last executing test programs:

2m21.64125779s ago: executing program 2 (id=3):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x44}, 0x1, 0xfffffff3}, 0x40)

2m21.547122861s ago: executing program 2 (id=5):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20f752}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000104050000000000000000000a00000005000100d0"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f0005000000050011000100000008001f0008000000080023"], 0x70}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

2m20.069600368s ago: executing program 2 (id=13):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
accept4(r1, &(0x7f0000000180)=@isdn, &(0x7f0000000240)=0x80, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r2}, 0x2a, 0x80000007ff, 0x2})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000a80)="aa57fe9d974aee576fc01305b70e8e942781ac1999c6194324ad", 0x1007, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r5, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x430, 0x238, 0x0, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdda27f907a03732da3acbc650000010000000000f9d2f413b94a105f4bdf01425ce81c5d000000020000000500fffffffffcffffff00"}}}, {{@arp={@private, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 'wg2\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5cc9, 'syz0\x00', {0x8}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="fefaaf180786", @empty, @multicast1, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
write(r6, &(0x7f0000000100)="ab74efd76a620ea165a11145cf87e9c6fff7d0ad5edd51792d193b7069f4bef51c7b4de70df07f03736eb920e33ca61b82e53b79239b7e1578199bff294282477468ba2e2c9770823917401bc623716a80b14c06a70c0fb39cc227af08c971a8ebc63ffcd783af36e32a06c302085e75a17a586b3cf1feca55f48c2657fa4724aeb6cc1aba4db319bfb5cf9fd6ab995741f45b2e516ef029b6acbb1a9376bf147dd54b9fb2f5c3391eca8b300f9366c1fb8b388f51ea0ed26e4c5fa20d7a7d6f2e65d6", 0xc3)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

2m4.925951884s ago: executing program 32 (id=13):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
accept4(r1, &(0x7f0000000180)=@isdn, &(0x7f0000000240)=0x80, 0x80800)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r2}, 0x2a, 0x80000007ff, 0x2})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000a80)="aa57fe9d974aee576fc01305b70e8e942781ac1999c6194324ad", 0x1007, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r5, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x430, 0x238, 0x0, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdda27f907a03732da3acbc650000010000000000f9d2f413b94a105f4bdf01425ce81c5d000000020000000500fffffffffcffffff00"}}}, {{@arp={@private, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 'wg2\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5cc9, 'syz0\x00', {0x8}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="fefaaf180786", @empty, @multicast1, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0)
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
write(r6, &(0x7f0000000100)="ab74efd76a620ea165a11145cf87e9c6fff7d0ad5edd51792d193b7069f4bef51c7b4de70df07f03736eb920e33ca61b82e53b79239b7e1578199bff294282477468ba2e2c9770823917401bc623716a80b14c06a70c0fb39cc227af08c971a8ebc63ffcd783af36e32a06c302085e75a17a586b3cf1feca55f48c2657fa4724aeb6cc1aba4db319bfb5cf9fd6ab995741f45b2e516ef029b6acbb1a9376bf147dd54b9fb2f5c3391eca8b300f9366c1fb8b388f51ea0ed26e4c5fa20d7a7d6f2e65d6", 0xc3)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

38.639907123s ago: executing program 1 (id=1657):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0x6, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

29.231315384s ago: executing program 1 (id=1657):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0x6, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

22.039225871s ago: executing program 1 (id=1657):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0x6, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.03758277s ago: executing program 1 (id=1657):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0x6, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

9.767885336s ago: executing program 1 (id=1657):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0x6, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.171214467s ago: executing program 1 (id=1657):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="4d60ec4f", 0x4}], 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0x6, 0x8001}}}}]}, 0x58}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.369183793s ago: executing program 0 (id=2029):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x301, 0x100, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0x700}, {0xe, 0xfff3}}, [{0x8, 0xb, 0xf22}]}, 0x2c}, 0x1, 0x4000000, 0x0, 0x801}, 0x0)

1.318840062s ago: executing program 0 (id=2032):
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x2, 0x805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000300))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
sendto$packet(r1, &(0x7f0000000080)="1ca19343355ab0ffcfc973a7242e22f0f895e0e671a857197a8c14b0e9a8db626a700ed59e7272c299f2d90d5497ff", 0x2f, 0x0, &(0x7f0000000240)={0x11, 0xf6, r6, 0x1, 0x1}, 0x14)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000380)={r4, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x6}]}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r5, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x5, 0x80000402, 0x7b, @loopback, @empty, 0x3c20, 0x10, 0xfffffffe, 0x8}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x5, 0x80000402, 0x7b, @loopback, @empty, 0x3c20, 0x10, 0xfffffffe, 0x8}})

1.239086321s ago: executing program 3 (id=2033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0)

1.178229387s ago: executing program 3 (id=2034):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='contention_end\x00', r7, 0x0, 0x4}, 0x18)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) (async)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6, 0x8}]}) (async)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x7) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
write$ppp(r1, &(0x7f0000000300)="5af9", 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r8=>0x0}) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r9}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) (async)
r10 = socket$kcm(0x29, 0x2, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r12 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r12, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000180)) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r12, r11}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) (async)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r13}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.129195341s ago: executing program 3 (id=2035):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_gact={0x34, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "42ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4)
socket(0x10, 0x803, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000f50000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, @TCA_POLICE_TBF={0xf, 0x1, {0x0, 0x256da761e0644cfa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffff, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x44, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb6}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x44}}, 0x0)

694.007914ms ago: executing program 3 (id=2036):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x48050)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="8500000008000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000", @ANYRESHEX=0x0, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="6c6784d140ef374ae2bbb26f97eb8037b112a111ed765b6d1e00fd1dd154a228d154f0258cfb2ad1bf0a32b266d11f2bae0d0c82c3a2fd63be7cd5aea0c1c7eae1efd61dc8424a7940312c7fa59a6022a747b373ba18b1ea204fd103c8ef4b620598d6a67285a27263bbcbf47b"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x40f00, 0x8f, '\x00', 0x0, @fallback=0x2}, 0x94)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x40, 0x8, 0x10000, 0x1, 0x1, 0x5, 0x8}, 0x1c)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="140001"], 0x34}}, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x60060)
ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
bind$alg(r7, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r8)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x0, @local}, 0x2}}, 0x26)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

417.610667ms ago: executing program 3 (id=2037):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000380)=0x7b, 0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={<r3=>r2})
bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xf}, 0x10)
bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x24000001, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x7bb3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}, 0x7, 0x1, 0x4bf, 0x80000000, 0x8d, 0x3, 0x5}, 0x9c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x30, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x30, 0x0, @opaque="012c026fccbafc7a29fe6d13033fea84b36aec28e43eb217b84d24301c11c19fc72490e8283b3724"}}}}}}}, 0x6a)

338.058765ms ago: executing program 0 (id=2038):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1100000000000000, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0)

337.496037ms ago: executing program 0 (id=2039):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000002000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007a00000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x14, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r7 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r7, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/uts\x00')
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000023c0)=r7)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_delroute={0x14c, 0x19, 0x20, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2c00}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @RTA_METRICS={0xfb, 0x8, 0x0, 0x1, "7db2a8c2bc35a7dd040bca815c63f6de3de1ac4848f3266100eeef0236f3c35764d1e141b71147eb8ece364fee8560b66f5ea74917410233ef8ea0c218a56b448ce3b42a222c43651fec2f08154537ef8200933487e1a6174d10a9ced5573c6b653efa47a3ccf57bb52f4a9d4b5e1d4e7dae5c1557f4844ce6b4b2a45943aa1d79099b1c76aae9a81ab86e62ac9e99f778993b7b488ab3d9407b1b3e9a298fb51af9d8c2c7f0dcbb998364155dd486b979c8cf1bca816956cd568f3ea3fef4cfee3010b889ef3376340ee5157883273c19266f107320654048e8a818d62a4e3b5092fc42036e30a3fd60a8e35c0e2959efcf2f6401cb57"}, @RTA_MARK={0x8, 0x10, 0x81}, @RTA_EXPIRES={0x8}, @RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_PREF={0x5, 0x14, 0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

79.055808ms ago: executing program 0 (id=2040):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x2404c011)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000240)='./file0\x00', r3}, 0x18)
sendto$unix(r2, 0x0, 0xffffffffffffffe9, 0x4000, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$tipc(r4, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x1}}, 0x10)

575.514µs ago: executing program 0 (id=2041):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x22, 0x2, 0x3)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_type(r8, &(0x7f00000002c0), 0x2, 0x0)
ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000240))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0xc61, 0x4, 0x10200, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
recvmmsg(r12, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f0000000cc0)=""/261, 0x105}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/4101, 0x1005}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13], 0x3c}}, 0x0)

0s ago: executing program 3 (id=2042):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

kernel console output (not intermixed with test programs):

d5
[  115.568563][ T8867] bond5: (slave gretap1): making interface the new active one
[  115.581651][ T8867] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  115.873775][ T8908] validate_nla: 12 callbacks suppressed
[  115.873787][ T8908] netlink: 'syz.3.879': attribute type 7 has an invalid length.
[  115.877794][ T8908] netlink: 'syz.3.879': attribute type 8 has an invalid length.
[  116.062598][ T8926] netlink: 'syz.3.883': attribute type 10 has an invalid length.
[  116.178415][ T8935] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.249155][ T8935] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.315377][ T8935] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.347252][ T8953] dvmrp8: entered allmulticast mode
[  116.361299][ T8945] dvmrp8: left allmulticast mode
[  116.389113][ T8935] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.397182][ T8955] netlink: 'syz.0.892': attribute type 4 has an invalid length.
[  116.406152][ T8955] netlink: 'syz.0.892': attribute type 4 has an invalid length.
[  116.470033][ T8957] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  116.487902][ T8935] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.506601][ T8935] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.523191][ T8935] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.541616][ T8935] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.673814][ T8967] ip6gre1: entered promiscuous mode
[  116.705651][ T8959] infiniband syz!: set down
[  116.707165][ T8959] infiniband syz!: added team_slave_0
[  116.724011][ T8964] lo speed is unknown, defaulting to 1000
[  116.746821][ T8959] RDS/IB: syz!: added
[  116.751354][ T8959] smc: adding ib device syz! with port count 1
[  116.755689][ T8959] smc:    ib device syz! port 1 has pnetid 
[  116.797035][ T8972] veth10: entered allmulticast mode
[  116.803107][ T8972] veth11: entered promiscuous mode
[  116.855546][ T8978] netlink: 'syz.0.899': attribute type 4 has an invalid length.
[  116.872817][ T8978] netlink: 'syz.0.899': attribute type 4 has an invalid length.
[  117.069300][ T8981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.073324][ T8981] tipc: Resetting bearer <eth:syzkaller0>
[  117.624516][ T8999] netlink: 'syz.1.906': attribute type 4 has an invalid length.
[  117.628438][ T8999] netlink: 'syz.1.906': attribute type 4 has an invalid length.
[  117.635486][ T5894] lo speed is unknown, defaulting to 1000
[  117.637317][ T5894] syz1: Port: 1 Link ACTIVE
[  117.638817][ T5894] lo speed is unknown, defaulting to 1000
[  118.029435][ T9033] netlink: 'syz.1.913': attribute type 4 has an invalid length.
[  118.035649][ T5895] lo speed is unknown, defaulting to 1000
[  118.037408][ T5895] syz1: Port: 1 Link DOWN
[  118.038746][ T5895] lo speed is unknown, defaulting to 1000
[  118.043448][ T5895] lo speed is unknown, defaulting to 1000
[  118.045234][ T5895] syz1: Port: 1 Link ACTIVE
[  118.046782][ T5880] lo speed is unknown, defaulting to 1000
[  118.163075][ T9035] __nla_validate_parse: 37 callbacks suppressed
[  118.163088][ T9035] netlink: 52 bytes leftover after parsing attributes in process `syz.1.914'.
[  118.309034][ T9045] netlink: 17 bytes leftover after parsing attributes in process `syz.3.917'.
[  118.316478][ T9045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.917'.
[  118.418027][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'.
[  118.473167][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.921'.
[  118.477344][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'.
[  118.480125][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.921'.
[  118.483443][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.921'.
[  118.484787][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'.
[  118.486100][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.3.921'.
[  118.519136][ T9060] xt_ecn: cannot match TCP bits for non-tcp packets
[  118.543382][ T1089] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  118.578072][ T9055] delete_channel: no stack
[  118.938996][ T9083] lo speed is unknown, defaulting to 1000
[  119.402243][ T9092] pim6reg: entered allmulticast mode
[  119.404968][ T9092] pim6reg: left allmulticast mode
[  119.521080][   T54] Bluetooth: hci3: link tx timeout
[  119.523256][   T54] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.815237][ T9113] lo speed is unknown, defaulting to 1000
[  119.949374][ T9117] 8021q: adding VLAN 0 to HW filter on device bond17
[  119.968990][ T8979] tipc: Disabling bearer <eth:syzkaller0>
[  119.979017][ T9117] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  119.999055][ T9117] bond17: (slave macvlan0): Enslaving as a backup interface with a down link
[  120.003186][ T9117] veth0_to_bond: left allmulticast mode
[  120.004890][ T9117] veth0_to_bond: left promiscuous mode
[  120.006701][ T9117] bridge3: port 2(veth0_to_bond) entered disabled state
[  120.011302][ T9117] bond14: (slave bridge1): Releasing active interface
[  120.014723][ T9117] veth13: left allmulticast mode
[  120.016275][ T9117] veth13: left promiscuous mode
[  120.017886][ T9117] bridge2: port 1(veth13) entered disabled state
[  120.021742][ T9117] veth15: left allmulticast mode
[  120.023293][ T9117] veth15: left promiscuous mode
[  120.024867][ T9117] bridge3: port 1(veth15) entered disabled state
[  120.033181][ T9117] bond17: (slave macvlan0): Releasing backup interface
[  120.096559][ T9120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.108693][ T9120] syzkaller0: entered promiscuous mode
[  120.114041][ T9120] syzkaller0: entered allmulticast mode
[  120.159586][ T9120] tipc: Resetting bearer <eth:syzkaller0>
[  120.185952][ T9119] tipc: Resetting bearer <eth:syzkaller0>
[  120.209076][ T9119] tipc: Disabling bearer <eth:syzkaller0>
[  120.780760][ T9170] syzkaller1: entered promiscuous mode
[  120.782447][ T9170] syzkaller1: entered allmulticast mode
[  121.078434][ T9192] validate_nla: 6 callbacks suppressed
[  121.078452][ T9192] netlink: 'syz.0.961': attribute type 17 has an invalid length.
[  121.187703][ T9201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.190787][ T9199] pim6reg1: entered promiscuous mode
[  121.192440][ T9199] pim6reg1: entered allmulticast mode
[  121.330497][ T9210] bridge0: port 1(dummy0) entered blocking state
[  121.332684][ T9210] bridge0: port 1(dummy0) entered forwarding state
[  121.347724][ T9210] bridge0: entered promiscuous mode
[  121.404674][ T9216] netlink: 'syz.1.971': attribute type 1 has an invalid length.
[  121.424276][ T9218] netlink: 'syz.3.972': attribute type 1 has an invalid length.
[  121.509039][ T9218] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.546561][ T9216] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  121.549115][ T9216] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  121.570414][ T9216] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  121.570706][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  121.572894][ T9216] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  121.599172][ T9216] bond18: (slave geneve3): making interface the new active one
[  121.608637][ T9216] bond18: (slave geneve3): Enslaving as an active interface with an up link
[  121.617592][ T9222] bond6: (slave ip6gretap1): making interface the new active one
[  121.631114][ T9222] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  121.653054][ T9225] veth9: entered promiscuous mode
[  121.656676][ T9225] bond6: (slave veth9): Enslaving as an active interface with a down link
[  121.659389][ T9218] erspan0: entered allmulticast mode
[  121.669762][ T9216] bond18: (slave ip6gretap1): Enslaving as an active interface with an up link
[  121.692282][ T9216] 8021q: adding VLAN 0 to HW filter on device bond18
[  121.695259][ T9229] tap0: tun_chr_ioctl cmd 1074025677
[  121.697078][ T9229] tap0: linktype set to 0
[  121.865856][ T9244] x_tables: duplicate underflow at hook 4
[  121.882688][ T9244] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.885180][ T9244] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.887599][ T9244] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.890122][ T9244] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.911016][ T9249] netlink: 'syz.3.979': attribute type 1 has an invalid length.
[  121.917980][ T9246] netlink: 'syz.0.980': attribute type 7 has an invalid length.
[  121.920252][ T9246] netlink: 'syz.0.980': attribute type 8 has an invalid length.
[  121.961816][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.964355][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.971107][   T12] bond0: no route to arp_ip_target 168.0.0.0 and arp_validate is set
[  121.989578][ T9245] delete_channel: no stack
[  122.053193][ T9258] netlink: 'syz.3.979': attribute type 4 has an invalid length.
[  122.123273][ T9260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.125887][ T9260] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.128280][ T9260] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.132792][ T9260] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.141683][ T9260] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  122.311225][ T9274] netlink: 'syz.0.987': attribute type 1 has an invalid length.
[  122.333706][ T9274] xt_CT: No such helper "snmp"
[  122.484528][ T9285] netlink: 'syz.1.990': attribute type 7 has an invalid length.
[  122.498650][ T9285] netlink: 'syz.1.990': attribute type 8 has an invalid length.
[  122.577799][ T9284] delete_channel: no stack
[  122.739064][ T9303] 8021q: adding VLAN 0 to HW filter on device bond8
[  122.833565][ T9315] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  122.835916][ T9315] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  122.865174][ T6322] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  122.921587][ T9311] delete_channel: no stack
[  123.033928][ T9328] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  123.136516][ T9335] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  123.176153][ T9335] vti1: left promiscuous mode
[  123.185181][ T9335] veth10: left allmulticast mode
[  123.187003][ T9335] veth11: left promiscuous mode
[  123.190139][ T9335] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.194918][ T9335] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.198061][ T9335] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.201193][ T9335] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.343259][ T9349] ip6gre2: entered allmulticast mode
[  123.443427][ T9359] tap0: tun_chr_ioctl cmd 1074025677
[  123.445157][ T9359] tap0: linktype set to 825
[  123.486100][ T9364] vlan5: entered promiscuous mode
[  123.487708][ T9364] hsr_slave_1: entered promiscuous mode
[  123.489493][ T9364] vlan5: entered allmulticast mode
[  123.499380][ T9364] hsr_slave_1: entered allmulticast mode
[  123.579386][ T5895] lo speed is unknown, defaulting to 1000
[  123.584069][ T5895] lo speed is unknown, defaulting to 1000
[  123.586882][ T5895] lo speed is unknown, defaulting to 1000
[  123.592087][ T9364] __nla_validate_parse: 46 callbacks suppressed
[  123.592095][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'.
[  123.788838][ T9377] 8021q: adding VLAN 0 to HW filter on device bond19
[  123.791803][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1017'.
[  123.794595][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'.
[  123.797995][ T9377] ipvlan0: entered allmulticast mode
[  123.799685][ T9377] bond19: entered allmulticast mode
[  123.818759][ T6335] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  123.857819][ T9372] delete_channel: no stack
[  123.977909][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'.
[  124.078790][ T9394] 8021q: adding VLAN 0 to HW filter on device bond10
[  124.088574][ T9399] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  124.298951][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'.
[  124.381345][ T9418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.405870][ T9421] tipc: Resetting bearer <eth:syzkaller0>
[  124.506719][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1033'.
[  124.509026][ T9425] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1034'.
[  124.719788][ T9432] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1033'.
[  124.967050][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  125.288899][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1040'.
[  125.400842][ T5880] tipc: Node number set to 3274069269
[  125.415572][ T9465] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  125.435383][ T9465] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  125.497607][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.499310][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.509698][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.513608][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.515255][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.516960][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.518584][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.527415][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  125.529053][ T9467] tun0: tun_chr_ioctl cmd 2147767520
[  126.004450][ T9477] 8021q: adding VLAN 0 to HW filter on device bond9
[  126.026122][ T9477] bond9: (slave bridge2): making interface the new active one
[  126.030928][ T9477] bond9: (slave bridge2): Enslaving as an active interface with an up link
[  126.039249][ T9477] gretap3: entered promiscuous mode
[  126.045684][ T9477] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  126.055257][ T9477] macvlan0: entered promiscuous mode
[  126.056927][ T9477] macvlan0: entered allmulticast mode
[  126.058950][ T9477] bond9: entered promiscuous mode
[  126.062063][ T9477] bridge2: entered promiscuous mode
[  126.064457][ T9477] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  126.067772][ T9477] bond9: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  126.073255][ T9477] bond9: left promiscuous mode
[  126.074740][ T9477] bridge2: left promiscuous mode
[  126.108695][ T9482] ip6gretap0: entered promiscuous mode
[  126.121235][ T9482] ip6gretap0: left promiscuous mode
[  126.157609][ T9487] validate_nla: 20 callbacks suppressed
[  126.157621][ T9487] netlink: 'syz.0.1049': attribute type 12 has an invalid length.
[  126.303556][ T9500] sock: sock_set_timeout: `syz.1.1053' (pid 9500) tries to set negative timeout
[  126.420270][ T9514] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  126.552615][ T9524] set match dimension is over the limit!
[  126.660167][ T9531] 8021q: adding VLAN 0 to HW filter on device bond11
[  126.948850][ T9561] netlink: 'syz.3.1074': attribute type 11 has an invalid length.
[  126.953824][ T9563] Cannot find set identified by id 0 to match
[  127.001480][ T9567] netlink: 'syz.0.1076': attribute type 10 has an invalid length.
[  127.210129][ T9580] pim6reg1: entered allmulticast mode
[  127.369794][ T9597] syzkaller0: entered promiscuous mode
[  127.374361][ T9597] syzkaller0: entered allmulticast mode
[  127.524886][ T9605] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.529748][ T9606] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.533617][ T9606] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.537159][ T9606] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.588139][ T9606] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.591486][ T9606] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.594460][ T9606] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.626187][ T9606] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.629280][ T9606] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.636082][ T9606] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.664392][ T9606] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.667414][ T9606] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.670632][ T9606] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.735481][ T9606] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.738194][ T9606] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  127.741446][ T9606] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  127.749052][ T9606] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.751718][ T9606] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  127.754933][ T9606] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  127.765034][ T9606] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.767493][ T9606] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  127.769928][ T9606] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  127.778106][ T9606] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.780792][ T9606] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  127.783513][ T9606] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  128.009760][ T9615] netlink: 'syz.1.1088': attribute type 12 has an invalid length.
[  128.153541][ T9619] bond0: entered allmulticast mode
[  128.157555][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.275741][ T9633] netlink: 'syz.1.1093': attribute type 10 has an invalid length.
[  128.288408][ T9638] bond0: (slave wlan1): Releasing backup interface
[  128.296821][ T9640] netlink: 'syz.3.1094': attribute type 1 has an invalid length.
[  128.348070][ T9640] 8021q: adding VLAN 0 to HW filter on device bond10
[  128.376417][ T9644] bond10: (slave veth11): Enslaving as an active interface with a down link
[  128.428772][ T9648] netlink: 'syz.3.1098': attribute type 33 has an invalid length.
[  128.447101][ T9650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.467070][ T9650] syzkaller0: entered promiscuous mode
[  128.468785][ T9650] syzkaller0: entered allmulticast mode
[  128.495683][ T9650] tipc: Resetting bearer <eth:syzkaller0>
[  128.497547][ T9654] netlink: 'syz.1.1101': attribute type 10 has an invalid length.
[  128.511181][ T9649] tipc: Resetting bearer <eth:syzkaller0>
[  128.532937][ T9649] tipc: Disabling bearer <eth:syzkaller0>
[  128.629368][ T9665] netlink: 'syz.0.1105': attribute type 9 has an invalid length.
[  128.642367][ T9668] netlink: 'syz.1.1106': attribute type 7 has an invalid length.
[  128.688835][ T9668] __nla_validate_parse: 88 callbacks suppressed
[  128.688847][ T9668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1106'.
[  128.712214][ T9671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.828388][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'.
[  128.831381][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'.
[  129.180925][ T9699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1115'.
[  129.183684][ T9699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'.
[  129.186362][ T9699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1115'.
[  129.189131][ T9699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'.
[  129.192612][ T9699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1115'.
[  129.221823][ T9701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1116'.
[  129.378599][ T9710] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.417470][ T6322] bridge0: port 1(dummy0) entered disabled state
[  129.426603][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'.
[  129.683404][ T9724] bond18: (slave geneve3): Releasing active interface
[  129.685493][ T9724] bond18: (slave geneve3): the permanent HWaddr of slave - e2:61:8c:eb:9d:1b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  129.691324][ T9724] bond18: (slave ip6gretap1): making interface the new active one
[  129.696696][ T9724] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  129.699326][ T9724] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  129.704012][ T9724] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  129.706684][ T9724] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  129.713448][ T9724] bond18: (slave ip6gretap1): Releasing active interface
[  129.877995][ T9730] batadv11: entered promiscuous mode
[  129.879689][ T9730] batadv11: entered allmulticast mode
[  129.996417][ T9742] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  130.154551][ T9759] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  130.507188][ T9771] lo speed is unknown, defaulting to 1000
[  130.682249][ T9799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.687387][ T9799] syzkaller0: entered promiscuous mode
[  130.689262][ T9799] syzkaller0: entered allmulticast mode
[  130.729417][ T9799] tipc: Resetting bearer <eth:syzkaller0>
[  130.741733][ T9798] tipc: Resetting bearer <eth:syzkaller0>
[  130.761517][ T9798] tipc: Disabling bearer <eth:syzkaller0>
[  131.388299][ T9840] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  131.444627][ T9844] validate_nla: 9 callbacks suppressed
[  131.444639][ T9844] netlink: 'syz.1.1158': attribute type 7 has an invalid length.
[  131.449767][ T9844] netlink: 'syz.1.1158': attribute type 8 has an invalid length.
[  131.742315][ T9867] dvmrp0: entered allmulticast mode
[  131.747994][ T9867] netlink: 'syz.1.1164': attribute type 5 has an invalid length.
[  132.042490][ T9889] dvmrp0: left allmulticast mode
[  132.096834][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.100975][ T9889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.159447][ T9897] lo speed is unknown, defaulting to 1000
[  132.332149][ T9905] openvswitch: netlink: Duplicate or invalid key (type 0).
[  132.335443][ T9905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.389821][ T9908] dummy0: left allmulticast mode
[  132.393073][ T9908] bridge0: port 1(dummy0) entered disabled state
[  132.416077][ T9908] bond5: (slave gretap1): Releasing active interface
[  132.426331][ T9908] bond6: (slave ip6gretap1): Releasing active interface
[  132.428506][ T9908] bond6: (slave ip6gretap1): the permanent HWaddr of slave - b6:e5:e4:59:45:c3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  132.445481][ T9908] bond6: (slave veth9): Releasing active interface
[  132.453054][ T9908] bond9: (slave bridge2): Releasing active interface
[  132.460553][ T9908] bond9: (slave bridge2): the permanent HWaddr of slave - de:5c:4c:23:90:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  132.466131][ T9908] bond9: (slave gretap3): making interface the new active one
[  132.476708][ T9908] bond9: (slave gretap3): Releasing active interface
[  132.483594][ T9908] bond10: (slave veth11): Releasing active interface
[  132.526095][ T9913] netlink: 'syz.0.1173': attribute type 12 has an invalid length.
[  132.546160][ T9899] lo speed is unknown, defaulting to 1000
[  132.640866][ T9912] xt_CT: No such helper "snmp"
[  132.886896][ T9922] netlink: 'syz.1.1180': attribute type 10 has an invalid length.
[  132.903714][ T9922] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  133.003548][ T9922] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  133.107339][ T9926] pim6reg1: entered promiscuous mode
[  133.109101][ T9926] pim6reg1: entered allmulticast mode
[  133.129467][ T9932] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  133.276862][ T9935] veth13: entered allmulticast mode
[  133.358743][ T9933] lo speed is unknown, defaulting to 1000
[  133.358831][ T9936] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  133.363492][ T9936] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  133.425121][ T9926] bond20 (unregistering): Released all slaves
[  133.545600][ T9944] netlink: 'syz.1.1186': attribute type 7 has an invalid length.
[  133.548042][ T9944] netlink: 'syz.1.1186': attribute type 8 has an invalid length.
[  133.884580][ T9963] netlink: 'syz.1.1191': attribute type 1 has an invalid length.
[  133.939741][ T9969] __nla_validate_parse: 41 callbacks suppressed
[  133.939753][ T9969] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1193'.
[  133.948683][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'.
[  133.969259][ T9969] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1193'.
[  133.973766][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'.
[  133.976685][ T9969] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1193'.
[  133.992408][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  134.021919][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  134.024911][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  134.037839][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'.
[  134.094489][ T9974] netlink: 'syz.1.1195': attribute type 1 has an invalid length.
[  134.099841][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'.
[  134.220738][ T9981] netlink: 'syz.0.1197': attribute type 10 has an invalid length.
[  134.226349][ T9974] batman_adv: batadv0: Adding interface: ip6gretap2
[  134.240221][ T9974] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.267130][ T9974] batman_adv: batadv0: Interface activated: ip6gretap2
[  134.397623][ T9981] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  134.707119][T10009] bond11: (slave bridge4): making interface the new active one
[  134.711936][T10009] bond11: (slave bridge4): Enslaving as an active interface with an up link
[  135.009518][T10038] macvlan0: entered promiscuous mode
[  135.145420][T10042] syzkaller1: entered promiscuous mode
[  135.147178][T10042] syzkaller1: entered allmulticast mode
[  135.173034][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  135.355226][T10063] dvmrp8: entered allmulticast mode
[  135.384370][T10060] dvmrp8: left allmulticast mode
[  135.435029][T10074] pim6reg1: entered allmulticast mode
[  135.468665][T10071] pim6reg1: entered promiscuous mode
[  135.470301][T10071] pim6reg1: entered allmulticast mode
[  135.651708][T10093] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.655135][T10094] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  135.658783][T10094] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  135.759642][T10107] syzkaller1: entered promiscuous mode
[  135.761835][T10107] syzkaller1: entered allmulticast mode
[  135.783189][T10107] 8021q: adding VLAN 0 to HW filter on device bond12
[  135.791528][T10107] bond12: (slave batadv3): Opening slave failed
[  135.997879][T10121] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  136.004721][T10121] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  136.204389][T10134] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.207542][T10134] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.253149][T10134] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.256175][T10134] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.294645][T10134] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.297644][T10134] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.336062][T10134] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.339060][T10134] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  136.386436][T10134] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.388917][T10134] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.403271][T10134] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.405841][T10134] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.421507][T10134] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.424061][T10134] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.432174][T10134] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.434804][T10134] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.679536][T10152] validate_nla: 9 callbacks suppressed
[  136.679549][T10152] netlink: 'syz.0.1250': attribute type 7 has an invalid length.
[  136.684627][T10152] netlink: 'syz.0.1250': attribute type 8 has an invalid length.
[  136.810799][T10155] netlink: 'syz.0.1251': attribute type 25 has an invalid length.
[  137.070662][T10174] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  137.358591][T10197] ipvlan0: entered promiscuous mode
[  137.426285][T10201] netlink: 'syz.3.1262': attribute type 1 has an invalid length.
[  137.497529][T10209] netlink: 'syz.3.1266': attribute type 4 has an invalid length.
[  137.504326][T10209] netlink: 'syz.3.1266': attribute type 4 has an invalid length.
[  137.541630][T10211] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  137.614955][T10217] netlink: 'syz.1.1268': attribute type 7 has an invalid length.
[  137.617741][T10217] netlink: 'syz.1.1268': attribute type 8 has an invalid length.
[  137.722225][T10221] IPVS: length: 146 != 24
[  137.905123][T10237] netlink: 'syz.1.1274': attribute type 1 has an invalid length.
[  137.923313][T10243] netlink: 'syz.1.1274': attribute type 1 has an invalid length.
[  137.969122][T10237] vlan1: entered allmulticast mode
[  137.971769][T10237] bond21: entered allmulticast mode
[  138.048920][T10257] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  138.265900][T10275] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  138.268652][T10275] batman_adv: batadv0: Removing interface: ip6gretap2
[  138.415442][T10296] gretap0: entered promiscuous mode
[  138.543049][T10306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.869428][T10331] bridge0: entered promiscuous mode
[  138.943771][T10342] __nla_validate_parse: 57 callbacks suppressed
[  138.943783][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  138.968499][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  138.971851][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  138.974983][T10340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1305'.
[  138.990598][ T5894] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  138.993880][T10340] 8021q: adding VLAN 0 to HW filter on device bond22
[  139.071333][T10348] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1308'.
[  139.287004][T10370] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1315'.
[  139.372857][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'.
[  139.379257][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'.
[  139.559228][T10384] erspan0: left allmulticast mode
[  139.570866][ T5221] Bluetooth: hci0: command tx timeout
[  139.591142][T10384] bridge0: left promiscuous mode
[  139.596215][T10384] bond0: left allmulticast mode
[  139.599270][T10384] dummy0: left promiscuous mode
[  139.605219][T10384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.620530][T10385] lo speed is unknown, defaulting to 1000
[  139.677910][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.737588][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.797440][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.810763][ T5894] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  139.815856][ T5894] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  139.948431][T10391] syzkaller1: entered promiscuous mode
[  139.950142][T10391] syzkaller1: entered allmulticast mode
[  139.983845][T10393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1323'.
[  139.986741][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'.
[  139.989924][T10393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1323'.
[  139.993106][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1323'.
[  140.057446][T10395] lo speed is unknown, defaulting to 1000
[  140.106737][T10398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.168229][T10398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.223894][T10400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.254630][T10402] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  140.317604][T10402] vlan0: entered promiscuous mode
[  140.540690][ T5297] lo speed is unknown, defaulting to 1000
[  140.542898][ T5297] syz1: Port: 1 Link DOWN
[  140.573064][T10413] 8021q: adding VLAN 0 to HW filter on device bond14
[  140.584881][ T5297] lo speed is unknown, defaulting to 1000
[  140.591176][ T5297] syz1: Port: 1 Link ACTIVE
[  140.628003][ T5895] lo speed is unknown, defaulting to 1000
[  140.988848][T10432] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.997843][T10432] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.084570][T10432] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.092741][T10432] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.195999][T10432] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.198986][T10432] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.274213][T10432] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.277618][T10432] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.383075][ T5845] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  141.430292][T10432] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.440941][T10432] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.487578][T10432] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.500705][T10432] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.552609][T10432] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.555235][T10432] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.586426][T10432] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.589038][T10432] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.624130][T10469] x_tables: ip6_tables: mh match: only valid for protocol 135
[  141.668231][T10471] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  141.684253][T10471] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  141.847566][T10484] vlan1: entered allmulticast mode
[  141.849133][T10484] bond0: entered allmulticast mode
[  141.880097][T10486] gtp0: entered promiscuous mode
[  141.883981][T10486] gtp0: entered allmulticast mode
[  142.033832][T10494] C: renamed from team_slave_0
[  142.036853][T10494] validate_nla: 20 callbacks suppressed
[  142.036866][T10494] netlink: 'syz.1.1353': attribute type 1 has an invalid length.
[  142.042616][T10494] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  142.203314][T10506] netlink: 'syz.0.1355': attribute type 4 has an invalid length.
[  142.230860][T10506] netlink: 'syz.0.1355': attribute type 4 has an invalid length.
[  142.304047][T10514] x_tables: duplicate underflow at hook 1
[  142.354342][T10517] xt_TPROXY: Can be used only with -p tcp or -p udp
[  142.366058][T10517] netlink: 'syz.3.1359': attribute type 153 has an invalid length.
[  142.509095][T10526] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  142.521376][T10528] netlink: 'syz.3.1363': attribute type 4 has an invalid length.
[  142.527750][T10528] netlink: 'syz.3.1363': attribute type 4 has an invalid length.
[  142.930542][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  143.149890][T10557] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  143.206426][T10557] ip6gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue
[  144.015143][T10560] __nla_validate_parse: 18 callbacks suppressed
[  144.015156][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1375'.
[  144.187806][T10582] netlink: 'syz.3.1383': attribute type 4 has an invalid length.
[  144.197501][T10585] netlink: 'syz.0.1384': attribute type 2 has an invalid length.
[  144.218193][T10582] netlink: 'syz.3.1383': attribute type 4 has an invalid length.
[  144.245515][T10590] netlink: 'syz.1.1386': attribute type 10 has an invalid length.
[  144.247894][T10590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1386'.
[  144.264549][T10590] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  144.367930][T10597] lo speed is unknown, defaulting to 1000
[  144.634805][T10612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1392'.
[  144.716978][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1394'.
[  144.759909][T10621] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  144.771592][T10621] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  144.819680][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1396'.
[  144.829494][T10625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1396'.
[  144.884626][T10627] bond12: (slave gretap2): making interface the new active one
[  144.887640][T10627] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  144.940263][T10632] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1399'.
[  145.145803][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1401'.
[  145.201243][T10639] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1401'.
[  145.206368][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1403'.
[  145.231538][T10641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.324934][T10645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.331913][T10646] syzkaller0: entered promiscuous mode
[  145.333612][T10646] syzkaller0: entered allmulticast mode
[  145.366228][T10645] tipc: Resetting bearer <eth:syzkaller0>
[  145.378851][T10644] tipc: Resetting bearer <eth:syzkaller0>
[  145.408004][T10644] tipc: Disabling bearer <eth:syzkaller0>
[  145.567831][T10660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.570268][T10660] syzkaller0: entered promiscuous mode
[  145.572449][T10660] syzkaller0: entered allmulticast mode
[  145.634274][T10660] tipc: Resetting bearer <eth:syzkaller0>
[  145.637188][T10660] trusted_key: syz.0.1409 sent an empty control message without MSG_MORE.
[  145.661137][T10664] siw: device registration error -23
[  145.700702][T10659] tipc: Resetting bearer <eth:syzkaller0>
[  145.711839][T10659] tipc: Disabling bearer <eth:syzkaller0>
[  145.891563][T10682] ip6gre3: entered allmulticast mode
[  146.111742][T10701] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  146.221073][T10704] syz.1.1425 uses old SIOCAX25GETINFO
[  146.228176][T10704] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  147.798625][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.801375][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.808396][T10765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.048189][T10770] sctp: [Deprecated]: syz.3.1445 (pid 10770) Use of int in maxseg socket option.
[  148.048189][T10770] Use struct sctp_assoc_value instead
[  148.057190][T10770] validate_nla: 4 callbacks suppressed
[  148.057200][T10770] netlink: 'syz.3.1445': attribute type 1 has an invalid length.
[  148.075211][T10770] bridge7: the hash_elasticity option has been deprecated and is always 16
[  148.179555][T10772] netlink: 'syz.3.1446': attribute type 19 has an invalid length.
[  148.387128][T10785] netlink: 'syz.3.1451': attribute type 3 has an invalid length.
[  148.434998][T10793] netlink: 'syz.0.1452': attribute type 10 has an invalid length.
[  148.437532][T10793] !: entered promiscuous mode
[  148.449953][T10793] bridge0: port 1(0!) entered blocking state
[  148.455645][T10793] bridge0: port 1(0!) entered disabled state
[  148.457704][T10793] !: entered allmulticast mode
[  148.484373][T10798] netlink: 'syz.3.1454': attribute type 3 has an invalid length.
[  148.601232][T10807] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  148.633885][T10811] netlink: 'syz.1.1457': attribute type 4 has an invalid length.
[  148.646962][  T791] lo speed is unknown, defaulting to 1000
[  148.650943][  T791] syz1: Port: 1 Link DOWN
[  148.651154][T10811] netlink: 'syz.1.1457': attribute type 4 has an invalid length.
[  148.652606][  T791] lo speed is unknown, defaulting to 1000
[  148.664870][ T5895] lo speed is unknown, defaulting to 1000
[  148.666695][ T5895] syz1: Port: 1 Link ACTIVE
[  148.683516][T10814] bond11: (slave bridge4): Releasing active interface
[  148.698894][T10814] netlink: 'syz.3.1456': attribute type 10 has an invalid length.
[  148.720721][  T791] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  148.809085][T10826] veth0_to_team: entered promiscuous mode
[  148.813111][T10826] veth0_to_team: entered allmulticast mode
[  148.975992][T10842] 0: renamed from hsr0
[  148.983490][T10842] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  148.986565][T10842] 0: entered allmulticast mode
[  148.988106][T10842] hsr_slave_0: entered allmulticast mode
[  148.992824][T10842] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  149.082655][T10854] __nla_validate_parse: 22 callbacks suppressed
[  149.082677][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1465'.
[  149.140555][  T791] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  149.217160][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1466'.
[  149.323258][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1469'.
[  149.344654][T10882] bridge9: port 1(veth19) entered blocking state
[  149.347030][T10882] bridge9: port 1(veth19) entered disabled state
[  149.349242][T10882] veth19: entered allmulticast mode
[  149.358072][T10882] veth19: entered promiscuous mode
[  149.367741][T10882] bridge9: port 2(veth0_to_bond) entered blocking state
[  149.372007][T10882] bridge9: port 2(veth0_to_bond) entered disabled state
[  149.374371][T10882] veth0_to_bond: entered allmulticast mode
[  149.377594][T10882] veth0_to_bond: entered promiscuous mode
[  149.401836][T10882] vlan2: entered allmulticast mode
[  149.403674][T10882] bridge9: port 3(vlan2) entered blocking state
[  149.409883][T10882] bridge9: port 3(vlan2) entered disabled state
[  149.415374][T10882] vlan2: entered promiscuous mode
[  149.417058][T10882] veth1: entered promiscuous mode
[  149.557203][   T33] audit: type=1800 audit(1752641818.065:3): pid=10891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1470" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3105 res=0 errno=0
[  149.620116][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1471'.
[  149.664102][T10905] netlink: 'syz.1.1472': attribute type 1 has an invalid length.
[  149.724905][T10905] 8021q: adding VLAN 0 to HW filter on device bond25
[  149.729875][T10905] bond24: (slave bond25): making interface the new active one
[  149.733675][T10905] bond24: (slave bond25): Enslaving as an active interface with an up link
[  149.738187][T10905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1472'.
[  149.743429][T10905] 8021q: adding VLAN 0 to HW filter on device bond24
[  149.975195][T10939] netlink: 'syz.3.1477': attribute type 11 has an invalid length.
[  149.977695][T10939] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1477'.
[  149.982774][T10935] sit0: Master is either lo or non-ether device
[  150.124123][T10956] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1481'.
[  150.129072][T10953] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  150.136211][T10953] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  150.138787][T10953] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  150.144722][T10953] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  150.149465][T10953] geneve6: entered promiscuous mode
[  150.232238][T10965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1484'.
[  150.246860][T10965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1484'.
[  150.556188][T10994] macsec0: entered promiscuous mode
[  150.557828][T10994] ip6gretap0: entered promiscuous mode
[  150.559541][T10994] macsec0: entered allmulticast mode
[  150.563584][T10994] ip6gretap0: entered allmulticast mode
[  150.633808][T11002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1493'.
[  150.801998][T11014] netlink: 'syz.3.1497': attribute type 7 has an invalid length.
[  150.807559][T11014] ip6gretap0: entered promiscuous mode
[  150.809832][T11014] syz_tun: entered promiscuous mode
[  150.812772][T11014] ip6gretap0: left promiscuous mode
[  150.815260][T11014] syz_tun: left promiscuous mode
[  150.934078][T11023] unsupported nla_type 58
[  151.145932][T11030] wireguard0: entered promiscuous mode
[  151.147716][T11030] wireguard0: entered allmulticast mode
[  151.379621][T11056] vlan5: entered promiscuous mode
[  151.389665][T11056] macvlan1: entered promiscuous mode
[  151.490661][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  151.527423][T11063] bridge: RTM_NEWNEIGH with invalid ether address
[  151.530228][T11063] bridge: RTM_NEWNEIGH with invalid ether address
[  151.606974][T11070] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  151.620061][T11070] batman_adv: batadv0: Adding interface: ip6gretap3
[  151.626833][T11070] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.647999][T11070] batman_adv: batadv0: Interface activated: ip6gretap3
[  151.867262][T11096] 8021q: adding VLAN 0 to HW filter on device bond27
[  151.872357][T11092] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  152.037840][T11101] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  152.587664][T11152] bond0 (unregistering): Released all slaves
[  152.743550][T11161] 8021q: adding VLAN 0 to HW filter on device bond13
[  152.890915][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  153.103246][T11182] 8021q: adding VLAN 0 to HW filter on device bond15
[  153.106444][T11182] bond14: (slave bond15): making interface the new active one
[  153.121445][T11182] bond14: (slave bond15): Enslaving as an active interface with an up link
[  153.151868][T11192] bond14: (slave gretap3): Enslaving as a backup interface with an up link
[  153.170199][T11182] 8021q: adding VLAN 0 to HW filter on device bond14
[  153.183204][T11195] validate_nla: 10 callbacks suppressed
[  153.183215][T11195] netlink: 'syz.3.1549': attribute type 10 has an invalid length.
[  153.322184][T11214] netlink: 'syz.3.1554': attribute type 4 has an invalid length.
[  153.328843][T11214] netlink: 'syz.3.1554': attribute type 4 has an invalid length.
[  153.354087][T11210] bond0: (slave bridge0): Releasing backup interface
[  153.368339][T11210] !: left allmulticast mode
[  153.373609][T11210] bridge0: port 1(0!) entered disabled state
[  153.384482][T11210] bond12: (slave gretap2): Releasing active interface
[  153.399385][T11210] bond14: (slave bond15): Releasing backup interface
[  153.404460][T11210] bond14: (slave bond15): the permanent HWaddr of slave - f6:3a:ed:94:74:23 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  153.415377][T11210] bond14: (slave gretap3): making interface the new active one
[  153.476411][T11210] bond14: (slave gretap3): Releasing backup interface
[  153.534570][T11227] openvswitch: netlink: IP tunnel dst address not specified
[  153.541202][T11227] macvlan3: entered allmulticast mode
[  153.718466][T11237] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  153.728845][T11237] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  153.733274][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  153.778879][T11240] netlink: 'syz.3.1564': attribute type 4 has an invalid length.
[  153.788226][T11240] netlink: 'syz.3.1564': attribute type 4 has an invalid length.
[  154.392469][T11274] __nla_validate_parse: 39 callbacks suppressed
[  154.392483][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1574'.
[  154.477833][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'.
[  154.643708][T11276] 8021q: adding VLAN 0 to HW filter on device bond29
[  154.665358][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'.
[  154.943772][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'.
[  155.261686][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'.
[  155.268072][T11309] netlink: 'syz.1.1583': attribute type 7 has an invalid length.
[  155.274777][T11309] netlink: 'syz.1.1583': attribute type 8 has an invalid length.
[  155.279554][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'.
[  155.376546][T11308] delete_channel: no stack
[  155.665296][T11328] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  155.691265][T11328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1589'.
[  155.772495][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  155.800501][T11332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.806064][T11332] syzkaller0: entered promiscuous mode
[  155.807798][T11332] syzkaller0: entered allmulticast mode
[  155.861651][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.864105][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.896971][T11332] sch_fq: defrate 257 ignored.
[  155.900266][T11332] tipc: Resetting bearer <eth:syzkaller0>
[  155.903573][T11346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1594'.
[  155.907215][T11346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1594'.
[  155.910123][T11331] tipc: Resetting bearer <eth:syzkaller0>
[  155.952476][T11331] tipc: Disabling bearer <eth:syzkaller0>
[  155.986057][T11348] netlink: 'syz.3.1595': attribute type 10 has an invalid length.
[  156.001865][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  156.149126][T11367] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  156.168334][T11367] CPU: 1 UID: 0 PID: 11367 Comm: syz.1.1603 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  156.168360][T11367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.168367][T11367] Call Trace:
[  156.168371][T11367]  <TASK>
[  156.168377][T11367]  dump_stack_lvl+0x189/0x250
[  156.168397][T11367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.168408][T11367]  ? __pfx__printk+0x10/0x10
[  156.168421][T11367]  ? kernfs_path_from_node+0x2c/0x260
[  156.168435][T11367]  ? kernfs_path_from_node+0x2c/0x260
[  156.168445][T11367]  ? kernfs_path_from_node+0x2c/0x260
[  156.168458][T11367]  ? kernfs_path_from_node+0x22c/0x260
[  156.168468][T11367]  ? kernfs_path_from_node+0x2c/0x260
[  156.168480][T11367]  sysfs_warn_dup+0x8e/0xa0
[  156.168491][T11367]  sysfs_do_create_link_sd+0xc0/0x110
[  156.168504][T11367]  device_add_class_symlinks+0x1cf/0x240
[  156.168517][T11367]  device_add+0x475/0xb50
[  156.168529][T11367]  wiphy_register+0x199a/0x26b0
[  156.168548][T11367]  ? __pfx_wiphy_register+0x10/0x10
[  156.168557][T11367]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  156.168572][T11367]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  156.168585][T11367]  ieee80211_register_hw+0x33e1/0x4120
[  156.168605][T11367]  ? ieee80211_register_hw+0x1481/0x4120
[  156.168620][T11367]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  156.168633][T11367]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  156.168649][T11367]  ? __hrtimer_setup+0x187/0x210
[  156.168658][T11367]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  156.168672][T11367]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  156.168717][T11367]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  156.168727][T11367]  ? trace_kmalloc+0x1f/0xd0
[  156.168742][T11367]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  156.168753][T11367]  ? kstrndup+0xbf/0x160
[  156.168771][T11367]  hwsim_new_radio_nl+0xea4/0x1b10
[  156.168784][T11367]  ? __pfx___nla_validate_parse+0x10/0x10
[  156.168800][T11367]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.168839][T11367]  ? __nla_parse+0x40/0x60
[  156.168851][T11367]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  156.168869][T11367]  genl_family_rcv_msg_doit+0x215/0x300
[  156.168886][T11367]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.168904][T11367]  ? bpf_lsm_capable+0x9/0x20
[  156.168914][T11367]  ? security_capable+0x7e/0x2e0
[  156.168930][T11367]  genl_rcv_msg+0x60e/0x790
[  156.168945][T11367]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.168956][T11367]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.168973][T11367]  netlink_rcv_skb+0x208/0x470
[  156.168983][T11367]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.168995][T11367]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.169013][T11367]  ? down_read+0x1ad/0x2e0
[  156.169023][T11367]  genl_rcv+0x28/0x40
[  156.169033][T11367]  netlink_unicast+0x75c/0x8e0
[  156.169047][T11367]  netlink_sendmsg+0x805/0xb30
[  156.169062][T11367]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.169076][T11367]  ? aa_sock_msg_perm+0x94/0x160
[  156.169090][T11367]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.169102][T11367]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.169112][T11367]  __sock_sendmsg+0x21c/0x270
[  156.169122][T11367]  ____sys_sendmsg+0x505/0x830
[  156.169135][T11367]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.169150][T11367]  ? import_iovec+0x74/0xa0
[  156.169162][T11367]  ___sys_sendmsg+0x21f/0x2a0
[  156.169173][T11367]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.169201][T11367]  ? __fget_files+0x2a/0x420
[  156.169212][T11367]  ? __fget_files+0x3a0/0x420
[  156.169227][T11367]  __x64_sys_sendmsg+0x19b/0x260
[  156.169239][T11367]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.169254][T11367]  ? rcu_is_watching+0x15/0xb0
[  156.169266][T11367]  ? do_syscall_64+0xbe/0x3b0
[  156.169277][T11367]  do_syscall_64+0xfa/0x3b0
[  156.169284][T11367]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.169296][T11367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.169304][T11367]  ? exc_page_fault+0x9f/0xf0
[  156.169316][T11367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.169324][T11367] RIP: 0033:0x7f3da6d8e929
[  156.169334][T11367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.169342][T11367] RSP: 002b:00007f3da7bf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.169352][T11367] RAX: ffffffffffffffda RBX: 00007f3da6fb5fa0 RCX: 00007f3da6d8e929
[  156.169358][T11367] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  156.169364][T11367] RBP: 00007f3da6e10b39 R08: 0000000000000000 R09: 0000000000000000
[  156.169369][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.169374][T11367] R13: 0000000000000000 R14: 00007f3da6fb5fa0 R15: 00007ffeb26f8918
[  156.169389][T11367]  </TASK>
[  156.631699][T11383] netlink: 'syz.1.1609': attribute type 1 has an invalid length.
[  156.710113][T11411] netlink: 'syz.0.1618': attribute type 39 has an invalid length.
[  156.863288][ T5880] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  157.535879][T11458] lo speed is unknown, defaulting to 1000
[  157.933442][T11489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.940976][T11489] syzkaller0: entered promiscuous mode
[  157.942689][T11489] syzkaller0: entered allmulticast mode
[  158.012292][T11489] tipc: Resetting bearer <eth:syzkaller0>
[  158.034957][T11488] tipc: Resetting bearer <eth:syzkaller0>
[  158.173233][T11488] tipc: Disabling bearer <eth:syzkaller0>
[  158.575452][T11496] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  158.582642][T11496] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  158.970272][T11509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.991826][T11509] syzkaller0: entered promiscuous mode
[  158.993557][T11509] syzkaller0: entered allmulticast mode
[  159.021268][T11509] tipc: Resetting bearer <eth:syzkaller0>
[  159.024828][T11508] tipc: Resetting bearer <eth:syzkaller0>
[  159.041077][T11508] tipc: Disabling bearer <eth:syzkaller0>
[  159.168803][T11521] validate_nla: 2 callbacks suppressed
[  159.168814][T11521] netlink: 'syz.3.1656': attribute type 7 has an invalid length.
[  159.189099][T11521] netlink: 'syz.3.1656': attribute type 8 has an invalid length.
[  159.243665][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.254398][   T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.269528][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.272135][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.316759][T11520] delete_channel: no stack
[  159.318844][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.340066][   T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.389412][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.392685][T11529] netlink: 'syz.3.1658': attribute type 7 has an invalid length.
[  159.392698][T11529] netlink: 'syz.3.1658': attribute type 8 has an invalid length.
[  159.403778][   T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.432292][T11529] __nla_validate_parse: 23 callbacks suppressed
[  159.432303][T11529] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1658'.
[  159.467226][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.494113][   T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.517037][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'.
[  159.619694][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  159.631814][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  159.642056][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  159.646389][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  159.649416][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  159.685015][   T12] vlan2: left promiscuous mode
[  159.686804][   T12] veth1: left promiscuous mode
[  159.689220][   T12] bridge9: port 3(vlan2) entered disabled state
[  159.697060][   T12] veth0_to_bond: left allmulticast mode
[  159.698911][   T12] veth0_to_bond: left promiscuous mode
[  159.705397][   T12] bridge9: port 2(veth0_to_bond) entered disabled state
[  159.711810][   T12] veth19: left allmulticast mode
[  159.713434][   T12] veth19: left promiscuous mode
[  159.715261][   T12] bridge9: port 1(veth19) entered disabled state
[  159.725064][   T12] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  159.802523][   T12] ip6gretap0 (unregistering): left allmulticast mode
[  159.805919][   T12] ip6gretap0 (unregistering): left promiscuous mode
[  159.905131][   T12] batman_adv: batadv0: Removing interface: ip6gretap3
[  159.948296][T11549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1660'.
[  159.986488][   T12] erspan0 (unregistering): left promiscuous mode
[  160.144445][   T12] dvmrp0 (unregistering): left allmulticast mode
[  160.939573][   T12] bond1 (unregistering): Released all slaves
[  160.947599][   T12] bond2 (unregistering): Released all slaves
[  161.052757][   T12] bond3 (unregistering): Released all slaves
[  161.140875][   T12] bond4 (unregistering): Released all slaves
[  161.148105][   T12] bond5 (unregistering): Released all slaves
[  161.155450][   T12] bond6 (unregistering): Released all slaves
[  161.244520][   T12] bond7 (unregistering): Released all slaves
[  161.255674][   T12] bond8 (unregistering): Released all slaves
[  161.343068][   T12] bond9 (unregistering): Released all slaves
[  161.350305][   T12] bond10 (unregistering): Released all slaves
[  161.437089][   T12] bond11 (unregistering): Released all slaves
[  161.444730][   T12] bond12 (unregistering): Released all slaves
[  161.452162][   T12] bond13 (unregistering): Released all slaves
[  161.460045][   T12] bond14 (unregistering): Released all slaves
[  161.469048][   T12] bond15 (unregistering): Released all slaves
[  161.478568][   T12] bond16 (unregistering): Released all slaves
[  161.529625][   T12] bond0 (unregistering): Released all slaves
[  161.611184][   T12] bond17 (unregistering): Released all slaves
[  161.706423][   T12] bond18 (unregistering): Released all slaves
[  161.731373][   T54] Bluetooth: hci0: command tx timeout
[  161.791862][   T12] bond19 (unregistering): Released all slaves
[  161.801234][   T12] bond20 (unregistering): Released all slaves
[  161.808255][   T12] bond21 (unregistering): Released all slaves
[  161.905553][   T12] bond22 (unregistering): Released all slaves
[  161.914234][   T12] bond23 (unregistering): Released all slaves
[  162.008246][   T12] bond24 (unregistering): (slave bond25): Releasing backup interface
[  162.012300][   T12] bond24 (unregistering): Released all slaves
[  162.086927][   T12] bond25 (unregistering): Released all slaves
[  162.098234][   T12] bond26 (unregistering): Released all slaves
[  162.193622][   T12] bond27 (unregistering): Released all slaves
[  162.201214][   T12] bond28 (unregistering): Released all slaves
[  162.284864][   T12] bond29 (unregistering): Released all slaves
[  162.469825][   T12] : left promiscuous mode
[  162.493421][T11537] lo speed is unknown, defaulting to 1000
[  162.546884][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  162.559528][   T12] tipc: Left network mode
[  162.665817][T11564] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  162.668746][T11564] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  162.775251][T11572] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1667'.
[  163.095043][T11589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.098079][T11589] IPv6: NLM_F_CREATE should be set when creating new route
[  163.155886][T11582] syzkaller0: Caught tx_queue_len zero misconfig
[  163.215789][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1670'.
[  163.389873][T11600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1673'.
[  163.409169][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1673'.
[  163.417608][T11600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1673'.
[  163.432225][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1673'.
[  163.434938][T11600] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1673'.
[  163.454462][T11601] ipvlan1: entered promiscuous mode
[  163.465525][T11537] chnl_net:caif_netlink_parms(): no params data found
[  163.531145][T11607] netlink: 'syz.3.1675': attribute type 7 has an invalid length.
[  163.533492][T11607] netlink: 'syz.3.1675': attribute type 8 has an invalid length.
[  163.736356][T11614] bond17: entered promiscuous mode
[  163.738285][T11614] 8021q: adding VLAN 0 to HW filter on device bond17
[  163.810864][   T54] Bluetooth: hci0: command tx timeout
[  163.888293][T11614] bond17 (unregistering): Released all slaves
[  163.919578][T11618] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  163.923234][T11618] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  164.064665][   T12] pim6reg9 (unregistering): left allmulticast mode
[  164.477798][ T6332] smc: removing ib device syz1
[  164.498358][T11537] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.515400][T11537] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.520031][T11537] bridge_slave_0: entered allmulticast mode
[  164.533637][T11537] bridge_slave_0: entered promiscuous mode
[  164.539011][  T791] lo speed is unknown, defaulting to 1000
[  164.539334][T11537] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.547374][T11537] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.552013][T11537] bridge_slave_1: entered allmulticast mode
[  164.553628][  T791] syz1: Port: 1 Link DOWN
[  164.564835][T11537] bridge_slave_1: entered promiscuous mode
[  164.596492][T11628] bridge0: port 1(syz_tun) entered blocking state
[  164.598710][T11628] bridge0: port 1(syz_tun) entered disabled state
[  164.612608][T11628] syz_tun: entered allmulticast mode
[  164.620680][T11628] syz_tun: entered promiscuous mode
[  164.623536][T11628] bridge0: port 1(syz_tun) entered blocking state
[  164.625745][T11628] bridge0: port 1(syz_tun) entered listening state
[  164.895085][T11537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.933474][T11537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.119614][T11537] team0: Port device team_slave_0 added
[  165.152792][T11537] team0: Port device team_slave_1 added
[  165.288393][T11537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.291300][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.299448][T11537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.316098][T11537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.318609][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.327043][T11537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.460515][T11537] hsr_slave_0: entered promiscuous mode
[  165.463740][T11537] hsr_slave_1: entered promiscuous mode
[  165.651990][T11663] __nla_validate_parse: 4 callbacks suppressed
[  165.652002][T11663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1690'.
[  165.681910][T11661] bridge0: port 2(erspan0) entered blocking state
[  165.683912][T11661] bridge0: port 2(erspan0) entered disabled state
[  165.690214][T11661] erspan0: entered allmulticast mode
[  165.695483][T11661] erspan0: left allmulticast mode
[  165.706129][T11663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1690'.
[  165.890629][   T54] Bluetooth: hci0: command tx timeout
[  165.984330][T11680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1693'.
[  165.986992][T11680] netlink: 'syz.0.1693': attribute type 7 has an invalid length.
[  165.989274][T11680] netlink: 'syz.0.1693': attribute type 8 has an invalid length.
[  165.995100][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1693'.
[  166.009637][ T6513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.012321][ T6513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.028500][T11679] syzkaller0: left promiscuous mode
[  166.030082][T11679] syzkaller0: left allmulticast mode
[  166.032821][T11679] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  166.063194][T11673] delete_channel: no stack
[  166.120071][   T12] IPVS: stop unused estimator thread 0...
[  166.239238][T11537] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  166.250247][T11537] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  166.255762][T11537] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  166.264080][T11537] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  166.336964][T11537] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.357958][T11537] 8021q: adding VLAN 0 to HW filter on device team0
[  166.365590][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.367844][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.379366][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.381595][ T6335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.577685][T11537] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.619623][T11537] veth0_vlan: entered promiscuous mode
[  166.629133][T11537] veth1_vlan: entered promiscuous mode
[  166.659122][T11537] veth0_macvtap: entered promiscuous mode
[  166.666658][T11537] veth1_macvtap: entered promiscuous mode
[  166.681374][T11537] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.688130][T11537] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.699082][T11537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.702439][T11537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.705073][T11537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.707629][T11537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.807974][T11724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.812911][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.815271][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.835124][T11724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.839528][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.840066][T11724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.845672][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.914397][T11729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.928632][T11729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.292617][T11745] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  167.481137][T11758] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1703'.
[  167.483900][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1703'.
[  167.486548][T11758] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1703'.
[  167.489161][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1703'.
[  167.494887][T11758] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1703'.
[  167.520918][T11761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.523642][T11761] syzkaller0: entered promiscuous mode
[  167.525335][T11761] syzkaller0: entered allmulticast mode
[  167.626263][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1708'.
[  167.629085][T11772] netlink: 'syz.0.1708': attribute type 7 has an invalid length.
[  167.636468][T11772] netlink: 'syz.0.1708': attribute type 8 has an invalid length.
[  167.658070][T11766] delete_channel: no stack
[  167.765545][T11782] netlink: 'syz.3.1712': attribute type 10 has an invalid length.
[  167.848657][T11789] netlink: 'syz.3.1715': attribute type 4 has an invalid length.
[  168.153709][T11816] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  168.158290][T11816] veth1: entered promiscuous mode
[  168.160123][T11816] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  168.299337][ T5895] IPVS: starting estimator thread 0...
[  168.390483][T11829] IPVS: using max 62 ests per chain, 148800 per kthread
[  168.407562][T11836] dvmrp1: entered allmulticast mode
[  168.413788][T11838] tap0: tun_chr_ioctl cmd 1074025677
[  168.415661][T11838] tap0: linktype set to 0
[  168.672151][ T5845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.770457][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  168.865218][T11857] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.913494][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.918242][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.930613][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.939298][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.945134][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.983359][T11863] netlink: 'syz.0.1736': attribute type 7 has an invalid length.
[  168.985705][T11863] netlink: 'syz.0.1736': attribute type 8 has an invalid length.
[  169.104332][T11868] No such timeout policy "syz1"
[  169.343645][T11858] chnl_net:caif_netlink_parms(): no params data found
[  169.443943][T11898] netlink: 'syz.0.1746': attribute type 7 has an invalid length.
[  169.446358][T11898] netlink: 'syz.0.1746': attribute type 8 has an invalid length.
[  169.453605][T11893] syzkaller0: left promiscuous mode
[  169.457145][T11893] syzkaller0: left allmulticast mode
[  169.459757][T11858] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.470470][T11858] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.472720][T11858] bridge_slave_0: entered allmulticast mode
[  169.475694][T11858] bridge_slave_0: entered promiscuous mode
[  169.478910][T11893] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.482686][T11858] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.485068][T11858] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.487346][T11858] bridge_slave_1: entered allmulticast mode
[  169.491426][T11858] bridge_slave_1: entered promiscuous mode
[  169.522614][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.526040][T11897] delete_channel: no stack
[  169.532936][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.576295][T11858] team0: Port device team_slave_0 added
[  169.579758][T11858] team0: Port device team_slave_1 added
[  169.608310][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.611656][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.619021][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.624109][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.626153][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.635013][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.735113][T11858] hsr_slave_0: entered promiscuous mode
[  169.737425][T11858] hsr_slave_1: entered promiscuous mode
[  169.739613][T11858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.744831][T11858] Cannot create hsr debugfs directory
[  169.834337][T11910] sctp: [Deprecated]: syz.0.1750 (pid 11910) Use of int in max_burst socket option.
[  169.834337][T11910] Use struct sctp_assoc_value instead
[  170.110864][ T5845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.130234][T11928] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.209684][ T5845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.311671][ T5845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.326128][T11944] _Z`Ԁ@: entered promiscuous mode
[  170.490655][ T5845] bridge_slave_1: left allmulticast mode
[  170.501089][ T5845] bridge_slave_1: left promiscuous mode
[  170.503061][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.518242][ T5845] bridge_slave_0: left allmulticast mode
[  170.533380][ T5845] bridge_slave_0: left promiscuous mode
[  170.537945][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.010634][   T54] Bluetooth: hci0: command tx timeout
[  171.317026][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.323481][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.327141][ T5845] bond0 (unregistering): Released all slaves
[  171.334181][T11958] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  171.337142][T11958] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  171.376252][T11959] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  171.443793][T11967] validate_nla: 5 callbacks suppressed
[  171.443805][T11967] netlink: 'syz.3.1765': attribute type 4 has an invalid length.
[  171.578381][T11972] can: request_module (can-proto-4) failed.
[  171.612410][T11972] xt_hashlimit: size too large, truncated to 1048576
[  171.742724][T11981] __nla_validate_parse: 20 callbacks suppressed
[  171.742736][T11981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1767'.
[  171.760816][T11981] netlink: 'syz.0.1767': attribute type 7 has an invalid length.
[  171.763219][T11981] netlink: 'syz.0.1767': attribute type 8 has an invalid length.
[  171.765632][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'.
[  171.850495][T11975] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1766'.
[  171.907827][T11976] delete_channel: no stack
[  172.199274][T11991] netlink: 'syz.0.1769': attribute type 7 has an invalid length.
[  172.231098][T11991] netlink: 'syz.0.1769': attribute type 8 has an invalid length.
[  172.234268][ T5845] hsr_slave_0: left promiscuous mode
[  172.236719][ T5845] hsr_slave_1: left promiscuous mode
[  172.241221][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.253994][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.271988][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.276820][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.412810][ T5845] veth1_macvtap: left promiscuous mode
[  172.414914][ T5845] veth0_macvtap: left promiscuous mode
[  172.417929][ T5845] veth1_vlan: left promiscuous mode
[  172.419725][ T5845] veth0_vlan: left promiscuous mode
[  172.568111][T12004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1772'.
[  172.823839][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  172.849495][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  173.090809][   T54] Bluetooth: hci0: command tx timeout
[  173.146480][T11994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1769'.
[  173.151167][T12006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.169461][T12007] syzkaller0: entered promiscuous mode
[  173.171696][T12007] syzkaller0: entered allmulticast mode
[  173.225356][T11858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  173.231750][T11858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  173.276249][T11858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  173.288638][T11858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  173.353685][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1775'.
[  173.356569][T12042] netlink: 'syz.3.1775': attribute type 7 has an invalid length.
[  173.358979][T12042] netlink: 'syz.3.1775': attribute type 8 has an invalid length.
[  173.384526][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'.
[  173.537155][T12048] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  173.542512][T12048] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  173.598355][T11858] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.605887][T12021] delete_channel: no stack
[  173.654249][T11858] 8021q: adding VLAN 0 to HW filter on device team0
[  173.666090][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.668357][ T6335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.689539][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.691882][ T6335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.713394][T12058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1778'.
[  173.716235][T12058] netlink: 'syz.3.1778': attribute type 7 has an invalid length.
[  173.737637][T12058] netlink: 'syz.3.1778': attribute type 8 has an invalid length.
[  173.746268][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'.
[  173.853554][T12069] netlink: 'syz.0.1781': attribute type 5 has an invalid length.
[  173.855903][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'.
[  173.867373][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.927330][T11858] veth0_vlan: entered promiscuous mode
[  173.938809][T11858] veth1_vlan: entered promiscuous mode
[  173.979816][T11858] veth0_macvtap: entered promiscuous mode
[  173.990103][T12077] dvmrp8: entered allmulticast mode
[  173.996656][T11858] veth1_macvtap: entered promiscuous mode
[  174.017487][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.037005][T12070] dvmrp8: left allmulticast mode
[  174.058457][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.068549][T11858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.075914][T11858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.078808][T11858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.083613][T11858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.858436][ T6335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.861979][ T6335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.901255][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.903777][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.005117][T12096] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  175.019478][T12096] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  175.145917][T12099] delete_channel: no stack
[  175.258848][T12117] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  175.318694][T12119] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  175.324003][T12119] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  175.691073][T12137] bond17: (slave ip6gretap6): making interface the new active one
[  175.694473][T12137] bond17: (slave ip6gretap6): Enslaving as an active interface with an up link
[  175.709263][T12137] 8021q: adding VLAN 0 to HW filter on device bond17
[  175.852090][ T5845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.874397][T12149] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  175.877132][T12149] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  176.120674][T12160] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  176.124397][T12160] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  176.197656][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.202588][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.206610][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.214618][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.217468][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.341355][T12162] bond18 (unregistering): Released all slaves
[  176.480780][T12181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.602023][T12186] 0: renamed from hsr0
[  176.605496][T12186] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.613820][T12186] 0: entered allmulticast mode
[  176.615397][T12186] hsr_slave_0: entered allmulticast mode
[  176.617912][T12186] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  176.627966][T12165] chnl_net:caif_netlink_parms(): no params data found
[  176.739045][T12165] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.742423][T12165] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.744835][T12165] bridge_slave_0: entered allmulticast mode
[  176.747477][T12165] bridge_slave_0: entered promiscuous mode
[  176.752437][T12165] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.754628][T12165] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.756774][T12165] bridge_slave_1: entered allmulticast mode
[  176.759480][T12165] bridge_slave_1: entered promiscuous mode
[  176.786484][T12165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.787400][T12211] validate_nla: 3 callbacks suppressed
[  176.787413][T12211] netlink: 'syz.0.1819': attribute type 4 has an invalid length.
[  176.799115][T12165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.819732][T12211] netlink: 'syz.0.1819': attribute type 4 has an invalid length.
[  176.832101][T12165] team0: Port device team_slave_0 added
[  176.837263][T12165] team0: Port device team_slave_1 added
[  176.857452][T12165] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.859798][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.878119][T12165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.882866][T12165] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.885036][T12165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.893637][T12165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.897303][T12215] netlink: 'syz.0.1820': attribute type 9 has an invalid length.
[  176.944615][ T5845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.971080][T12165] hsr_slave_0: entered promiscuous mode
[  176.973499][T12165] hsr_slave_1: entered promiscuous mode
[  177.006135][T12219] __nla_validate_parse: 20 callbacks suppressed
[  177.006149][T12219] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1823'.
[  177.128498][ T5845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.139134][T12225] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1822'.
[  177.148802][T12230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.187383][ T5845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.196471][T12229] syzkaller0: entered promiscuous mode
[  177.198248][T12229] syzkaller0: entered allmulticast mode
[  177.217270][T12229] tipc: Resetting bearer <eth:syzkaller0>
[  177.229359][T12229] tipc: Resetting bearer <eth:syzkaller0>
[  177.243784][T12229] tipc: Disabling bearer <eth:syzkaller0>
[  177.301825][T12232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.370404][ T5845] bridge_slave_1: left allmulticast mode
[  177.373032][ T5845] bridge_slave_1: left promiscuous mode
[  177.377086][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.383133][ T5845] bridge_slave_0: left allmulticast mode
[  177.384849][ T5845] bridge_slave_0: left promiscuous mode
[  177.387830][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.659051][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.663598][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.667321][ T5845] bond0 (unregistering): Released all slaves
[  177.709899][T12242] syzkaller0: entered promiscuous mode
[  177.714642][T12242] syzkaller0: entered allmulticast mode
[  177.859849][T12252] netlink: 'syz.0.1830': attribute type 4 has an invalid length.
[  178.059230][T12259] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1832'.
[  178.257261][T12271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1837'.
[  178.260059][T12271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1837'.
[  178.270471][T12271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1837'.
[  178.273673][T12271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1837'.
[  178.278609][T12271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1837'.
[  178.288246][ T5845] hsr_slave_0: left promiscuous mode
[  178.295891][ T5845] hsr_slave_1: left promiscuous mode
[  178.298278][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.305864][ T5221] Bluetooth: hci0: command tx timeout
[  178.310835][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.319663][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.322650][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.357559][ T5845] veth1_macvtap: left promiscuous mode
[  178.359368][ T5845] veth0_macvtap: left promiscuous mode
[  178.366272][ T5845] veth1_vlan: left promiscuous mode
[  178.367987][ T5845] veth0_vlan: left promiscuous mode
[  178.419038][T12282] netlink: 'syz.3.1839': attribute type 4 has an invalid length.
[  178.780864][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  178.826966][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  179.213377][T12165] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  179.219490][T12165] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  179.240585][T12165] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  179.259114][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'.
[  179.265241][T12165] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  179.274104][T12293] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  179.277403][T12293] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  179.311946][T12291] ip6gretap0: entered promiscuous mode
[  179.313936][T12291] macsec0: entered promiscuous mode
[  179.315602][T12291] macsec0: entered allmulticast mode
[  179.317165][T12291] ip6gretap0: entered allmulticast mode
[  179.353629][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'.
[  179.453182][T12165] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.479600][T12165] 8021q: adding VLAN 0 to HW filter on device team0
[  179.505919][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.508235][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.512295][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.514434][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.699500][T12165] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.745090][T12165] veth0_vlan: entered promiscuous mode
[  179.750106][T12165] veth1_vlan: entered promiscuous mode
[  179.790643][T12336] netlink: 'syz.3.1851': attribute type 4 has an invalid length.
[  179.799425][T12165] veth0_macvtap: entered promiscuous mode
[  179.804174][T12165] veth1_macvtap: entered promiscuous mode
[  179.833130][T12165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.847552][T12165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.859720][T12165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.863834][T12165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.866536][T12165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.869296][T12165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.895865][T12345] netlink: 'syz.3.1853': attribute type 4 has an invalid length.
[  179.971554][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.973949][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.024634][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.027076][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.074028][T12349] netlink: 'syz.3.1854': attribute type 10 has an invalid length.
[  180.076418][T12349] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  180.355218][T12353] sctp: [Deprecated]: syz.0.1856 (pid 12353) Use of int in maxseg socket option.
[  180.355218][T12353] Use struct sctp_assoc_value instead
[  180.397197][T12356] syzkaller1: entered promiscuous mode
[  180.399049][T12356] syzkaller1: entered allmulticast mode
[  180.452232][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  181.024226][T12374] netlink: 'syz.3.1864': attribute type 10 has an invalid length.
[  181.033278][T12374] bridge0: port 2(dummy0) entered blocking state
[  181.035575][T12374] bridge0: port 2(dummy0) entered disabled state
[  181.038282][T12374] dummy0: entered allmulticast mode
[  181.042834][T12374] dummy0: entered promiscuous mode
[  181.394122][T12387] xt_hashlimit: max too large, truncated to 1048576
[  181.396498][T12387] Cannot find add_set index 3 as target
[  181.679208][ T5845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.213989][T12402] __nla_validate_parse: 10 callbacks suppressed
[  182.214007][T12402] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1872'.
[  182.238417][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1873'.
[  182.390968][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1875'.
[  182.422172][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  182.425256][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  182.427984][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  182.442704][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  182.445423][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.479713][T12419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1877'.
[  182.544530][T12427] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1880'.
[  182.548107][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'.
[  182.568044][T12427] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1880'.
[  182.576695][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'.
[  182.583851][T12427] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1880'.
[  182.638398][T12431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.651723][T12431] syzkaller0: entered promiscuous mode
[  182.654163][T12431] syzkaller0: entered allmulticast mode
[  182.672304][T12435] netlink: 'syz.3.1884': attribute type 4 has an invalid length.
[  182.741549][T12439] tipc: Resetting bearer <eth:syzkaller0>
[  182.743926][T12435] bridge0: entered promiscuous mode
[  182.763690][T12413] chnl_net:caif_netlink_parms(): no params data found
[  182.790107][T12445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1885'.
[  182.831682][T12413] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.833989][T12413] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.836205][T12413] bridge_slave_0: entered allmulticast mode
[  182.838850][T12413] bridge_slave_0: entered promiscuous mode
[  182.843784][T12413] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.846038][T12413] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.848284][T12413] bridge_slave_1: entered allmulticast mode
[  182.851946][T12413] bridge_slave_1: entered promiscuous mode
[  182.882684][T12413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.887613][T12413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.923389][T12413] team0: Port device team_slave_0 added
[  182.927731][T12413] team0: Port device team_slave_1 added
[  182.954669][T12413] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.956918][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.965123][T12413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.969463][T12413] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.973253][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.988934][T12413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.036459][T12413] hsr_slave_0: entered promiscuous mode
[  183.038771][T12413] hsr_slave_1: entered promiscuous mode
[  183.049295][T12413] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  183.053016][T12413] Cannot create hsr debugfs directory
[  183.244530][ T5845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.365921][T12474] netlink: 'syz.3.1894': attribute type 11 has an invalid length.
[  183.397002][T12478] netlink: 'syz.3.1895': attribute type 1 has an invalid length.
[  183.421177][T12478] 8021q: adding VLAN 0 to HW filter on device bond16
[  183.432827][T12478] bond16: (slave bridge9): making interface the new active one
[  183.435961][T12478] bond16: (slave bridge9): Enslaving as an active interface with an up link
[  183.459199][T12430] tipc: Resetting bearer <eth:syzkaller0>
[  183.478495][T12430] tipc: Disabling bearer <eth:syzkaller0>
[  183.518770][ T5845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.527758][T12480] macvlan0: entered promiscuous mode
[  183.529456][T12480] macvlan0: entered allmulticast mode
[  183.532491][T12480] bond16: entered promiscuous mode
[  183.534576][T12480] bridge9: entered promiscuous mode
[  183.537310][T12480] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  183.542120][T12480] bond16: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  183.547241][T12480] bond16: left promiscuous mode
[  183.548757][T12480] bridge9: left promiscuous mode
[  183.605755][ T5845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.804529][ T5845] bridge_slave_1: left allmulticast mode
[  183.806274][ T5845] bridge_slave_1: left promiscuous mode
[  183.808266][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.823549][ T5845] bridge_slave_0: left allmulticast mode
[  183.825981][ T5845] bridge_slave_0: left promiscuous mode
[  183.827924][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.943065][T12499] netlink: 'syz.0.1898': attribute type 4 has an invalid length.
[  184.143081][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.147204][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.151629][ T5845] bond0 (unregistering): Released all slaves
[  184.207381][T12502] netlink: 'syz.0.1899': attribute type 9 has an invalid length.
[  184.450206][T12511] pim6reg1: entered promiscuous mode
[  184.459331][T12511] pim6reg1: entered allmulticast mode
[  184.531049][ T5221] Bluetooth: hci0: command tx timeout
[  184.602760][T12522] pim6reg9: entered allmulticast mode
[  184.724257][ T5845] hsr_slave_0: left promiscuous mode
[  184.734423][ T5845] hsr_slave_1: left promiscuous mode
[  184.736517][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.738817][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.757120][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.759462][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.796039][ T5845] veth1_macvtap: left promiscuous mode
[  184.797852][ T5845] veth0_macvtap: left promiscuous mode
[  184.799759][ T5845] veth1_vlan: left promiscuous mode
[  184.807569][ T5845] veth0_vlan: left promiscuous mode
[  185.129995][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  185.155606][ T5845] team0 (unregistering): Port device team_slave_0 removed
[  185.453466][T12413] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  185.482660][T12413] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  185.489730][T12413] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  185.503431][T12413] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  185.514931][T12540] xt_hashlimit: size too large, truncated to 1048576
[  185.572982][ T5221] Bluetooth: hci2: command 0x0406 tx timeout
[  185.582769][T12542] syzkaller0: Caught tx_queue_len zero misconfig
[  185.679615][T12413] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.726832][T12413] 8021q: adding VLAN 0 to HW filter on device team0
[  185.737924][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.740157][ T6508] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.743978][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.746216][ T6508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.944329][T12413] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.981442][T12413] veth0_vlan: entered promiscuous mode
[  186.001112][T12413] veth1_vlan: entered promiscuous mode
[  186.008490][T12569] syzkaller0: entered allmulticast mode
[  186.038378][T12413] veth0_macvtap: entered promiscuous mode
[  186.074850][T12413] veth1_macvtap: entered promiscuous mode
[  186.096060][T12413] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.146939][T12413] batman_adv: batadv0: Interface activated: batadv_slave_1
[  186.188565][T12413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.191921][T12413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.194745][T12413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.197458][T12413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.385291][ T6508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.387697][ T6508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.495160][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.497562][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.620742][   T54] Bluetooth: hci0: command tx timeout
[  186.826671][T12601] netlink: 'syz.0.1927': attribute type 4 has an invalid length.
[  186.830115][T12601] netlink: 'syz.0.1927': attribute type 4 has an invalid length.
[  187.009244][T12617] netlink: 'syz.3.1928': attribute type 1 has an invalid length.
[  187.015318][T12617] netlink: 'syz.3.1928': attribute type 18 has an invalid length.
[  187.808207][T12635] netlink: 'syz.0.1938': attribute type 3 has an invalid length.
[  187.817038][T12635] netlink: 'syz.0.1938': attribute type 3 has an invalid length.
[  187.937934][T12645] netlink: 'syz.0.1942': attribute type 1 has an invalid length.
[  187.973065][T12643] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  187.977121][T12643] __nla_validate_parse: 35 callbacks suppressed
[  187.977130][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'.
[  187.987689][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'.
[  188.099256][T12657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1945'.
[  188.105195][T11968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.111499][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1945'.
[  188.117831][T12657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1945'.
[  188.121578][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1945'.
[  188.124996][T12657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1945'.
[  188.954768][T12678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1949'.
[  188.955159][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.961201][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.964204][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.970579][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.973452][T12678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1949'.
[  188.973817][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.055086][T12686] netlink: 'syz.0.1950': attribute type 10 has an invalid length.
[  189.325700][T12708] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.335911][T12675] chnl_net:caif_netlink_parms(): no params data found
[  189.390837][T12708] bridge0: port 1(syz_tun) entered disabled state
[  189.394426][T12708] bridge0: left promiscuous mode
[  189.419136][T12708] veth1: left promiscuous mode
[  189.425162][T12708] 0: left allmulticast mode
[  189.426702][T12708] hsr_slave_0: left allmulticast mode
[  189.449304][T12708] mac80211_hwsim hwsim12 wlan1: left allmulticast mode
[  189.465648][T12708] tipc: Resetting bearer <eth:syzkaller0>
[  189.467793][T12708] syzkaller0: left promiscuous mode
[  189.469589][T12708] syzkaller0: left allmulticast mode
[  189.478863][T12708] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  189.486300][T12708] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  189.489456][T12708] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  189.497592][T12708] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  189.500302][T12708] geneve4: left promiscuous mode
[  189.502139][T12708] geneve4: left allmulticast mode
[  189.507369][T12708] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  189.509925][T12708] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  189.513459][T12708] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  189.516120][T12708] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  189.518972][T12708] geneve5: left promiscuous mode
[  189.532313][T12708] ip6gre1: left promiscuous mode
[  189.540601][T12708] veth9: left promiscuous mode
[  189.552806][T12708] gretap3: left promiscuous mode
[  189.566957][T12708] ipvlan0: left promiscuous mode
[  189.586163][T12708] ip6gre3: left allmulticast mode
[  189.593107][T12708] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  189.595718][T12708] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  189.598299][T12708] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  189.601577][T12708] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  189.604315][T12708] geneve6: left promiscuous mode
[  189.609968][T12708] ipvlan1: left promiscuous mode
[  189.621412][T12708] ip6gretap0: left allmulticast mode
[  189.623911][T12708] macsec0: left promiscuous mode
[  189.625552][T12708] macsec0: left allmulticast mode
[  189.721636][T12675] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.724007][T12675] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.726127][T12675] bridge_slave_0: entered allmulticast mode
[  189.728736][T12675] bridge_slave_0: entered promiscuous mode
[  189.734689][T12675] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.737510][T12675] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.739651][T12675] bridge_slave_1: entered allmulticast mode
[  189.743433][T12675] bridge_slave_1: entered promiscuous mode
[  189.767258][T12675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.780205][T12675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.807497][T12675] team0: Port device team_slave_0 added
[  189.812502][T12675] team0: Port device team_slave_1 added
[  189.830278][T12675] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.833294][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.842335][T12675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.848134][T12675] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.851566][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.861535][T12675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.894548][T12728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1961'.
[  189.905019][T12675] hsr_slave_0: entered promiscuous mode
[  189.908012][T12675] hsr_slave_1: entered promiscuous mode
[  190.053758][T11968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.059507][T12732] netlink: 'syz.3.1963': attribute type 7 has an invalid length.
[  190.062549][T12732] netlink: 'syz.3.1963': attribute type 8 has an invalid length.
[  190.138463][T11968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.199916][T11968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.238408][T12738] pim6reg1: entered promiscuous mode
[  190.240098][T12738] pim6reg1: entered allmulticast mode
[  190.385016][T11968] bridge_slave_1: left allmulticast mode
[  190.386827][T11968] bridge_slave_1: left promiscuous mode
[  190.388718][T11968] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.402507][T11968] bridge_slave_0: left allmulticast mode
[  190.404313][T11968] bridge_slave_0: left promiscuous mode
[  190.406135][T11968] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.749734][T11968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.758468][T11968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.770019][T11968] bond0 (unregistering): Released all slaves
[  191.011074][ T5221] Bluetooth: hci0: command tx timeout
[  191.257804][T12777] netlink: 'syz.0.1973': attribute type 7 has an invalid length.
[  191.260241][T12777] netlink: 'syz.0.1973': attribute type 8 has an invalid length.
[  191.307083][T11968] hsr_slave_0: left promiscuous mode
[  191.317069][T11968] hsr_slave_1: left promiscuous mode
[  191.319179][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.321737][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.338111][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.342037][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.378350][T11968] veth1_macvtap: left promiscuous mode
[  191.380159][T11968] veth0_macvtap: left promiscuous mode
[  191.387887][T11968] veth1_vlan: left promiscuous mode
[  191.389740][T11968] veth0_vlan: left promiscuous mode
[  191.754957][T11968] team0 (unregistering): Port device team_slave_1 removed
[  191.779161][T11968] team0 (unregistering): Port device team_slave_0 removed
[  192.168928][T12675] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  192.189257][T12675] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  192.218719][T12675] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  192.240234][T12675] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  192.312850][T12839] : renamed from batadv_slave_1
[  192.445858][T12675] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.495844][T12675] 8021q: adding VLAN 0 to HW filter on device team0
[  192.506746][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.508928][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.525722][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.528028][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.730160][T12675] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.775487][T12675] veth0_vlan: entered promiscuous mode
[  192.781917][T12675] veth1_vlan: entered promiscuous mode
[  192.804298][T12675] veth0_macvtap: entered promiscuous mode
[  192.808573][T12675] veth1_macvtap: entered promiscuous mode
[  192.819188][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.831661][T12675] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.839576][T12675] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.843093][T12675] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.846565][T12675] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.849951][T12675] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.922520][ T6322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.930649][ T6322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.948166][ T6322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.951846][ T6322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.121085][T12871] syzkaller1: entered promiscuous mode
[  193.122889][T12871] syzkaller1: entered allmulticast mode
[  193.304226][T12875] @: renamed from bond_slave_0
[  193.338582][T12877] __nla_validate_parse: 16 callbacks suppressed
[  193.338595][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1987'.
[  193.619969][T12890] netlink: 308 bytes leftover after parsing attributes in process `syz.3.1991'.
[  193.624749][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'.
[  193.694448][T12899] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1994'.
[  193.697932][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1994'.
[  193.703875][T12899] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1994'.
[  193.706702][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1994'.
[  193.709956][T12899] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1994'.
[  193.715256][T12885] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  193.717566][T12885] tipc: Enabled bearer <udp:syz2>, priority 10
[  193.809103][T12908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1997'.
[  193.852646][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  194.017617][T12920] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2000'.
[  194.120632][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  194.236524][T12938] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  194.298037][T12938] syz_tun: left allmulticast mode
[  194.299695][T12938] syz_tun: left promiscuous mode
[  194.304228][T12938] bridge0: port 1(syz_tun) entered disabled state
[  194.307900][T12938] dummy0: left allmulticast mode
[  194.309489][T12938] dummy0: left promiscuous mode
[  194.317297][T12938] bridge0: port 2(dummy0) entered disabled state
[  194.325074][T12938] bond16: (slave bridge9): Releasing active interface
[  194.331544][T12938] netlink: 'syz.3.2004': attribute type 10 has an invalid length.
[  194.650540][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  194.724128][T11968] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.544412][T12988] netlink: 'syz.3.2015': attribute type 4 has an invalid length.
[  195.549611][T12988] netlink: 'syz.3.2015': attribute type 4 has an invalid length.
[  195.565447][T12986] netlink: 'syz.0.2014': attribute type 13 has an invalid length.
[  195.579708][T12986] netlink: 'syz.0.2014': attribute type 12 has an invalid length.
[  195.682364][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.686909][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.690973][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.698168][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.703457][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.730532][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  195.778213][T12996] IPv6: sit3: Disabled Multicast RS
[  195.782293][T12996] sit3: entered allmulticast mode
[  195.985170][T12993] chnl_net:caif_netlink_parms(): no params data found
[  195.994621][T13012] netlink: 'syz.3.2028': attribute type 1 has an invalid length.
[  196.011770][T13012] 8021q: adding VLAN 0 to HW filter on device bond18
[  196.054538][T13015] 8021q: adding VLAN 0 to HW filter on device bond19
[  196.100307][T13007] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  196.104908][T13007] bond19: (slave macvlan3): Enslaving as a backup interface with a down link
[  196.151659][T12993] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.153830][T12993] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.155957][T12993] bridge_slave_0: entered allmulticast mode
[  196.158549][T12993] bridge_slave_0: entered promiscuous mode
[  196.165629][T12993] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.167972][T12993] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.170152][T12993] bridge_slave_1: entered allmulticast mode
[  196.173992][T13026] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  196.179265][T12993] bridge_slave_1: entered promiscuous mode
[  196.187660][T13026] veth1: entered promiscuous mode
[  196.189332][T13026] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  196.217488][T13022] bridge10: port 1(veth19) entered blocking state
[  196.220112][T13022] bridge10: port 1(veth19) entered disabled state
[  196.222860][T13022] veth19: entered allmulticast mode
[  196.226291][T13022] veth19: entered promiscuous mode
[  196.285956][T12993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.299534][T12993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.342093][T12993] team0: Port device team_slave_0 added
[  196.349114][T12993] team0: Port device team_slave_1 added
[  196.408406][T12993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.410951][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.418408][T12993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.424993][T12993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.427109][T12993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.438516][T12993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.476963][T11968] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.522829][T12993] hsr_slave_0: entered promiscuous mode
[  196.525073][T12993] hsr_slave_1: entered promiscuous mode
[  196.527116][T12993] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  196.529311][T12993] Cannot create hsr debugfs directory
[  196.564534][T11968] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.621902][T11968] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.735538][T13057] netlink: 'syz.3.2035': attribute type 7 has an invalid length.
[  196.737881][T13057] netlink: 'syz.3.2035': attribute type 8 has an invalid length.
[  196.770517][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  196.775479][T11968] bridge_slave_1: left allmulticast mode
[  196.777330][T11968] bridge_slave_1: left promiscuous mode
[  196.779880][T11968] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.792205][T11968] bridge_slave_0: left allmulticast mode
[  196.795149][T11968] bridge_slave_0: left promiscuous mode
[  196.796994][T11968] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.077087][T11968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.081595][T11968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.085412][T11968] bond0 (unregistering): Released all slaves
[  197.534479][T13077] netlink: 'syz.0.2039': attribute type 1 has an invalid length.
[  197.585901][T13077] bond20: entered promiscuous mode
[  197.588198][T13077] 8021q: adding VLAN 0 to HW filter on device bond20
[  197.730835][ T5221] Bluetooth: hci0: command tx timeout
[  197.784298][T13090] tipc: Can't bind to reserved service type 1
[  197.810660][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  197.839192][T13092] netlink: 'syz.0.2041': attribute type 1 has an invalid length.
[  197.880920][ T5934] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  197.976559][T11968] hsr_slave_0: left promiscuous mode
[  197.989114][T11968] hsr_slave_1: left promiscuous mode
[  197.995418][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.997728][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.002093][T11968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.004368][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.025103][T11968] veth1_macvtap: left promiscuous mode
[  198.026822][T11968] veth0_macvtap: left promiscuous mode
[  198.028509][T11968] veth1_vlan: left promiscuous mode
[  198.030108][T11968] veth0_vlan: left promiscuous mode
[  198.387431][T11968] team0 (unregistering): Port device team_slave_1 removed
[  198.430230][T11968] team0 (unregistering): Port device team_slave_0 removed
[  198.731290][T13092] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR
[  198.850594][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  199.625255][T11968] veth19: left allmulticast mode
[  199.626847][T11968] veth19: left promiscuous mode
[  199.628467][T11968] bridge10: port 1(veth19) entered disabled state
[  199.633730][T11968] bridge_slave_1: left allmulticast mode
[  199.635471][T11968] bridge_slave_1: left promiscuous mode
[  199.637228][T11968] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.656975][T11968] bridge_slave_0: left allmulticast mode
[  199.658746][T11968] bridge_slave_0: left promiscuous mode
[  199.665677][T11968] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.837798][T11968] erspan0 (unregistering): left promiscuous mode
[  199.933019][T11968] dvmrp1 (unregistering): left allmulticast mode
[  200.069622][T11968] tipc: Disabling bearer <eth:syzkaller0>
[  200.703962][T11968] bond1 (unregistering): Released all slaves
[  200.783720][T11968] bond2 (unregistering): Released all slaves
[  200.791342][T11968] bond3 (unregistering): Released all slaves
[  200.870843][T11968] bond4 (unregistering): Released all slaves
[  200.942530][T11968] bond5 (unregistering): Released all slaves
[  201.013229][T11968] bond6 (unregistering): Released all slaves
[  201.020245][T11968] bond7 (unregistering): Released all slaves
[  201.099681][T11968] bond8 (unregistering): Released all slaves
[  201.174037][T11968] bond9 (unregistering): Released all slaves
[  201.248551][T11968] bond10 (unregistering): Released all slaves
[  201.256904][T11968] bond11 (unregistering): Released all slaves
[  201.327978][T11968] bond12 (unregistering): Released all slaves
[  201.335500][T11968] bond13 (unregistering): Released all slaves
[  201.418474][T11968] bond14 (unregistering): Released all slaves
[  201.525741][T11968] bond0 (unregistering): Released all slaves
[  201.538550][T11968] bond15 (unregistering): Released all slaves
[  201.625579][T11968] bond16 (unregistering): Released all slaves
[  201.632974][T11968] bond17 (unregistering): Released all slaves
[  201.704735][T11968] bond18 (unregistering): Released all slaves
[  201.820730][T11968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.828082][T11968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.832416][T11968] bond0 (unregistering): Released all slaves
[  201.964445][T11968] _Z`Ԁ@: left promiscuous mode
[  202.064771][T11968] tipc: Disabling bearer <udp:syz2>
[  202.067549][T11968] tipc: Left network mode
[  202.519178][T11968] : left promiscuous mode
[  202.537501][T11968] hsr_slave_0: left promiscuous mode
[  202.546371][T11968] hsr_slave_0: left promiscuous mode
[  202.548518][T11968] hsr_slave_1: left promiscuous mode
[  202.557498][T11968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.561744][T11968] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.589794][T11968] pim6reg9 (unregistering): left allmulticast mode
[  202.861428][ T1095] smc: removing ib device syz!
[  203.139923][T11968] team0 (unregistering): Port device team_slave_1 removed
[  203.157732][T11968] team0 (unregistering): Port device team_slave_0 removed
[  203.864274][T11968] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
04:57:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000ffffffff RCX=9b33ad2e9e1ea900 RDX=0000000000000003
RSI=ffffffff8d9ac406 RDI=ffffffff8be29dc0 RBP=00000000ffffffff RSP=ffffc90002b7e8c0
R8 =0000000000000000 R9 =ffffffff825d58bc R10=dffffc0000000000 R11=ffffed100365ef25
R12=0000000000000246 R13=ffff88811e235640 R14=ffff88801b2f7988 R15=ffff88803146ed84
RIP=ffffffff8b6f5206 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff98500d6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc60f89c38 CR3=000000002f85c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888101942c60 RBX=00000000051801dc RCX=0000000000000000 RDX=dffffc0000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000367f0e8
R8 =0000000000000000 R9 =ffffffff822ec7d2 R10=dffffc0000000000 R11=fffff940008a0477
R12=dffffc0000000000 R13=0000000000000000 R14=ffffea0004502380 R15=0000002e12fbaee4
RIP=ffffffff822d086f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f88828e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f8881d856a3 00007f8881d856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000555569624ef0 0000555569624630
XMM06=0000000000000000 0000000000000000 XMM07=8080820488001188 031c808080840488
XMM08=001180030210000f 8004010000040806 XMM09=2062203061346331 3061396666666666
XMM10=6f5f74696e695f63 6e5f766461746162 XMM11=6666666666660a79 656b5f5f2e676972
XMM12=766f206220303666 6331306139666666 XMM13=79656b5f5f2e7465 6e5f74696e695f73
XMM14=3866633130613966 666666666666660a XMM15=74656e5f74696e69 5f73766f20622030
