   80.255530][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[   81.231157][ T2205] cfg80211: failed to load regulatory.db
[   81.349665][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'.
[   81.865882][ T6584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.955076][ T6584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.019226][ T6584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.102075][ T6584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.204282][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.232427][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.244624][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.257426][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.396724][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'.
[   82.408781][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'.
[   82.500973][ T6621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.822864][ T6638] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   82.830461][ T6638] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   82.835571][ T6638] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   83.542809][ T6707] netlink: 'syz.2.200': attribute type 10 has an invalid length.
[   83.548975][ T6707] team0: Device ipvlan1 failed to register rx_handler
[   83.622102][ T6713] netlink: 'syz.2.202': attribute type 11 has an invalid length.
[   83.625403][ T6713] netlink: 'syz.2.202': attribute type 11 has an invalid length.
[   83.638639][ T6713] IPv6: NLM_F_CREATE should be specified when creating new route
[   83.641811][ T6713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.644526][ T6713] IPv6: NLM_F_CREATE should be set when creating new route
[   83.646959][ T6713] IPv6: NLM_F_CREATE should be set when creating new route
[   83.649308][ T6713] IPv6: NLM_F_CREATE should be set when creating new route
[   83.864773][ T6721] vlan2: entered promiscuous mode
[   83.867782][ T6721] dummy0: entered promiscuous mode
[   84.082010][ T6736] sock: sock_set_timeout: `syz.1.209' (pid 6736) tries to set negative timeout
[   85.098893][ T6749] netlink: 'syz.1.215': attribute type 10 has an invalid length.
[   85.103862][ T6749] team0: Device ipvlan1 failed to register rx_handler
[   85.992253][ T6754] __nla_validate_parse: 14 callbacks suppressed
[   85.992275][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'.
[   86.172948][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'.
[   86.181333][ T6771] team_slave_0: entered promiscuous mode
[   86.183280][ T6771] team_slave_1: entered promiscuous mode
[   86.185138][ T6771] bond_slave_0: entered promiscuous mode
[   86.187063][ T6771] bond_slave_1: entered promiscuous mode
[   86.188954][ T6771] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   86.226126][ T6771] team_slave_0: left promiscuous mode
[   86.228060][ T6771] team_slave_1: left promiscuous mode
[   86.229858][ T6771] bond_slave_0: left promiscuous mode
[   86.231542][ T6771] bond_slave_1: left promiscuous mode
[   86.233384][ T6771] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   86.263504][ T6777] ieee802154 phy0 wpan0: encryption failed: -22
[   86.281224][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[   86.286235][ T6777] netlink: 15 bytes leftover after parsing attributes in process `syz.1.225'.
[   86.352613][ T6782] netlink: 'syz.0.229': attribute type 1 has an invalid length.
[   86.386764][ T6782] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   86.580045][ T6793] netlink: 'syz.1.231': attribute type 1 has an invalid length.
[   86.658807][ T6793] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.262221][ T6811] bond0: option packets_per_slave: invalid value (18446744071562067968)
[   87.272390][ T6811] bond0: option packets_per_slave: allowed values 0 - 65535
[   87.281543][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[   87.433856][ T6824] bridge0: port 1(veth0_to_bond) entered blocking state
[   87.436756][ T6824] bridge0: port 1(veth0_to_bond) entered disabled state
[   87.439058][ T6824] veth0_to_bond: entered allmulticast mode
[   87.442246][ T6824] veth0_to_bond: entered promiscuous mode
[   87.838126][ T6846] netlink: 'syz.2.242': attribute type 1 has an invalid length.
[   87.874737][ T6846] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[   87.894482][ T6846] veth0_to_bond: left allmulticast mode
[   87.907544][ T6846] veth0_to_bond: left promiscuous mode
[   87.909493][ T6846] bridge0: port 1(veth0_to_bond) entered disabled state
[   87.923462][ T6846] bond0: (slave ip6gretap2): Releasing backup interface
[   89.831810][ T6935] netlink: 'syz.1.253': attribute type 4 has an invalid length.
[   89.834996][ T6935] netlink: 152 bytes leftover after parsing attributes in process `syz.1.253'.
[   89.848223][ T6935] : renamed from bond0 (while UP)
[   91.115450][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.261'.
[   91.118283][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'.
[   91.122863][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'.
[   91.128041][ T6967] netlink: 1 bytes leftover after parsing attributes in process `syz.2.262'.
[   91.185596][ T6969] batman_adv: batadv0: Adding interface: ip6gretap3
[   91.189981][ T6969] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.200805][ T6969] batman_adv: batadv0: Interface activated: ip6gretap3
[   91.212640][ T6969] netlink: 56 bytes leftover after parsing attributes in process `syz.0.263'.
[   91.405364][ T6972] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   91.410089][ T6972] ip6erspan0: left allmulticast mode
[   91.426245][ T5864] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.436417][ T5864] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.439391][ T5864] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.443769][ T5864] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.551447][ T6982] netlink: 256 bytes leftover after parsing attributes in process `syz.1.267'.
[   92.423065][ T7004] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   92.429331][ T5916] IPVS: starting estimator thread 0...
[   92.516741][ T7009] IPVS: using max 41 ests per chain, 98400 per kthread
[   92.532890][ T7011] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.618210][ T7011] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.702474][ T7011] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.762362][ T7021] netlink: 'syz.1.272': attribute type 13 has an invalid length.
[   92.771009][ T7011] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.787946][ T7021] netlink: 'syz.1.272': attribute type 17 has an invalid length.
[   92.802528][ T7021] 0{X: left allmulticast mode
[   92.927134][ T7021] 8021q: adding VLAN 0 to HW filter on device 
[   92.978870][ T7021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.137135][ T5864] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.153753][ T5864] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.157921][ T5864] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.173438][ T5915] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.231866][ T7051] netlink: 'syz.1.277': attribute type 16 has an invalid length.
[   93.235677][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'.
[   93.399629][ T7063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.280'.
[   93.406425][ T7063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.280'.
[   93.453144][ T7065] netlink: 'syz.0.281': attribute type 12 has an invalid length.
[   93.480133][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'.
[   93.574983][ T7075] netlink: 'syz.0.286': attribute type 6 has an invalid length.
[   93.631371][ T5856] IPVS: starting estimator thread 0...
[   93.716494][ T7083] IPVS: using max 47 ests per chain, 112800 per kthread
[   94.284101][ T7108] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   94.300148][ T7108] bond0: (slave syz_tun): Releasing backup interface
[   94.318227][ T7108] team0: Port device bond0 removed
[   94.324276][ T7108] bridge_slave_0: left allmulticast mode
[   94.327880][ T7108] bridge_slave_0: left promiscuous mode
[   94.330312][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.336574][ T7108] bridge_slave_1: left allmulticast mode
[   94.338873][ T7108] bridge_slave_1: left promiscuous mode
[   94.341322][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.353131][ T7108] bond0: (slave bond_slave_0): Releasing backup interface
[   94.367564][ T7108] bond0: (slave bond_slave_1): Releasing backup interface
[   94.382240][ T7108] team0: Port device team_slave_0 removed
[   94.405801][ T7108] team0: Port device team_slave_1 removed
[   94.416974][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.419975][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.425255][ T7108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.431652][ T7108] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.444738][ T7108] bond0: (slave wlan1): Releasing backup interface
[   94.458153][ T7108] batman_adv: batadv0: Interface deactivated: gretap1
[   94.460862][ T7108] batman_adv: batadv0: Removing interface: gretap1
[   94.479321][ T7108] bond1: (slave ip6gretap2): Releasing backup interface
[   94.486928][ T7108] batman_adv: batadv0: Interface deactivated: ip6gretap3
[   94.489780][ T7108] batman_adv: batadv0: Removing interface: ip6gretap3
[   94.872610][ T7139] netlink: 'syz.2.304': attribute type 3 has an invalid length.
[   95.258771][ T7158] Bluetooth: MGMT ver 1.23
[   95.377985][ T7161] netlink: 'syz.1.311': attribute type 6 has an invalid length.
[   95.381355][ T7161] netlink: 'syz.1.311': attribute type 4 has an invalid length.
[   95.385218][ T7161] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   95.514262][ T7165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.579954][ T7165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.655387][ T7165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.717409][ T7165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.805158][ T5915] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.820426][ T5915] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.833830][ T5915] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.846963][ T5915] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.931645][ T7170] syzkaller0: entered promiscuous mode
[   95.933476][ T7170] syzkaller0: entered allmulticast mode
[   96.126573][ T7178] tipc: Started in network mode
[   96.128759][ T7178] tipc: Node identity 9a53caffad4, cluster identity 4711
[   96.131526][ T7178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.135022][ T7178] syzkaller0: entered promiscuous mode
[   96.138747][ T7178] syzkaller0: entered allmulticast mode
[   96.157857][ T7178] tipc: Resetting bearer <eth:syzkaller0>
[   96.161766][ T7177] tipc: Resetting bearer <eth:syzkaller0>
[   96.172926][ T7177] tipc: Disabling bearer <eth:syzkaller0>
[   96.369816][ T7185] __nla_validate_parse: 10 callbacks suppressed
[   96.369829][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'.
[   96.380890][ T7186] netlink: 'syz.2.321': attribute type 39 has an invalid length.
[   96.380945][ T7187] netlink: 'syz.2.321': attribute type 39 has an invalid length.
[   97.012861][ T7209] sock: sock_set_timeout: `syz.2.329' (pid 7209) tries to set negative timeout
[   98.172410][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'.
[   98.179646][ T7234] netlink: 152 bytes leftover after parsing attributes in process `syz.2.334'.
[   98.294302][ T7238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.341'.
[  100.054387][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'.
[  100.137469][ T7249] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  100.214883][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'.
[  100.220848][ T7254] netlink: 'syz.1.339': attribute type 10 has an invalid length.
[  100.223978][ T7254] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  100.228248][ T7254] wlan1: mtu less than device minimum
[  100.230433][ T7254] : (slave wlan1): Error -22 calling dev_set_mtu
[  100.254742][ T7254] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.259987][ T7254] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.410870][ T7263] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  101.882081][ T7267] !: renamed from dummy0 (while UP)
[  102.261419][ T7313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'.
[  102.267700][ T7313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.355'.
[  102.305272][ T7313] bond3: (slave geneve3): Releasing active interface
[  102.413729][ T7323] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  102.509943][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'.
[  103.683474][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[  103.729194][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'.
[  103.803760][ T7334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.361'.
[  103.819905][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'.
[  103.837366][ T7334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.361'.
[  103.904931][ T7334] netlink: 'syz.1.361': attribute type 10 has an invalid length.
[  103.917050][ T7334] wlan1: mtu less than device minimum
[  103.919277][ T7334] : (slave wlan1): Error -22 calling dev_set_mtu
[  104.608306][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'.
[  104.654329][ T7351] netlink: 'syz.0.369': attribute type 1 has an invalid length.
[  104.672824][ T7351] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.696195][ T7351] bond2: (slave geneve2): making interface the new active one
[  104.701242][ T7351] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  104.713743][ T7351] bond2: entered promiscuous mode
[  104.715569][ T7351] geneve2: entered promiscuous mode
[  104.730241][ T7354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.370'.
[  105.829090][ T7390] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.209347][ T7407] netlink: 'syz.0.386': attribute type 10 has an invalid length.
[  106.263545][ T7407] 8021q: adding VLAN 0 to HW filter on device team0
[  106.268884][ T7407] bond0: (slave team0): Enslaving as an active interface with an up link
[  106.576663][ T7414] netlink: 'syz.2.388': attribute type 3 has an invalid length.
[  106.749353][ T7418] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[  106.849619][ T7418] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.112414][ T7433] netlink: 'syz.1.394': attribute type 15 has an invalid length.
[  107.131615][ T7433] netlink: 'syz.1.394': attribute type 18 has an invalid length.
[  107.153800][ T7433] netlink: 'syz.1.394': attribute type 15 has an invalid length.
[  107.163221][ T7433] netlink: 'syz.1.394': attribute type 18 has an invalid length.
[  107.169935][ T7433] netlink: 'syz.1.394': attribute type 15 has an invalid length.
[  107.177668][ T7433] netlink: 'syz.1.394': attribute type 18 has an invalid length.
[  107.185729][ T7433] netlink: 'syz.1.394': attribute type 15 has an invalid length.
[  107.272835][ T7433] __nla_validate_parse: 78 callbacks suppressed
[  107.272854][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.303229][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.314360][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.328052][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.347351][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.350804][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.377402][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.380988][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.396431][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.399905][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'.
[  107.643454][ T7464] netlink: zone id is out of range
[  107.645521][ T7464] netlink: zone id is out of range
[  107.690196][ T7464] netlink: zone id is out of range
[  107.720967][ T7464] netlink: zone id is out of range
[  107.757933][ T7464] netlink: zone id is out of range
[  107.766138][ T7464] netlink: zone id is out of range
[  107.768376][ T7464] netlink: zone id is out of range
[  107.770473][ T7464] netlink: zone id is out of range
[  107.772295][ T7464] netlink: zone id is out of range
[  107.774476][ T7464] netlink: zone id is out of range
[  108.440107][ T7482] syzkaller1: entered promiscuous mode
[  108.442656][ T7482] syzkaller1: entered allmulticast mode
[  109.078813][ T7501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.087373][ T7501] syzkaller0: entered promiscuous mode
[  109.089668][ T7501] syzkaller0: entered allmulticast mode
[  109.128579][ T7500] tipc: Resetting bearer <eth:syzkaller0>
[  109.156767][ T7500] tipc: Disabling bearer <eth:syzkaller0>
[  109.588339][ T7514] lo: entered allmulticast mode
[  109.604086][ T7514] tunl0: entered allmulticast mode
[  109.618846][ T7514] gre0: entered allmulticast mode
[  109.652728][ T7514] gretap0: entered allmulticast mode
[  109.677748][ T7514] erspan0: entered allmulticast mode
[  109.698005][ T7514] ip_vti0: entered allmulticast mode
[  109.714883][ T7514] v: entered allmulticast mode
[  109.723804][ T7514] sit0: entered allmulticast mode
[  109.751560][ T7514] ip6tnl0: entered allmulticast mode
[  109.758383][ T7514] ip6gre0: entered allmulticast mode
[  109.767136][ T7514] syz_tun: left promiscuous mode
[  109.769625][ T7514] syz_tun: entered allmulticast mode
[  109.771866][ T7514] ip6gretap0: entered allmulticast mode
[  109.778175][ T7514] bridge0: entered allmulticast mode
[  109.784746][ T7514] bond0: entered allmulticast mode
[  109.786712][ T7514] team0: entered allmulticast mode
[  109.792780][ T7514] !: entered allmulticast mode
[  109.800451][ T7514] nlmon0: entered allmulticast mode
[  109.803209][ T7514] caif0: entered allmulticast mode
[  109.807139][ T7514] batadv0: entered allmulticast mode
[  109.813311][ T7514] vxcan0: entered allmulticast mode
[  109.815780][ T7514] vxcan1: entered allmulticast mode
[  109.820737][ T7514] veth0: entered allmulticast mode
[  109.827665][ T7514] veth1: entered allmulticast mode
[  109.833797][ T7514] wg0: entered allmulticast mode
[  109.842427][ T7514] wg1: entered allmulticast mode
[  109.848838][ T7514] wg2: entered allmulticast mode
[  109.857074][ T7514] veth0_to_bridge: entered allmulticast mode
[  109.865802][ T7514] bridge_slave_0: entered allmulticast mode
[  109.877156][ T7514] veth1_to_bridge: entered allmulticast mode
[  109.884564][ T7514] bridge_slave_1: entered allmulticast mode
[  109.892676][ T7514] veth0_to_bond: entered allmulticast mode
[  109.901590][ T7514] bond_slave_0: entered allmulticast mode
[  109.905073][ T7514] veth1_to_bond: entered allmulticast mode
[  109.911734][ T7514] bond_slave_1: entered allmulticast mode
[  109.913932][ T7514] veth0_to_team: entered allmulticast mode
[  109.918972][ T7514] team_slave_0: entered allmulticast mode
[  109.922799][ T7514] veth1_to_team: entered allmulticast mode
[  109.930264][ T7514] team_slave_1: entered allmulticast mode
[  109.933581][ T7514] veth0_to_batadv: entered allmulticast mode
[  109.941944][ T7514] batadv_slave_0: entered allmulticast mode
[  109.947529][ T7514] veth1_to_batadv: entered allmulticast mode
[  109.954767][ T7514] batadv_slave_1: entered allmulticast mode
[  109.960962][ T7514] xfrm0: entered allmulticast mode
[  109.968018][ T7514] veth0_to_hsr: entered allmulticast mode
[  109.974833][ T7514] hsr_slave_0: entered allmulticast mode
[  109.982043][ T7514] veth1_to_hsr: entered allmulticast mode
[  109.992822][ T7514] hsr_slave_1: entered allmulticast mode
[  109.999560][ T7514] hsr0: entered allmulticast mode
[  110.004076][ T7514] veth1_virt_wifi: entered allmulticast mode
[  110.013098][ T7514] veth0_virt_wifi: entered allmulticast mode
[  110.022821][ T7514] veth1_macvtap: entered allmulticast mode
[  110.032023][ T7514] veth0_macvtap: entered allmulticast mode
[  110.038999][ T7514] macvtap0: entered allmulticast mode
[  110.045322][ T7514] macsec0: entered allmulticast mode
[  110.050805][ T7514] geneve0: entered allmulticast mode
[  110.058779][ T7514] geneve1: entered allmulticast mode
[  110.063621][ T7514] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  110.065746][ T7514] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  110.069205][ T7514] ieee802154 phy1 wpan1: entered allmulticast mode
[  110.071761][ T7514] gretap1: entered allmulticast mode
[  110.078493][ T7514] ip6erspan0: entered allmulticast mode
[  110.087553][ T7514] ip6gre1: entered allmulticast mode
[  110.089565][ T7514] ip6gretap1: entered allmulticast mode
[  110.091671][ T7514] ip6tnl1: entered allmulticast mode
[  110.095253][ T7514] bond1: entered allmulticast mode
[  110.098517][ T7514] ip6gretap2: entered allmulticast mode
[  110.101089][ T7514] ip6gretap3: entered allmulticast mode
[  110.105419][ T7514] netdevsim netdevsim0 eth0: entered allmulticast mode
[  110.107855][ T7514] netdevsim netdevsim0 eth1: entered allmulticast mode
[  110.110353][ T7514] netdevsim netdevsim0 eth2: entered allmulticast mode
[  110.112693][ T7514] netdevsim netdevsim0 eth3: entered allmulticast mode
[  110.115214][ T7514] vxlan0: entered allmulticast mode
[  110.117577][ T7514] bond2: left promiscuous mode
[  110.119507][ T7514] geneve2: left promiscuous mode
[  110.121798][ T7514] bond2: entered allmulticast mode
[  110.123838][ T7514] geneve2: entered allmulticast mode
[  110.138409][ T5880] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.141697][ T5880] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.144807][ T5880] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.148262][ T5880] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.219138][ T7522] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  111.335257][ T7545] team0: Port device dummy0 added
[  111.610224][ T7559] syzkaller1: entered promiscuous mode
[  111.611955][ T7559] syzkaller1: entered allmulticast mode
[  111.711730][ T7561] syzkaller1: entered promiscuous mode
[  111.722254][ T7561] syzkaller1: entered allmulticast mode
[  112.345345][ T7577] __nla_validate_parse: 53 callbacks suppressed
[  112.345361][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'.
[  112.431474][   T33] audit: type=1800 audit(1755040572.362:2): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.443" name="memory.events" dev="tmpfs" ino=741 res=0 errno=0
[  113.468092][ T7626] net_ratelimit: 28 callbacks suppressed
[  113.468137][ T7626] openvswitch: netlink: Actions may not be safe on all matching packets
[  113.706726][ T7639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.716981][ T7639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.763938][ T7639] netlink: 56 bytes leftover after parsing attributes in process `syz.1.462'.
[  113.766944][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'.
[  114.634919][ T7669] validate_nla: 128 callbacks suppressed
[  114.634993][ T7669] netlink: 'syz.0.470': attribute type 3 has an invalid length.
[  114.704247][ T7670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.470'.
[  114.774070][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[  114.779880][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.471'.
[  114.793540][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'.
[  114.907728][   T33] audit: type=1107 audit(1755040574.842:3): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='h
[  114.907728][   T33] zj5M~I(#x8`'żtVj-8E	wn76sԊwm&c[ᡌ=qAcJJav[%*׶[w~8C^gl\wuhnW%ft`ZNoؘJ'u雹Y|]'
[  114.941617][ T7684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'.
[  114.984198][ T7684] netlink: 240 bytes leftover after parsing attributes in process `syz.0.474'.
[  114.989874][ T7684] netlink: 48 bytes leftover after parsing attributes in process `syz.0.474'.
[  115.115018][ T7693] netlink: 'syz.0.478': attribute type 1 has an invalid length.
[  115.159743][ T7693] bond3: entered promiscuous mode
[  115.161321][ T7693] bond3: entered allmulticast mode
[  115.165590][ T7693] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.290301][ T7707] pim6reg1: entered promiscuous mode
[  115.292569][ T7707] pim6reg1: entered allmulticast mode
[  116.058573][ T7753] batadv0: entered promiscuous mode
[  116.369781][ T7765] netlink: 'syz.0.501': attribute type 7 has an invalid length.
[  116.375685][ T7765] netlink: 'syz.0.501': attribute type 8 has an invalid length.
[  116.500519][ T7777] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  116.507323][ T7778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.515099][ T7780] tipc: Resetting bearer <eth:syzkaller0>
[  116.525744][ T7774] tipc: Disabling bearer <eth:syzkaller0>
[  116.574111][ T7787] netlink: 'syz.2.507': attribute type 1 has an invalid length.
[  116.594661][ T7787] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.616726][ T7787] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.619060][ T7787] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  116.623133][ T7787] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  116.673329][ T7793] veth7: entered promiscuous mode
[  116.678555][ T7793] bond3: (slave veth7): Enslaving as an active interface with a down link
[  116.690225][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.693554][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.739063][ T7799] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  116.832416][ T5915] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  117.634039][ T7833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.637716][ T7833] syzkaller0: entered promiscuous mode
[  117.640749][ T7833] syzkaller0: entered allmulticast mode
[  117.735467][ T7841] tipc: Resetting bearer <eth:syzkaller0>
[  117.825584][ T7828] tipc: Resetting bearer <eth:syzkaller0>
[  117.855414][ T7828] tipc: Disabling bearer <eth:syzkaller0>
[  117.991900][ T7857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.995235][ T7857] syzkaller0: entered promiscuous mode
[  117.998393][ T7857] syzkaller0: entered allmulticast mode
[  118.008796][ T7855] __nla_validate_parse: 13 callbacks suppressed
[  118.008816][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'.
[  118.017928][ T7855] netlink: 34 bytes leftover after parsing attributes in process `syz.2.524'.
[  118.045127][ T7857] tipc: Resetting bearer <eth:syzkaller0>
[  118.057157][ T7857] pim6reg9: entered allmulticast mode
[  118.061687][ T7856] tipc: Resetting bearer <eth:syzkaller0>
[  118.082696][ T7856] tipc: Disabling bearer <eth:syzkaller0>
[  118.195871][ T7867] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  118.264886][ T7868] netlink: 'syz.2.526': attribute type 27 has an invalid length.
[  119.597492][ T7884] netlink: 'syz.0.532': attribute type 1 has an invalid length.
[  119.600589][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.532'.
[  119.702970][ T7890] netlink: 'syz.1.535': attribute type 9 has an invalid length.
[  119.708300][ T7890] netlink: 'syz.1.535': attribute type 7 has an invalid length.
[  119.712702][ T7890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.535'.
[  119.752017][ T7895] bond0: (slave team0): Releasing backup interface
[  119.757999][ T7895] bond2: (slave geneve2): Releasing active interface
[  119.781026][ T7895] netlink: 'syz.0.536': attribute type 10 has an invalid length.
[  119.784319][ T7895] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  119.786257][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  119.793527][ T7895] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  119.797279][ T7895] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.863392][ T7900] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  121.029167][ T7913] netlink: 'syz.0.543': attribute type 1 has an invalid length.
[  121.062418][ T7913] bond4: (slave gretap2): making interface the new active one
[  121.066873][ T7913] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  121.074293][ T7913] vlan0: entered allmulticast mode
[  121.077129][ T7913] bond4: entered allmulticast mode
[  121.078870][ T7913] gretap2: entered allmulticast mode
[  121.081496][ T7913] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  121.089497][ T7918] netlink: 'syz.1.545': attribute type 39 has an invalid length.
[  121.635444][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'.
[  121.672073][ T7925] netlink: 92 bytes leftover after parsing attributes in process `syz.0.547'.
[  121.697836][ T7927] netlink: 'syz.1.548': attribute type 33 has an invalid length.
[  121.701163][ T7927] netlink: 152 bytes leftover after parsing attributes in process `syz.1.548'.
[  121.710666][ T7925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.710760][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'.
[  121.714123][ T7925] syzkaller0: entered promiscuous mode
[  121.720833][ T7925] syzkaller0: entered allmulticast mode
[  121.750703][ T7925] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  121.763324][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[  121.768253][ T7924] tipc: Resetting bearer <eth:syzkaller0>
[  121.779673][ T7924] tipc: Disabling bearer <eth:syzkaller0>
[  121.890779][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'.
[  122.674457][ T7973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.678477][ T7973] syzkaller0: entered promiscuous mode
[  122.680261][ T7973] syzkaller0: entered allmulticast mode
[  122.686197][ T7972] tipc: Resetting bearer <eth:syzkaller0>
[  122.701401][ T7972] tipc: Disabling bearer <eth:syzkaller0>
[  123.844604][ T7995] __nla_validate_parse: 3 callbacks suppressed
[  123.844623][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[  123.853486][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[  123.860922][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[  123.865140][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[  124.125539][ T8017] syzkaller1: entered promiscuous mode
[  124.132716][ T8017] syzkaller1: entered allmulticast mode
[  124.140531][ T8017] netlink: 270 bytes leftover after parsing attributes in process `syz.0.576'.
[  124.143766][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'.
[  124.279522][ T8019] netlink: 'syz.0.577': attribute type 10 has an invalid length.
[  124.365169][ T8024] bond0: (slave wlan1): Releasing backup interface
[  124.369941][ T8024] bond4: (slave gretap2): Releasing active interface
[  124.372274][ T8024] gretap2: left allmulticast mode
[  124.385390][ T8024] netlink: 'syz.0.579': attribute type 10 has an invalid length.
[  124.388423][ T8024] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  124.392301][ T8024] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  124.395673][ T8024] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  124.403088][ T8024] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.407566][ T8024] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.634822][ T8028] bridge0: failed insert local address into bridge forwarding table
[  124.691455][ T8036] netlink: 'syz.1.584': attribute type 2 has an invalid length.
[  124.709123][ T8036] netlink: 264 bytes leftover after parsing attributes in process `syz.1.584'.
[  124.712807][ T8036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.584'.
[  124.722249][ T8036] netlink: 'syz.1.584': attribute type 2 has an invalid length.
[  124.781394][ T8042] team0: Port device dummy0 removed
[  124.784411][ T8042] bond3: (slave veth7): Releasing active interface
[  124.795855][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.587'.
[  124.800846][ T8042] netlink: 'syz.2.587': attribute type 1 has an invalid length.
[  124.914742][ T8046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.248124][ T8055] ip6gre2: entered allmulticast mode
[  125.515795][ T8061] netlink: 256 bytes leftover after parsing attributes in process `syz.0.591'.
[  125.534601][ T8061] lo speed is unknown, defaulting to 1000
[  125.539500][ T8061] lo speed is unknown, defaulting to 1000
[  125.543638][ T8061] lo speed is unknown, defaulting to 1000
[  125.582255][ T8064] lo: left allmulticast mode
[  125.585995][ T8064] tunl0: left allmulticast mode
[  125.638137][ T8064] gre0: left allmulticast mode
[  125.643859][ T8064] gretap0: left allmulticast mode
[  125.663575][ T8064] erspan0: left allmulticast mode
[  125.681802][ T8064] ip_vti0: left allmulticast mode
[  125.692167][ T8064] v: left allmulticast mode
[  125.697645][ T8064] sit0: left allmulticast mode
[  125.708532][ T8064] ip6tnl0: left allmulticast mode
[  125.715800][ T8064] ip6gre0: left allmulticast mode
[  125.723851][ T8064] syz_tun: left allmulticast mode
[  125.732911][ T8064] ip6gretap0: left allmulticast mode
[  125.747079][ T8064] bridge0: left allmulticast mode
[  125.752674][ T8064] bond0: left allmulticast mode
[  125.758096][ T8064] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  125.763539][ T8064] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.770115][ T8064] team0: left allmulticast mode
[  125.774436][ T8064] 8021q: adding VLAN 0 to HW filter on device team0
[  125.778573][ T8064] !: left allmulticast mode
[  125.782721][ T8064] nlmon0: left allmulticast mode
[  125.785584][ T8064] caif0: left allmulticast mode
[  125.789039][ T8064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.823368][ T8061] infiniband syz0: set active
[  125.826334][ T2205] lo speed is unknown, defaulting to 1000
[  125.828225][ T2205] syz0: Port: 1 Link ACTIVE
[  125.829966][ T8061] infiniband syz0: added lo
[  125.871987][ T8061] RDS/IB: syz0: added
[  125.873744][ T8061] smc: adding ib device syz0 with port count 1
[  125.875855][ T8061] smc:    ib device syz0 port 1 has pnetid 
[  125.881705][ T8061] lo speed is unknown, defaulting to 1000
[  125.917127][ T2205] lo speed is unknown, defaulting to 1000
[  126.065248][ T8061] lo speed is unknown, defaulting to 1000
[  126.257829][ T8061] lo speed is unknown, defaulting to 1000
[  126.293041][ T8064] syz.0.591 (8064) used greatest stack depth: 20224 bytes left
[  126.522742][ T8061] lo speed is unknown, defaulting to 1000
[  126.699345][ T8061] syz.0.591 (8061) used greatest stack depth: 20032 bytes left
[  127.010535][ T8125] wg1: entered promiscuous mode
[  127.278226][ T8130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.280948][ T8130] syzkaller0: entered promiscuous mode
[  127.282774][ T8130] syzkaller0: entered allmulticast mode
[  127.289705][ T8130] tipc: Resetting bearer <eth:syzkaller0>
[  127.318123][ T8131] tipc: Resetting bearer <eth:syzkaller0>
[  127.330633][ T8131] tipc: Disabling bearer <eth:syzkaller0>
[  127.466908][ T5236] Bluetooth: hci2: command tx timeout
[  127.487729][ T8145] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  128.728475][ T8164] lo speed is unknown, defaulting to 1000
[  128.757682][ T5864] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  128.807928][ T8167] 8021q: VLANs not supported on wlan1
[  128.950143][ T8171] lo speed is unknown, defaulting to 1000
[  129.139106][ T8176] netlink: 'syz.1.621': attribute type 1 has an invalid length.
[  129.192894][ T8176] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.210442][ T8176] bond0: entered promiscuous mode
[  129.268393][ T8167] lo speed is unknown, defaulting to 1000
[  129.525930][ T8183] lo speed is unknown, defaulting to 1000
[  130.071837][ T8192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.081816][ T8196] syzkaller0: entered promiscuous mode
[  130.083618][ T8196] syzkaller0: entered allmulticast mode
[  130.136488][ T8195] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  130.142469][ T8207] syzkaller0: entered promiscuous mode
[  130.145479][ T8207] syzkaller0: entered allmulticast mode
[  130.166936][ T8190] bond_slave_1: mtu less than device minimum
[  130.177317][ T8189] tipc: Resetting bearer <eth:syzkaller0>
[  130.185511][ T8189] tipc: Disabling bearer <eth:syzkaller0>
[  130.391459][ T8222] __nla_validate_parse: 4 callbacks suppressed
[  130.391474][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'.
[  130.432823][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  130.444337][ T8222] bridge2: the hash_elasticity option has been deprecated and is always 16
[  130.739960][ T8243] syzkaller0: entered promiscuous mode
[  130.741790][ T8243] syzkaller0: entered allmulticast mode
[  130.771170][ T8241] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  130.896988][    C1] Illegal XDP return value 16128 on prog  (id 228) dev veth1_to_bridge, expect packet loss!
[  130.914737][ T8248] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.922228][ T8248] bond2: entered allmulticast mode
[  130.924052][ T8248] bond2: entered promiscuous mode
[  130.926731][ T8248] macvlan2: left promiscuous mode
[  130.928500][ T8248] bond2: left promiscuous mode
[  130.930310][ T8248] macvlan2: left allmulticast mode
[  130.932138][ T8248] bond2: left allmulticast mode
[  130.934151][ T8248] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  130.971259][ T8248] bond0: left promiscuous mode
[  130.973263][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.020794][ T5915] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  131.035864][ T5915] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  131.059959][ T5915] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  131.063192][ T5915] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  131.090568][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'.
[  131.114384][ T8258] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  131.117814][ T8258] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  131.123060][ T8258] netlink: 224 bytes leftover after parsing attributes in process `syz.0.639'.
[  131.492921][ T8275] lo speed is unknown, defaulting to 1000
[  132.011657][ T8292] netlink: 220 bytes leftover after parsing attributes in process `syz.1.651'.
[  132.067708][ T8294] !: renamed from dummy0
[  132.211415][ T8308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.221406][ T8309] syzkaller0: entered promiscuous mode
[  132.223634][ T8309] syzkaller0: entered allmulticast mode
[  132.255689][ T8303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  132.270289][ T8309] tipc: Resetting bearer <eth:syzkaller0>
[  132.285642][ T8309] tipc: Disabling bearer <eth:syzkaller0>
[  132.357745][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'.
[  132.362003][ T8317] netlink: 'syz.0.655': attribute type 16 has an invalid length.
[  132.364873][ T8317] netlink: 'syz.0.655': attribute type 17 has an invalid length.
[  132.430101][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.450499][ T5856] lo speed is unknown, defaulting to 1000
[  132.456479][ T5856] syz0: Port: 1 Link DOWN
[  132.461480][ T5856] lo speed is unknown, defaulting to 1000
[  132.483650][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'.
[  132.532141][ T8325] netlink: 'syz.1.657': attribute type 4 has an invalid length.
[  132.534532][ T8325] netlink: 152 bytes leftover after parsing attributes in process `syz.1.657'.
[  132.544193][ T8325] netlink: 'syz.1.657': attribute type 10 has an invalid length.
[  132.702199][ T8336] netlink: 'syz.2.659': attribute type 10 has an invalid length.
[  132.708270][ T8336] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  132.718888][ T8336] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  132.722742][ T8336] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.845780][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'.
[  133.419484][ T8354] sock: sock_timestamping_bind_phc: sock not bind to device
[  133.424160][ T8354] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  133.662582][ T8365] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  133.672270][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'.
[  133.972224][ T8390] lo speed is unknown, defaulting to 1000
[  134.004272][ T8392] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  135.425124][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'.
[  135.677803][ T8418] sit0: entered promiscuous mode
[  135.680073][ T8418] sit0: entered allmulticast mode
[  138.375583][ T8429] bond0: (slave wlan1): Releasing backup interface
[  138.401979][ T8421] lo speed is unknown, defaulting to 1000
[  138.665914][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'.
[  138.751094][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'.
[  138.757099][ T8445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.693'.
[  138.805345][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'.
[  138.852692][ T8451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.856483][ T8451] syzkaller0: entered promiscuous mode
[  138.858504][ T8451] syzkaller0: entered allmulticast mode
[  138.878105][ T8451] tipc: Resetting bearer <eth:syzkaller0>
[  138.881742][ T8450] tipc: Resetting bearer <eth:syzkaller0>
[  138.891861][ T8450] tipc: Disabling bearer <eth:syzkaller0>
[  138.914373][ T8454] netlink: 'syz.0.698': attribute type 1 has an invalid length.
[  138.919767][ T8454] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.698'.
[  139.119669][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'.
[  139.143563][ T8467] ip6tnl1: entered promiscuous mode
[  139.145544][ T8467] ip6tnl1: entered allmulticast mode
[  139.153089][ T8467] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  139.348933][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'.
[  139.383917][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'.
[  139.385786][ T7649] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.391732][ T7649] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.414753][ T7649] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.452101][ T7649] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.637200][ T8496] netlink: 'syz.1.710': attribute type 4 has an invalid length.
[  139.914733][ T8500] lo speed is unknown, defaulting to 1000
[  140.419103][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'.
[  140.514613][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'.
[  140.695279][ T8520] lo speed is unknown, defaulting to 1000
[  141.233712][ T8558] netlink: 'syz.0.729': attribute type 13 has an invalid length.
[  141.237815][ T8558] netlink: 'syz.0.729': attribute type 17 has an invalid length.
[  141.270760][ T8558] sit0: left promiscuous mode
[  141.272625][ T8558] sit0: left allmulticast mode
[  141.311848][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.315341][ T8558] 8021q: adding VLAN 0 to HW filter on device team0
[  141.321905][ T8558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.332721][ T1277] lo speed is unknown, defaulting to 1000
[  141.334847][ T1277] syz0: Port: 1 Link ACTIVE
[  141.349104][ T1277] lo speed is unknown, defaulting to 1000
[  141.350626][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.362606][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.406924][ T8567] lo speed is unknown, defaulting to 1000
[  141.953253][ T8577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.735'.
[  141.990283][ T8581] netlink: 'syz.0.736': attribute type 30 has an invalid length.
[  142.127905][ T8589] ip6gre3: entered allmulticast mode
[  142.205686][ T8591] lo speed is unknown, defaulting to 1000
[  142.244518][ T5236] Bluetooth: hci2: link tx timeout
[  142.247128][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.458058][ T8598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.581109][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'.
[  142.835967][ T8612] netlink: 'syz.0.744': attribute type 1 has an invalid length.
[  142.863822][ T8612] bond6: entered promiscuous mode
[  142.869942][ T8612] 8021q: adding VLAN 0 to HW filter on device bond6
[  142.890306][ T8612] bond6: (slave bridge3): making interface the new active one
[  142.893543][ T8612] bridge3: entered promiscuous mode
[  142.896689][ T8612] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  143.113576][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[  143.129820][ T8624] batman_adv: batadv0: Adding interface: gretap1
[  143.132246][ T8624] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.143167][ T8624] batman_adv: batadv0: Interface activated: gretap1
[  143.249676][    T9] lo speed is unknown, defaulting to 1000
[  143.251830][    T9] syz0: Port: 1 Link DOWN
[  143.253566][    T9] lo speed is unknown, defaulting to 1000
[  143.361733][ T8635] pim6reg1: entered promiscuous mode
[  143.363803][ T8635] pim6reg1: entered allmulticast mode
[  144.059993][ T8646] netlink: 'syz.0.750': attribute type 16 has an invalid length.
[  144.063113][ T8646] netlink: 'syz.0.750': attribute type 17 has an invalid length.
[  144.119899][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.136842][ T8646] 8021q: adding VLAN 0 to HW filter on device team0
[  144.148545][ T8646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.154891][ T5858] lo speed is unknown, defaulting to 1000
[  144.169990][ T5858] syz0: Port: 1 Link ACTIVE
[  144.185750][ T5858] lo speed is unknown, defaulting to 1000
[  144.244923][ T8653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.252020][ T8653] syzkaller0: entered promiscuous mode
[  144.254122][ T8653] syzkaller0: entered allmulticast mode
[  144.269668][ T5859] Bluetooth: hci2: command 0x0406 tx timeout
[  144.274280][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.753'.
[  144.290005][ T8653] Bluetooth: hci0: Opcode 0x080f failed: -22
[  144.325100][ T8651] tipc: Resetting bearer <eth:syzkaller0>
[  144.343915][ T8651] tipc: Disabling bearer <eth:syzkaller0>
[  144.544632][ T8664] netlink: 'syz.1.757': attribute type 11 has an invalid length.
[  144.802381][ T8684] netlink: 'syz.0.764': attribute type 13 has an invalid length.
[  144.805741][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'.
[  144.912004][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'.
[  145.011092][ T8700] netlink: 'syz.0.768': attribute type 10 has an invalid length.
[  145.021996][ T8700] team0: Port device 0! added
[  145.031503][ T8692] lo speed is unknown, defaulting to 1000
[  145.075992][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.769'.
[  145.305462][ T8713] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  145.874772][ T8721] netlink: 'syz.1.775': attribute type 1 has an invalid length.
[  145.882768][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'.
[  146.143370][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'.
[  146.147191][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.777'.
[  146.346935][ T5236] Bluetooth: hci0: command tx timeout
[  146.407984][ T8745] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003
[  146.431705][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.783'.
[  146.435466][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.783'.
[  146.440225][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.783'.
[  146.443762][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.783'.
[  146.525599][ T8760] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[  146.551560][ T8760] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.562884][ T8760] ipvlan3: entered allmulticast mode
[  146.565156][ T8760] bond4: entered allmulticast mode
[  146.580344][ T8760] bond4: (slave gretap2): making interface the new active one
[  146.583481][ T8760] gretap2: entered allmulticast mode
[  146.587176][ T8760] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  146.592162][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.785'.
[  146.628141][ T8765] sctp: [Deprecated]: syz.2.786 (pid 8765) Use of int in max_burst socket option.
[  146.628141][ T8765] Use struct sctp_assoc_value instead
[  146.694843][ T8776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.789'.
[  146.702974][ T8775] syzkaller0: entered promiscuous mode
[  146.705201][ T8775] syzkaller0: entered allmulticast mode
[  146.724797][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'.
[  147.022635][ T8804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.055464][ T8806] erspan0: entered promiscuous mode
[  147.057523][ T8806] macvtap1: entered promiscuous mode
[  147.059763][ T8806] macvtap1: entered allmulticast mode
[  147.061482][ T8806] erspan0: entered allmulticast mode
[  147.101320][ T8808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.104107][ T8808] syzkaller0: entered promiscuous mode
[  147.105919][ T8808] syzkaller0: entered allmulticast mode
[  147.131336][ T8808] tipc: Resetting bearer <eth:syzkaller0>
[  147.135803][ T8807] tipc: Resetting bearer <eth:syzkaller0>
[  147.145403][ T8807] tipc: Disabling bearer <eth:syzkaller0>
[  147.268817][ T8815] ieee802154 phy0 wpan0: encryption failed: -90
[  147.500678][ T8830] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  147.867725][ T8842] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[  148.332757][ T8869] netlink: 'syz.1.815': attribute type 2 has an invalid length.
[  148.534634][ T8878] netlink: 'syz.1.818': attribute type 1 has an invalid length.
[  148.904248][ T8880] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  149.005356][ T8880] batman_adv: batadv0: Interface deactivated: gretap1
[  149.018084][ T7649] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 256 - 0
[  149.024579][ T7649] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.031369][ T7649] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 256 - 0
[  149.035156][ T7649] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.069406][ T7649] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 256 - 0
[  149.072556][ T7649] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.075859][ T7649] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 256 - 0
[  149.079292][ T7649] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.269283][ T8900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.272052][ T8900] syzkaller0: entered promiscuous mode
[  149.273935][ T8900] syzkaller0: entered allmulticast mode
[  149.320785][ T8900] tipc: Resetting bearer <eth:syzkaller0>
[  149.324078][ T8898] tipc: Resetting bearer <eth:syzkaller0>
[  149.340888][ T8898] tipc: Disabling bearer <eth:syzkaller0>
[  149.363317][ T8905] lo speed is unknown, defaulting to 1000
[  149.533611][ T8920] netlink: 'syz.0.831': attribute type 10 has an invalid length.
[  149.541790][ T8920] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  149.714567][ T8927] trusted_key: syz.2.834 sent an empty control message without MSG_MORE.
[  150.523730][ T8967] netlink: 'syz.1.845': attribute type 3 has an invalid length.
[  150.617614][ T8974] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  150.805714][ T8990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.816607][ T8990] syzkaller0: entered promiscuous mode
[  150.818923][ T8990] syzkaller0: entered allmulticast mode
[  150.839789][ T8990] tipc: Resetting bearer <eth:syzkaller0>
[  150.861331][ T8990] tipc: Resetting bearer <eth:syzkaller0>
[  150.879878][ T8990] tipc: Disabling bearer <eth:syzkaller0>
[  151.070428][ T9009] __nla_validate_parse: 23 callbacks suppressed
[  151.070441][ T9009] netlink: 104 bytes leftover after parsing attributes in process `syz.0.856'.
[  151.079214][ T9011] netlink: 'syz.2.857': attribute type 1 has an invalid length.
[  151.113104][ T9011] 8021q: adding VLAN 0 to HW filter on device bond5
[  151.178373][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'.
[  151.214042][ T9026] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  151.231988][ T9028] netlink: 256 bytes leftover after parsing attributes in process `syz.1.864'.
[  151.239919][ T9028] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  151.258358][ T9028] 8021q: adding VLAN 0 to HW filter on device bond6
[  151.269766][ T9032] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  151.273126][ T9032] netlink: 'syz.0.866': attribute type 58 has an invalid length.
[  151.276521][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.866'.
[  151.330710][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'.
[  151.454382][ T9043] netlink: 2 bytes leftover after parsing attributes in process `syz.1.869'.
[  151.462292][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.869'.
[  151.471463][ T9043] netlink: 'syz.1.869': attribute type 10 has an invalid length.
[  151.475403][ T9043] wlan1: mtu less than device minimum
[  151.478832][ T9043] : (slave wlan1): Error -22 calling dev_set_mtu
[  151.705022][ T9056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.874'.
[  151.914079][ T9063] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  152.201436][ T9069] netlink: 'syz.2.877': attribute type 10 has an invalid length.
[  152.209792][ T9069] team0: Port device 0! added
[  152.213542][ T9069] netlink: 'syz.2.877': attribute type 10 has an invalid length.
[  152.233152][ T9069] team0: Port device 0! removed
[  152.273385][ T9073] netlink: 'syz.0.879': attribute type 1 has an invalid length.
[  152.301657][ T9073] 8021q: adding VLAN 0 to HW filter on device bond7
[  152.307363][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'.
[  152.310968][ T9073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.879'.
[  152.346377][ T9073] veth3: entered promiscuous mode
[  152.353914][ T9073] bond7: (slave veth3): Enslaving as an active interface with a down link
[  152.362081][ T3076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.365187][ T3076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.389420][ T9073] batadv0: entered promiscuous mode
[  152.393580][ T9073] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  152.399832][ T9073] batadv0: left promiscuous mode
[  153.337696][ T9108] netlink: 'syz.2.888': attribute type 13 has an invalid length.
[  153.393473][ T9108] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.405135][ T9108] 8021q: adding VLAN 0 to HW filter on device team0
[  153.414305][ T9108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.534645][ T9114] 0: renamed from hsr0
[  153.543284][ T9114] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.549198][ T9114] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.558997][ T9114] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  153.837953][ T9137] : entered promiscuous mode
[  154.364378][ T9115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  154.722153][ T9171] validate_nla: 2 callbacks suppressed
[  154.722167][ T9171] netlink: 'syz.1.904': attribute type 5 has an invalid length.
[  155.078754][ T9207] bridge0: failed insert local address into bridge forwarding table
[  155.148036][ T5859] Bluetooth: hci2: command 0x0406 tx timeout
[  155.208693][ T9209] dvmrp8: entered allmulticast mode
[  155.213523][ T9208] dvmrp8: left allmulticast mode
[  155.514338][ T9233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.519044][ T9233] syzkaller0: entered promiscuous mode
[  155.521524][ T9233] syzkaller0: entered allmulticast mode
[  155.622083][ T9240] netlink: 'syz.0.923': attribute type 4 has an invalid length.
[  155.633220][ T5902] lo speed is unknown, defaulting to 1000
[  155.635699][ T5902] syz0: Port: 1 Link DOWN
[  155.640693][ T9240] netlink: 'syz.0.923': attribute type 4 has an invalid length.
[  155.645892][ T5902] lo speed is unknown, defaulting to 1000
[  155.653135][ T1277] lo speed is unknown, defaulting to 1000
[  155.655398][ T1277] syz0: Port: 1 Link ACTIVE
[  155.705323][ T9244] netlink: 'syz.1.924': attribute type 18 has an invalid length.
[  155.721007][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.721102][ T9244] netlink: 'syz.1.924': attribute type 18 has an invalid length.
[  155.726221][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.732237][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.739638][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.811423][ T9251] netlink: 'syz.0.927': attribute type 1 has an invalid length.
[  155.854545][ T9254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  155.858686][ T9251] 8021q: adding VLAN 0 to HW filter on device bond8
[  155.886886][ T9257] bond8: (slave veth5): Enslaving as an active interface with a down link
[  155.898425][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv1
[  155.906677][ T9251] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  156.077561][ T9271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  156.212285][ T9277] netlink: 'syz.0.934': attribute type 13 has an invalid length.
[  156.215417][ T9277] netlink: 'syz.0.934': attribute type 17 has an invalid length.
[  156.219599][ T9224] tipc: Resetting bearer <eth:syzkaller0>
[  156.234461][ T9224] tipc: Disabling bearer <eth:syzkaller0>
[  156.249512][ T9277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.370732][ T9284] lo speed is unknown, defaulting to 1000
[  156.478857][ T9295] __nla_validate_parse: 21 callbacks suppressed
[  156.478877][ T9295] netlink: 276 bytes leftover after parsing attributes in process `syz.1.940'.
[  156.480827][ T9297] netlink: 104 bytes leftover after parsing attributes in process `syz.2.941'.
[  156.524703][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[  156.527694][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[  156.634942][ T9304] bridge0: failed insert local address into bridge forwarding table
[  156.749980][ T9311] bridge4: entered promiscuous mode
[  156.752382][ T9311] bridge4: entered allmulticast mode
[  156.784330][ T9312] bridge5: entered promiscuous mode
[  156.786968][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[  156.790503][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'.
[  156.794001][ T9311] netlink: 'syz.0.946': attribute type 12 has an invalid length.
[  156.794168][ T9312] bridge5: entered allmulticast mode
[  156.808931][ T9311] netlink: 'syz.0.946': attribute type 7 has an invalid length.
[  156.821032][ T9313] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  156.920519][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'.
[  156.942261][ T9325] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  156.962462][ T9323] : renamed from batadv_slave_1
[  157.086414][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'.
[  157.099366][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'.
[  157.174629][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'.
[  157.389950][ T9365] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  157.500116][ T9367] bridge4: entered allmulticast mode
[  157.699853][ T9370] lo speed is unknown, defaulting to 1000
[  157.743837][ T9371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.799954][ T9371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.049774][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.053292][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.060389][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.063859][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.290641][ T9390] lo speed is unknown, defaulting to 1000
[  158.643222][ T9408] lo speed is unknown, defaulting to 1000
[  158.844197][ T9406] lo speed is unknown, defaulting to 1000
[  159.025216][ T9405] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  159.190737][ T9422] tc_dump_action: action bad kind
[  159.244674][ T9419] lo speed is unknown, defaulting to 1000
[  159.627404][ T9418] lo speed is unknown, defaulting to 1000
[  159.881391][ T9456] validate_nla: 1 callbacks suppressed
[  159.881405][ T9456] netlink: 'syz.0.982': attribute type 1 has an invalid length.
[  159.969290][ T9456] 8021q: adding VLAN 0 to HW filter on device bond9
[  160.068244][ T9462] bond0: (slave wlan1): Releasing backup interface
[  160.076688][ T9462] bond4: (slave gretap2): Releasing active interface
[  160.078842][ T9462] gretap2: left allmulticast mode
[  160.115055][ T9464] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  160.157126][ T9462] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.164924][ T9462] tipc: New replicast peer: 255.255.255.255
[  160.167827][ T9462] tipc: Enabled bearer <udp:syz2>, priority 10
[  160.332985][ T9479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.335552][ T9479] syzkaller0: entered promiscuous mode
[  160.339170][ T9479] syzkaller0: entered allmulticast mode
[  160.360763][ T9479] tipc: Resetting bearer <eth:syzkaller0>
[  160.387648][ T9478] tipc: Resetting bearer <eth:syzkaller0>
[  160.417180][ T9478] tipc: Disabling bearer <eth:syzkaller0>
[  160.664216][ T9497] lo speed is unknown, defaulting to 1000
[  160.723913][ T9504] netlink: 'syz.2.999': attribute type 4 has an invalid length.
[  160.728632][ T9504] netlink: 'syz.2.999': attribute type 1 has an invalid length.
[  161.197142][ T9528] nbd: couldn't find device at index 536870912
[  161.249975][ T9534] lo speed is unknown, defaulting to 1000
[  161.429811][    T9] tipc: Node number set to 924044031
[  161.719916][ T7649] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  162.478684][ T9571] syzkaller0: entered promiscuous mode
[  162.481149][ T9571] syzkaller0: entered allmulticast mode
[  162.634487][ T9581] lo speed is unknown, defaulting to 1000
[  162.837390][ T9594] __nla_validate_parse: 12 callbacks suppressed
[  162.837404][ T9594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'.
[  162.869551][ T9596] netlink: 'syz.2.1028': attribute type 1 has an invalid length.
[  163.302082][ T9612] batman_adv: batadv0: Removing interface: gretap1
[  163.395078][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1035'.
[  163.475518][ T9621] netlink: 'syz.2.1037': attribute type 2 has an invalid length.
[  163.601401][ T9621] syzkaller1: entered promiscuous mode
[  163.603609][ T9621] syzkaller1: entered allmulticast mode
[  163.960190][ T9656] netlink: 'syz.0.1047': attribute type 12 has an invalid length.
[  164.101629][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'.
[  164.559595][ T9670] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  164.619891][ T9670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1054'.
[  164.623313][ T9670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1054'.
[  164.628778][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  164.635616][ T9670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1054'.
[  164.750775][ T9676] syzkaller0: refused to change device tx_queue_len
[  164.854196][ T9684] netlink: 2232 bytes leftover after parsing attributes in process `syz.0.1060'.
[  164.857856][ T9684] openvswitch: netlink: Flow key attr not present in new flow.
[  164.862755][ T9684] netlink: 'syz.0.1060': attribute type 12 has an invalid length.
[  164.863055][ T9682] pimreg3: entered allmulticast mode
[  164.865709][ T9684] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1060'.
[  164.929914][ T9684] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1060'.
[  165.293650][ T9700] batadv0: left allmulticast mode
[  165.301019][ T9700] veth0: left allmulticast mode
[  165.303172][ T9700] veth1: left allmulticast mode
[  165.305333][ T9700] wg0: left allmulticast mode
[  165.309382][ T9700] wg1: left promiscuous mode
[  165.311906][ T9700] wg1: left allmulticast mode
[  165.313905][ T9700] wg2: left allmulticast mode
[  165.317087][ T9700] veth0_to_bridge: left allmulticast mode
[  165.319788][ T9700] bridge_slave_0: left allmulticast mode
[  165.322408][ T9700] veth1_to_bridge: left allmulticast mode
[  165.324946][ T9700] bridge_slave_1: left allmulticast mode
[  165.336573][ T9700] veth0_to_bond: left allmulticast mode
[  165.339007][ T9700] bond_slave_0: left allmulticast mode
[  165.341395][ T9700] veth1_to_bond: left allmulticast mode
[  165.345995][ T9700] bond_slave_1: left allmulticast mode
[  165.348739][ T9700] veth0_to_team: left allmulticast mode
[  165.351188][ T9700] team_slave_0: left allmulticast mode
[  165.354012][ T9700] veth1_to_team: left allmulticast mode
[  165.358878][ T9700] team_slave_1: left allmulticast mode
[  165.361308][ T9700] veth0_to_batadv: left allmulticast mode
[  165.363725][ T9700] batadv_slave_0: left allmulticast mode
[  165.370076][ T9700] veth1_to_batadv: left allmulticast mode
[  165.372562][ T9700] : left allmulticast mode
[  165.374609][ T9700] xfrm0: left allmulticast mode
[  165.377233][ T9700] veth0_to_hsr: left allmulticast mode
[  165.379655][ T9700] veth1_to_hsr: left allmulticast mode
[  165.382382][ T9700] 0: left allmulticast mode
[  165.384256][ T9700] hsr_slave_0: left allmulticast mode
[  165.386906][ T9700] hsr_slave_1: left allmulticast mode
[  165.392326][ T9700] veth1_virt_wifi: left allmulticast mode
[  165.394868][ T9700] veth0_virt_wifi: left allmulticast mode
[  165.397680][ T9700] veth1_macvtap: left allmulticast mode
[  165.400083][ T9700] veth0_macvtap: left allmulticast mode
[  165.402475][ T9700] macvtap0: left allmulticast mode
[  165.404674][ T9700] macsec0: left allmulticast mode
[  165.407294][ T9700] geneve0: left allmulticast mode
[  165.409489][ T9700] geneve1: left allmulticast mode
[  165.415060][ T9700] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  165.434552][ T9700] ieee802154 phy1 wpan1: left allmulticast mode
[  165.443581][ T9700] gretap1: left allmulticast mode
[  165.445665][ T9700] ip6erspan0: left allmulticast mode
[  165.448666][ T9700] ip6gre1: left allmulticast mode
[  165.450716][ T9700] ip6gretap1: left allmulticast mode
[  165.452817][ T9700] ip6tnl1: left allmulticast mode
[  165.454965][ T9700] bond1: left allmulticast mode
[  165.457064][ T9700] ip6gretap2: left allmulticast mode
[  165.459155][ T9700] ip6gretap3: left allmulticast mode
[  165.461246][ T9700] vxlan0: left allmulticast mode
[  165.463235][ T9700] bond2: left allmulticast mode
[  165.465353][ T9700] geneve2: left allmulticast mode
[  165.469503][ T9700] bond3: left promiscuous mode
[  165.471336][ T9700] bond3: left allmulticast mode
[  165.473761][ T9700] ip6gre2: left allmulticast mode
[  165.476426][ T9700] ip6gre3: left allmulticast mode
[  165.478457][ T9700] bond6: left promiscuous mode
[  165.480206][ T9700] bridge3: left promiscuous mode
[  165.483367][ T9700] erspan0: left allmulticast mode
[  165.485591][ T9700] macvtap1: left promiscuous mode
[  165.487759][ T9700] macvtap1: left allmulticast mode
[  165.497686][ T9700] veth3: left promiscuous mode
[  165.504671][ T9700] bridge4: left promiscuous mode
[  165.507831][ T9700] bridge4: left allmulticast mode
[  165.510019][ T9700] bridge5: left promiscuous mode
[  165.511911][ T9700] bridge5: left allmulticast mode
[  165.517611][ T1277] lo speed is unknown, defaulting to 1000
[  165.518065][ T9713] 8021q: VLANs not supported on bond0
[  165.522387][ T1277] syz0: Port: 1 Link DOWN
[  165.524334][ T1277] lo speed is unknown, defaulting to 1000
[  165.669620][ T9726] netlink: 'syz.0.1072': attribute type 1 has an invalid length.
[  165.702615][ T9726] 8021q: adding VLAN 0 to HW filter on device bond10
[  165.716675][ T9722] bond10: (slave bridge7): making interface the new active one
[  165.719954][ T9722] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  165.729775][ T9722] bond10: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  165.902554][ T9749] ------------[ cut here ]------------
[  165.904428][ T9749] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  165.907116][ T9749] WARNING: CPU: 1 PID: 9749 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  165.910393][ T9749] Modules linked in:
[  165.912267][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.0.1079 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  165.917855][ T9749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.921182][ T9749] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  165.923136][ T9749] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 c0 15 b0 8c e8 d6 23 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 47 85 d8 f6 90 0f 0b 90 42 80 7c 3d
[  165.929438][ T9749] RSP: 0018:ffffc90002a2f910 EFLAGS: 00010246
[  165.931392][ T9749] RAX: bd684c5123260700 RBX: 0000000000000000 RCX: 0000000000080000
[  165.933933][ T9749] RDX: ffffc900083ea000 RSI: 00000000000044e1 RDI: 00000000000044e2
[  165.937042][ T9749] RBP: ffff88810f6c5728 R08: 0000000000000003 R09: 0000000000000004
[  165.939998][ T9749] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88810f6c69d0
[  165.942485][ T9749] R13: ffff88810f6c4d80 R14: 1ffff11021ed8ae5 R15: dffffc0000000000
[  165.944914][ T9749] FS:  00007ff7530a86c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  165.948314][ T9749] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.950297][ T9749] CR2: 0000200000002680 CR3: 000000010fd5e000 CR4: 00000000000006f0
[  165.952763][ T9749] Call Trace:
[  165.953811][ T9749]  <TASK>
[  165.954742][ T9749]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  165.958547][ T9749]  __ieee80211_link_release_channel+0x33b/0x4a0
[  165.960516][ T9749]  ieee80211_if_change_type+0x14c/0x990
[  165.962285][ T9749]  ieee80211_change_iface+0xd5/0x510
[  165.963905][ T9749]  cfg80211_change_iface+0x795/0xef0
[  165.965529][ T9749]  cfg80211_wext_siwmode+0x1db/0x2b0
[  165.967597][ T9749]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  165.969468][ T9749]  ? full_name_hash+0x92/0xe0
[  165.971044][ T9749]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  165.972878][ T9749]  ioctl_standard_call+0xcb/0x1b0
[  165.974450][ T9749]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  165.976654][ T9749]  wext_ioctl_dispatch+0xee/0x410
[  165.978686][ T9749]  ? __pfx_ioctl_standard_call+0x10/0x10
[  165.980387][ T9749]  wext_handle_ioctl+0x100/0x1c0
[  165.981935][ T9749]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  165.983622][ T9749]  ? __lock_acquire+0xab9/0xd20
[  165.985162][ T9749]  sock_ioctl+0x15f/0x790
[  165.987060][ T9749]  ? __pfx_sock_ioctl+0x10/0x10
[  165.989411][ T9749]  ? __fget_files+0x2a/0x420
[  165.991724][ T9749]  ? __fget_files+0x3a0/0x420
[  165.993582][ T9749]  ? __fget_files+0x2a/0x420
[  165.995390][ T9749]  ? bpf_lsm_file_ioctl+0x9/0x20
[  165.997737][ T9749]  ? __pfx_sock_ioctl+0x10/0x10
[  165.999741][ T9749]  __se_sys_ioctl+0xfc/0x170
[  166.001589][ T9749]  do_syscall_64+0xfa/0x3b0
[  166.003459][ T9749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.005870][ T9749]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  166.008577][ T9749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.010952][ T9749] RIP: 0033:0x7ff75218ebe9
[  166.012874][ T9749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.021001][ T9749] RSP: 002b:00007ff7530a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.024521][ T9749] RAX: ffffffffffffffda RBX: 00007ff7523b5fa0 RCX: 00007ff75218ebe9
[  166.027878][ T9749] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000005
[  166.031019][ T9749] RBP: 00007ff752211e19 R08: 0000000000000000 R09: 0000000000000000
[  166.034132][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.037416][ T9749] R13: 00007ff7523b6038 R14: 00007ff7523b5fa0 R15: 00007ffcf47ff048
[  166.040851][ T9749]  </TASK>
[  166.042163][ T9749] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  166.045152][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.0.1079 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  166.050009][ T9749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.053865][ T9749] Call Trace:
[  166.055162][ T9749]  <TASK>
[  166.056333][ T9749]  dump_stack_lvl+0x99/0x250
[  166.058153][ T9749]  ? __asan_memcpy+0x40/0x70
[  166.060005][ T9749]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.061996][ T9749]  ? __pfx__printk+0x10/0x10
[  166.063961][ T9749]  vpanic+0x281/0x750
[  166.065647][ T9749]  ? __pfx__printk+0x10/0x10
[  166.067465][ T9749]  ? __pfx_vpanic+0x10/0x10
[  166.069241][ T9749]  ? is_bpf_text_address+0x292/0x2b0
[  166.071296][ T9749]  panic+0xb9/0xc0
[  166.072778][ T9749]  ? __pfx_panic+0x10/0x10
[  166.074599][ T9749]  __warn+0x31b/0x4b0
[  166.076245][ T9749]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  166.078561][ T9749]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  166.080846][ T9749]  report_bug+0x2be/0x4f0
[  166.082610][ T9749]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  166.084885][ T9749]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  166.087099][ T9749]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  166.089318][ T9749]  handle_bug+0x84/0x160
[  166.091007][ T9749]  exc_invalid_op+0x1a/0x50
[  166.092750][ T9749]  asm_exc_invalid_op+0x1a/0x20
[  166.094685][ T9749] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  166.097158][ T9749] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 c0 15 b0 8c e8 d6 23 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 47 85 d8 f6 90 0f 0b 90 42 80 7c 3d
[  166.104680][ T9749] RSP: 0018:ffffc90002a2f910 EFLAGS: 00010246
[  166.106998][ T9749] RAX: bd684c5123260700 RBX: 0000000000000000 RCX: 0000000000080000
[  166.109963][ T9749] RDX: ffffc900083ea000 RSI: 00000000000044e1 RDI: 00000000000044e2
[  166.112988][ T9749] RBP: ffff88810f6c5728 R08: 0000000000000003 R09: 0000000000000004
[  166.115760][ T9749] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88810f6c69d0
[  166.118773][ T9749] R13: ffff88810f6c4d80 R14: 1ffff11021ed8ae5 R15: dffffc0000000000
[  166.121515][ T9749]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  166.123431][ T9749]  __ieee80211_link_release_channel+0x33b/0x4a0
[  166.125370][ T9749]  ieee80211_if_change_type+0x14c/0x990
[  166.127425][ T9749]  ieee80211_change_iface+0xd5/0x510
[  166.129541][ T9749]  cfg80211_change_iface+0x795/0xef0
[  166.131594][ T9749]  cfg80211_wext_siwmode+0x1db/0x2b0
[  166.133748][ T9749]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  166.136100][ T9749]  ? full_name_hash+0x92/0xe0
[  166.138052][ T9749]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  166.140424][ T9749]  ioctl_standard_call+0xcb/0x1b0
[  166.142473][ T9749]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  166.144834][ T9749]  wext_ioctl_dispatch+0xee/0x410
[  166.146865][ T9749]  ? __pfx_ioctl_standard_call+0x10/0x10
[  166.149125][ T9749]  wext_handle_ioctl+0x100/0x1c0
[  166.151124][ T9749]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  166.153298][ T9749]  ? __lock_acquire+0xab9/0xd20
[  166.155293][ T9749]  sock_ioctl+0x15f/0x790
[  166.157073][ T9749]  ? __pfx_sock_ioctl+0x10/0x10
[  166.159064][ T9749]  ? __fget_files+0x2a/0x420
[  166.160963][ T9749]  ? __fget_files+0x3a0/0x420
[  166.162890][ T9749]  ? __fget_files+0x2a/0x420
[  166.164780][ T9749]  ? bpf_lsm_file_ioctl+0x9/0x20
[  166.166806][ T9749]  ? __pfx_sock_ioctl+0x10/0x10
[  166.168773][ T9749]  __se_sys_ioctl+0xfc/0x170
[  166.170657][ T9749]  do_syscall_64+0xfa/0x3b0
[  166.172482][ T9749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.174905][ T9749]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  166.177421][ T9749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.179745][ T9749] RIP: 0033:0x7ff75218ebe9
[  166.181507][ T9749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.189150][ T9749] RSP: 002b:00007ff7530a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.192468][ T9749] RAX: ffffffffffffffda RBX: 00007ff7523b5fa0 RCX: 00007ff75218ebe9
[  166.195631][ T9749] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000005
[  166.198830][ T9749] RBP: 00007ff752211e19 R08: 0000000000000000 R09: 0000000000000000
[  166.202026][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.205214][ T9749] R13: 00007ff7523b6038 R14: 00007ff7523b5fa0 R15: 00007ffcf47ff048
[  166.208428][ T9749]  </TASK>
[  166.210432][ T9749] Kernel Offset: disabled
[  166.212137][ T9749] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:17:05  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81e0d073 RBX=00000000b259d17c RCX=0000000000080000 RDX=ffffc90008b01000
RSI=0000000000038244 RDI=0000000000038245 RBP=000000003a4cc63b RSP=ffffc900026dfa70
R8 =0000000000000001 R9 =0000000000000001 R10=000000000000001e R11=0000000000000002
R12=0000000028d831c7 R13=00000000001c5054 R14=ffff88803b400000 R15=0000000000039f86
RIP=ffffffff81bfac08 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5c43cba6c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000001ff000 CR3=0000000028398000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5c42f87498 00007f5c42f87470 XMM03=00007f5c42f874a8 00007f5c42f874a0
XMM04=00007f5c43aed100 00007f5c42f87460 XMM05=00007f5c42f87478 00007f5c42f874c0
XMM06=00007f5c42f874b8 00007f5c42f874b0 XMM07=00007f5c42f874a8 00007f5c42f874a0
XMM08=0000000000000000 00007f5c42e12ee7 XMM09=0000000000000000 00007f5c42e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001427a RDI=000000000001427b RBP=00000000000003f8 RSP=ffffc90002a2f0b0
R8 =ffff88801fef0237 R9 =1ffff11003fde046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48fd R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7530a86c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002680 CR3=000000010fd5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=00007ff752387498 00007ff752387470 XMM03=00007ff7523874a8 00007ff7523874a0
XMM04=00007ff752eed100 00007ff752387460 XMM05=00007ff752387478 00007ff7523874c0
XMM06=00007ff7523874b8 00007ff7523874b0 XMM07=00007ff7523874a8 00007ff7523874a0
XMM08=0000000000000000 00007ff752212ee7 XMM09=0000000000000000 00007ff752212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
