last executing test programs:

57.711851072s ago: executing program 0 (id=1122):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0xb66fb8ed326e3267, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)

57.587204962s ago: executing program 0 (id=1126):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0200000006"], 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4, 0x6e}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x16, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x10, 0x15, 0x0, 0x0, @str=',.{((&@\'-{\xcc\x82'}]}]}, 0x34}}, 0x0)

57.504833948s ago: executing program 0 (id=1128):
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xe8, @none, 0xe}, 0xe)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000004) (async)
r1 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x40000)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=<r2=>0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', <r3=>0x0, 0x8750, 0x40, 0x0, 0x89, {{0x8, 0x4, 0x3, 0x4, 0x20, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@end, @noop, @timestamp={0x44, 0x8, 0x46, 0x0, 0xd, [0x1]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x6, 0x6}, {0xfff3, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x1, 0xae}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_RATE={0x6, 0x5, {0xff, 0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
recvfrom$rxrpc(r5, &(0x7f0000000440)=""/143, 0x8f, 0x21, &(0x7f0000000500)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @remote, 0x8}}, 0x24)
shutdown(r4, 0x1)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000640)={&(0x7f0000000540)=""/219, 0xdb, 0x6}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'gre0\x00', <r7=>r3, 0x700, 0x7800, 0x0, 0x81, {{0x19, 0x4, 0x2, 0x7, 0x64, 0x64, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xbc, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x5}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0x24, 0x4f, 0x3, 0x3, [{@rand_addr=0x64010101, 0x8}, {@broadcast, 0x3}, {@multicast2, 0x9}, {@local, 0x10}]}, @ssrr={0x89, 0xf, 0x5, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f00000007c0)={'tunl0\x00', <r8=>r3, 0x8, 0x60888db961b2b020, 0x9, 0x40, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x8, [{@loopback, 0x21b}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x5}]}, @ssrr={0x89, 0x23, 0x8b, [@broadcast, @rand_addr=0x64010101, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x40}, @local, @loopback, @local]}, @ra={0x94, 0x4}, @noop]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', <r9=>r3, 0x7800, 0x8000, 0x0, 0x7fff, {{0x35, 0x4, 0x1, 0x14, 0xd4, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0xe8, 0x3, 0x2, [{@local, 0xb6}, {@private=0xa010100, 0x2}, {@multicast1, 0x4}, {@multicast2, 0x80000001}, {@multicast1, 0x1}, {@broadcast, 0x3}, {@loopback}]}, @rr={0x7, 0xf, 0x85, [@multicast1, @loopback, @local]}, @timestamp={0x44, 0x1c, 0xbb, 0x0, 0x5, [0x1, 0x6, 0x0, 0x1, 0x401, 0x2]}, @cipso={0x86, 0x56, 0x3, [{0x2, 0x12, "a3b5ce0a54e9bd8d574eb07953651445"}, {0x6, 0x11, "2a4c0715d70ba66d218055c8949420"}, {0x5, 0xd, "cc0a96b72317b0c67e5751"}, {0x0, 0x8, "8f8083aef080"}, {0x1, 0x7, "ba39f93b42"}, {0x7, 0xa, "82dcbb638f47cfbb"}, {0x6, 0x7, "1fbaa68a76"}]}]}}}}}) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000009c0)={@multicast1, @multicast2, <r10=>0x0}, &(0x7f0000000a00)=0xc) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', <r11=>r3, 0x29, 0xb, 0x8, 0x5, 0x51, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7809, 0x700, 0x9, 0x80000000}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000d80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x208, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x208}}, 0x8014)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000dc0)=""/146, &(0x7f0000000e80)=0x92)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r12, &(0x7f0000000ec0)={0x1f, 0x3, @none, 0xc134, 0x2}, 0xe)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r13, &(0x7f0000000f00)={0x1, @le_create_conn={{0x200d, 0x19}, {0x0, 0x400, 0x2, 0x3, @any, 0x4, 0x1, 0x7ff, 0xe7, 0x1, 0x6, 0x5}}}, 0x1d)
r14 = socket$nl_route(0x10, 0x3, 0x0) (async)
r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000f80), 0x8) (async)
r16 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$nl_route(r14, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@RTM_GETNSID={0x3c, 0x5a, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r15}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r16}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) (async)
sendmsg$nl_route(r15, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@getstats={0x1c, 0x5e, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x1}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000001180)='./file0\x00', 0x0, 0x30, r5}, 0x18)

57.253979217s ago: executing program 0 (id=1132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0xb66fb8ed326e3267, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)

50.647069071s ago: executing program 0 (id=1132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0xb66fb8ed326e3267, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)

44.984277241s ago: executing program 0 (id=1132):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0xb66fb8ed326e3267, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)

35.035344749s ago: executing program 1 (id=1319):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000040)
getsockopt$packet_int(r1, 0x107, 0xf, 0x0, &(0x7f0000000300))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

34.716167587s ago: executing program 1 (id=1324):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e24, @private=0xa010100}, {0x306, @broadcast}, 0x22, {0x2, 0x4e22, @empty}, 'syzkaller0\x00'}) (async)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0xeb, [0x100, 0x5f, 0xffffffffffffffff, 0xd511, 0x1, 0x1ff], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/235}, &(0x7f00000002c0)=0x78)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000054}, 0x40004) (async)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xef}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async, rerun: 64)
r2 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000540)={'veth1_virt_wifi\x00', 0x401})
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x240008c0}, 0x0) (async)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x14, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000740)={0x1, 0x6}, 0x4) (async)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpuset.mem_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000007c0)=0xcd8, 0x12) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={<r5=>r0, 0x100, 0x7, 0xfffffffffffffffe}) (rerun: 64)
write$cgroup_devices(r5, &(0x7f0000000840)={'c', ' *:* ', 'rw\x00'}, 0x9) (async)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x10040000) (async)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0xb, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x26000000}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7fffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000150}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000ac0), &(0x7f0000000b00)=r5}, 0x20)
write$cgroup_devices(r5, &(0x7f0000000b80)={'b', ' *:* ', 'r\x00'}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000bc0)={<r6=>0x0, 0x34, "84e4a4ac1108bcc20e8d5d0bdb99b870e866e0efbd3a81aa09e55b3e71606db49b45aa9c3b6fee23d8dfa6201560f3a637a861e9"}, &(0x7f0000000c00)=0x3c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000c40)=@assoc_value={r6, 0x6}, 0x8) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x2, 0x7, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000000) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
socket$unix(0x1, 0x2, 0x0) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r5, <r8=>0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%pI4   \x00'}, 0x20) (async)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x6, '\x00', 0x0, r9, 0x5, 0x3, 0x2}, 0x50) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000000f40)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) (async, rerun: 32)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800) (rerun: 32)

34.636263294s ago: executing program 1 (id=1326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)
r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000180)={0x3, @default, r4})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x20, r6, 0x200, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5e0000081000ffff080000000000ff2500000000", @ANYBLOB="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", @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020006000000080003001d000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8044)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e8000000110001281fba6d8c7fa906165aed5db2412d01b7b56f218f9dd14251dd80cca548c3c692bf46833535822d54b71ca678a62416e6399b2792b78f1a2141583f4a0ab5436ce76648b02f955ead"], 0xe8}}, 0x4010)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x400c850)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r9, 0x58, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x4e21, 0x1, 0x4e23, 0x5, 0xa, 0x20, 0x80, 0x88, r10, r4}, {0x10000, 0x100, 0x5, 0x7fffffff, 0x6, 0x8, 0x6, 0x1}, {0x2400, 0x4a6, 0x0, 0x9}, 0x7, 0x6e6bb7, 0x2, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0x32}, 0x2, @in=@multicast2, 0x3507, 0x3, 0x2, 0xc3, 0xec, 0x8, 0xaa6d}}, 0xe8)

34.566600752s ago: executing program 1 (id=1327):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14)
socket$kcm(0x2, 0x2, 0x73)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r3, r2, 0x2, 0x0, 0x4000}, 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r3, r2, 0x2, 0x0, 0x4000}, 0x10)
socket$kcm(0x2, 0x2, 0x73)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) (async)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85}, {}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84040}, 0x0)

34.466499121s ago: executing program 1 (id=1330):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES8=r3, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0xb7c206daabac39f5)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766574680000000018000280140001000000ffc3", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="b9330f55a58f219b4d8c627b2073fffd800000000000001000000069dd834d500afb2e459633ce7c57b1a166ec2f"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

34.134407404s ago: executing program 1 (id=1331):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000055f3411d063d5de2d146d99cb88caa36014546c939cb95aa63a9014f05ef46d51c9ca1e6d396f86281b1df64", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001440)=@nat={'nat\x00', 0x670, 0x5, 0x3a0, 0x140, 0xa8, 0xfbffffff, 0x1e8, 0x1e8, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0xb, @multicast1, @local, @icmp_id=0x64, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x68, @gre_key=0x1}}}}, {{@ip={@loopback, @multicast1, 0x0, 0xffffffff, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {}, 0x11, 0x2, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0xa18, 0x8, 0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
getpeername(r1, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x80) (async)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
sendmsg$alg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d6, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0x40, 0xffffffff}}, 0xe8) (async)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000740)={0x1, 0x2, 0x1000, 0xd0, &(0x7f0000000600)="1bc9ba9d516e61af2d51561fc03f0429fd7928fd9e58ee050f60ea3ab7884dbcf5eb55c6de485482a8e1d76a2a032325ed8855eb4ccdc02fa2c614f20a336eac5d1f8f126b63d228fe712fcb97682f1c480a40ab18c59f36c8a3749e59a77a4c61f077cb64d6132db649ecc61e8fa2be307030b01fa0f5b770f8f8dda2131515266326cada885438ea01e53ca4fed134bbea91b2526c30ed725e84408d4d194280e0d78733297cc0854f0376e02ccd9fde64108cff6c0b9a51666ed974cd9f0fce2b43109777d278fc076896e47fd469", 0x27, 0x0, &(0x7f0000000700)="5a16ec4594745f9e7817d483636314acfd74053fc113f387ce6d1eaefe6a24c6436c50c98dee0b"}) (async)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0xb26, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050200000020000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000"], 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000003000000ea3000"], 0x0, 0x1b, 0x0, 0xa, 0xffffffff}, 0x28)

269.26225ms ago: executing program 2 (id=1566):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13}})
socket$inet6_udplite(0xa, 0x2, 0x88)

162.358977ms ago: executing program 2 (id=1567):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x27, &(0x7f0000000540)=""/86, &(0x7f00000005c0)=0x56)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000a524bf9147148faa554eaf03fd82d3a848625b50e87e5f5bac2d84b4be4a07347c94a9faff2c4b5c80746fab5442", @ANYRES16=r2, @ANYBLOB="0100ffffffff000000000100000008000100030000002400048005000300010000000500030000000000050003008000000005000300070000000800020003000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)

157.955ms ago: executing program 2 (id=1568):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x4000800)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xfffff2a8}], 0x1, 0x40002102, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000000000ebff0a"], 0x14}}, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@fwd={0x1}, @union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xa, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000001540)=""/88, 0x48, 0x58, 0x1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000140), &(0x7f0000000000)=@udp6=r2, 0x1}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e, 0x3302823c70bf4f84]}}, 0x0, 0x2b, 0x0, 0x1, 0xffffffff}, 0x28)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r5, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x5f}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x4281e271155602c7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xba}, @call={0x85, 0x0, 0x0, 0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x90}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94)

93.199186ms ago: executing program 2 (id=1569):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES8=r3, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0xb7c206daabac39f5)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="0401000000000000280012800900010076657468000000001800028014000100000000fe", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="b9330f55a58f219b4d8c627b2073fffd800000000000001000000069dd834d500afb2e459633ce7c57b1a166ec2f"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.754866ms ago: executing program 2 (id=1570):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x63, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)

0s ago: executing program 2 (id=1571):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0x4}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002006400000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0)

kernel console output (not intermixed with test programs):

 T5814] Bluetooth: hci2: command tx timeout
[   67.249564][ T5931] netlink: 'syz.1.17': attribute type 23 has an invalid length.
[   67.505665][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   67.560449][ T5950] netlink: 'syz.1.25': attribute type 23 has an invalid length.
[   67.863839][ T5972] netlink: 'syz.0.33': attribute type 23 has an invalid length.
[   68.142285][ T5993] netlink: 'syz.2.40': attribute type 23 has an invalid length.
[   68.301703][ T6008] C: renamed from team_slave_0 (while UP)
[   68.371756][ T6010] syz_tun: entered allmulticast mode
[   68.380731][ T6010] dvmrp8: entered allmulticast mode
[   68.389507][ T6009] syz_tun: left allmulticast mode
[   69.009248][ T6043] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   69.109856][ T6048] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   69.237643][ T5814] Bluetooth: hci0: command tx timeout
[   69.315239][ T5202] Bluetooth: hci1: command tx timeout
[   69.319082][ T5814] Bluetooth: hci2: command tx timeout
[   69.443406][ T6055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.500987][ T6059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.562833][ T6059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.661971][ T6082] netlink: 'syz.2.66': attribute type 23 has an invalid length.
[   69.796791][ T6091] syzkaller0: entered promiscuous mode
[   69.798553][ T6091] syzkaller0: entered allmulticast mode
[   69.800851][ T6089] tipc: Started in network mode
[   69.802452][ T6089] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   69.808698][ T6089] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[   69.811563][ T6089] tipc: Enabled bearer <udp:syz1>, priority 10
[   70.682586][ T6104] netlink: 'syz.2.73': attribute type 23 has an invalid length.
[   70.727461][ T6106] netlink: 'syz.0.74': attribute type 1 has an invalid length.
[   70.839377][ T6113] veth3: entered promiscuous mode
[   70.925569][ T5862] tipc: Node number set to 1
[   70.961334][ T6117] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.998918][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.001800][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.039397][ T6122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.315305][ T5814] Bluetooth: hci0: command tx timeout
[   71.394563][ T5202] Bluetooth: hci1: command tx timeout
[   71.396496][ T5814] Bluetooth: hci2: command tx timeout
[   71.739057][ T6132] netlink: 'syz.2.82': attribute type 23 has an invalid length.
[   72.006789][ T6145] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.012310][ T6145] __nla_validate_parse: 13 callbacks suppressed
[   72.012325][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'.
[   72.022994][ T6145] bridge_slave_1: left allmulticast mode
[   72.032553][ T6145] bridge_slave_1: left promiscuous mode
[   72.036791][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.059270][ T6145] bridge_slave_0: left allmulticast mode
[   72.061613][ T6145] bridge_slave_0: left promiscuous mode
[   72.063978][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.135974][ T6153] Cannot find del_set index 0 as target
[   72.143276][ T6153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.146559][ T6151] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   72.148876][ T6151] netlink: 224 bytes leftover after parsing attributes in process `syz.2.86'.
[   72.385194][ T6158] netlink: 'syz.0.89': attribute type 23 has an invalid length.
[   72.432529][ T6161] netlink: 'syz.0.90': attribute type 4 has an invalid length.
[   72.447655][ T6161] netlink: 'syz.0.90': attribute type 4 has an invalid length.
[   72.563753][ T6170] netlink: 'syz.0.92': attribute type 1 has an invalid length.
[   72.997415][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'.
[   73.012047][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'.
[   73.019255][ T6189] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.98'.
[   73.027140][ T6188] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[   73.133830][ T6197] netlink: 'syz.2.100': attribute type 1 has an invalid length.
[   73.184938][ T6197] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   73.198782][ T6197] veth3: entered promiscuous mode
[   73.202341][ T6197] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   73.405658][ T6216] xt_l2tp: missing protocol rule (udp|l2tpip)
[   73.512585][    C0] Unknown status report in ack skb
[   73.608865][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'.
[   73.613411][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'.
[   73.644108][ T6234] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   73.653280][ T6234] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   73.664327][ T6234] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   73.787295][ T6250] Bluetooth: MGMT ver 1.23
[   73.867526][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'.
[   73.870422][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'.
[   73.978471][ T6267] atomic_op ffff88803a821198 conn xmit_atomic 0000000000000000
[   73.983182][ T6268] atomic_op ffff88802210a998 conn xmit_atomic 0000000000000000
[   74.015909][ T6270] xt_policy: neither incoming nor outgoing policy selected
[   74.209577][ T6279] netlink: 'syz.2.126': attribute type 23 has an invalid length.
[   74.272928][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[   74.543210][ T6299] netlink: 'syz.2.133': attribute type 23 has an invalid length.
[   74.574271][ T6301] dummy0 speed is unknown, defaulting to 1000
[   74.578654][ T6301] dummy0 speed is unknown, defaulting to 1000
[   74.582195][ T6301] dummy0 speed is unknown, defaulting to 1000
[   74.589734][ T6301] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.599077][ T6301] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   74.619916][ T6301] dummy0 speed is unknown, defaulting to 1000
[   74.628099][ T6301] dummy0 speed is unknown, defaulting to 1000
[   74.630854][ T6301] dummy0 speed is unknown, defaulting to 1000
[   74.905120][ T6330] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   74.918088][ T6330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.160010][ T5864] IPVS: starting estimator thread 0...
[   75.273910][ T6362] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   75.275445][ T6356] IPVS: using max 62 ests per chain, 148800 per kthread
[   75.313662][ T6366] : entered promiscuous mode
[   75.560372][   T33] audit: type=1800 audit(1751554515.740:2): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.155" name="cgroup.controllers" dev="tmpfs" ino=273 res=0 errno=0
[   76.589381][ T6397] syz_tun: entered promiscuous mode
[   76.592281][ T6397] batadv_slave_0: entered promiscuous mode
[   76.597104][ T6397] hsr1: entered allmulticast mode
[   76.598853][ T6397] syz_tun: entered allmulticast mode
[   76.600501][ T6397] batadv_slave_0: entered allmulticast mode
[   76.738353][ T6412] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   76.744020][ T6412] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   76.860224][ T6422] tun0: tun_chr_ioctl cmd 1074025677
[   76.870488][ T6422] tun0: linktype set to 773
[   76.887613][ T6421] validate_nla: 1 callbacks suppressed
[   76.887652][ T6421] netlink: 'syz.1.171': attribute type 23 has an invalid length.
[   76.934156][ T6427] nft_compat: unsupported protocol 0
[   77.030304][ T6435] netlink: 'syz.0.178': attribute type 23 has an invalid length.
[   77.077356][ T6437] __nla_validate_parse: 9 callbacks suppressed
[   77.077375][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'.
[   77.204192][ T6450] netlink: 'syz.2.183': attribute type 23 has an invalid length.
[   77.233891][ T6446] Cannot find add_set index 0 as target
[   77.325952][ T6456] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.365103][ T6459] netlink: 'syz.1.185': attribute type 29 has an invalid length.
[   77.368878][ T6458] lo: entered allmulticast mode
[   77.370738][ T6458] lo: left allmulticast mode
[   77.372978][ T6459] netlink: 'syz.1.185': attribute type 29 has an invalid length.
[   77.380827][ T6459] netlink: 500 bytes leftover after parsing attributes in process `syz.1.185'.
[   77.638326][ T6472] netlink: 'syz.2.191': attribute type 1 has an invalid length.
[   77.683977][ T6472] veth5: entered promiscuous mode
[   77.690223][ T6472] bond3: (slave veth5): Enslaving as a backup interface with a down link
[   77.801699][ T6480] syzkaller1: entered promiscuous mode
[   77.803922][ T6480] syzkaller1: entered allmulticast mode
[   77.953057][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[   77.982393][ T6482] bridge0: port 1(veth3) entered blocking state
[   77.985835][ T6482] bridge0: port 1(veth3) entered disabled state
[   77.988297][ T6482] veth3: entered allmulticast mode
[   77.990876][ T6482] veth3: entered promiscuous mode
[   78.006437][ T6482] bridge0: port 2(veth0_to_bond) entered blocking state
[   78.010757][ T6482] bridge0: port 2(veth0_to_bond) entered disabled state
[   78.013968][ T6482] veth0_to_bond: entered allmulticast mode
[   78.019615][ T6482] veth0_to_bond: entered promiscuous mode
[   78.044847][ T6482] vlan2: entered promiscuous mode
[   78.046959][ T6482] veth1: entered promiscuous mode
[   78.049223][ T6482] vlan2: entered allmulticast mode
[   78.054208][ T6482] veth1: entered allmulticast mode
[   78.059125][ T6482] bridge0: port 3(vlan2) entered blocking state
[   78.061977][ T6482] bridge0: port 3(vlan2) entered disabled state
[   78.070381][ T6482] bridge0: port 3(vlan2) entered blocking state
[   78.073375][ T6482] bridge0: port 3(vlan2) entered forwarding state
[   78.102581][ T6488] netlink: 'syz.2.197': attribute type 23 has an invalid length.
[   78.181981][ T6492] netlink: 'syz.2.199': attribute type 1 has an invalid length.
[   78.266152][ T6492] veth7: entered promiscuous mode
[   78.270956][ T6492] bond4: (slave veth7): Enslaving as a backup interface with a down link
[   78.460424][ T6515] netlink: 'syz.2.205': attribute type 11 has an invalid length.
[   78.465322][ T6515] netlink: 'syz.2.205': attribute type 11 has an invalid length.
[   78.468535][ T6515] netlink: 224 bytes leftover after parsing attributes in process `syz.2.205'.
[   78.633370][ T6525] netlink: 'syz.0.207': attribute type 13 has an invalid length.
[   78.683698][ T6531] netlink: 'syz.2.210': attribute type 1 has an invalid length.
[   78.736143][ T6531] veth9: entered promiscuous mode
[   78.739931][ T6531] bond5: (slave veth9): Enslaving as a backup interface with a down link
[   79.421466][ T6566] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   79.440708][ T6566] veth3: entered promiscuous mode
[   79.445884][ T6566] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   79.613698][ T6573] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   79.778762][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'.
[   79.858417][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   80.122200][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'.
[   80.827923][ T6635] veth11: entered promiscuous mode
[   80.833666][ T6635] bond6: (slave veth11): Enslaving as a backup interface with a down link
[   80.965177][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'.
[   81.130791][ T6653] veth5: entered promiscuous mode
[   81.135183][ T6653] bond2: (slave veth5): Enslaving as a backup interface with a down link
[   81.249755][   T95] cfg80211: failed to load regulatory.db
[   81.382739][ T6673] : entered promiscuous mode
[   81.468137][ T6677] Illegal XDP return value 4294967274 on prog  (id 59) dev N/A, expect packet loss!
[   81.520658][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.254'.
[   81.558111][ T6680] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   81.582149][ T6680] veth5: entered promiscuous mode
[   81.588790][ T6680] bond1: (slave veth5): Enslaving as a backup interface with a down link
[   81.648366][ T6692] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   81.812678][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'.
[   81.944095][ T6703] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   81.951676][ T6703] validate_nla: 4 callbacks suppressed
[   81.951686][ T6703] netlink: 'syz.2.260': attribute type 23 has an invalid length.
[   82.118297][ T6717] netlink: 'syz.2.265': attribute type 1 has an invalid length.
[   82.142436][ T6719] vlan0: entered promiscuous mode
[   82.144341][ T6719] bond0: entered promiscuous mode
[   82.153050][ T6719] bond_slave_0: entered promiscuous mode
[   82.155816][ T6719] bond_slave_1: entered promiscuous mode
[   82.282187][ T6728] __nla_validate_parse: 1 callbacks suppressed
[   82.282206][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[   82.292557][ T6726] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.267'.
[   82.327142][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.269'.
[   82.395051][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[   82.618131][ T6748] netlink: 'syz.0.273': attribute type 1 has an invalid length.
[   82.639778][ T6753] x_tables: duplicate underflow at hook 2
[   82.642098][ T6753] x_tables: duplicate underflow at hook 2
[   82.645000][ T6753] x_tables: duplicate underflow at hook 2
[   82.647734][ T6753] x_tables: duplicate underflow at hook 2
[   82.650106][ T6753] x_tables: duplicate underflow at hook 2
[   82.652309][ T6753] x_tables: duplicate underflow at hook 2
[   82.655038][ T6753] x_tables: duplicate underflow at hook 2
[   82.657450][ T6753] x_tables: duplicate underflow at hook 2
[   82.659674][ T6753] x_tables: duplicate underflow at hook 2
[   82.661979][ T6753] x_tables: duplicate underflow at hook 2
[   82.666341][ T6748] veth7: entered promiscuous mode
[   82.672772][ T6748] bond2: (slave veth7): Enslaving as a backup interface with a down link
[   82.819838][ T6767] netlink: 'syz.0.278': attribute type 23 has an invalid length.
[   82.974298][ T6778] xt_recent: Unsupported userspace flags (00000048)
[   83.067169][ T6783] xt_ecn: cannot match TCP bits for non-tcp packets
[   83.086093][ T6784] netlink: 'syz.0.283': attribute type 1 has an invalid length.
[   83.113857][ T6787] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   83.117288][ T6787] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   83.139727][ T6784] veth9: entered promiscuous mode
[   83.147104][ T6784] bond3: (slave veth9): Enslaving as a backup interface with a down link
[   83.197661][ T6791] netlink: 'syz.0.286': attribute type 23 has an invalid length.
[   83.210323][ T6788] netlink: 64 bytes leftover after parsing attributes in process `syz.1.285'.
[   83.307192][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.288'.
[   83.402636][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'.
[   83.415625][ T6805] netlink: 'syz.0.290': attribute type 12 has an invalid length.
[   83.418141][ T6805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.290'.
[   83.483508][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[   83.490078][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[   83.492802][ T6812] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   83.496537][ T6812] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   83.602677][ T6820] netlink: 'syz.2.294': attribute type 23 has an invalid length.
[   83.640367][ T6823] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[   83.671799][ T6825] dummy0 speed is unknown, defaulting to 1000
[   83.807366][ T6834] dummy0: entered promiscuous mode
[   83.829368][ T6835] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   83.877918][ T6832] dummy0: left promiscuous mode
[   83.922391][ T6840] netlink: 'syz.2.301': attribute type 1 has an invalid length.
[   83.991495][ T6840] veth13: entered promiscuous mode
[   84.014319][ T6840] bond7: (slave veth13): Enslaving as a backup interface with a down link
[   84.110220][ T6849] dummy0 speed is unknown, defaulting to 1000
[   84.547571][ T6887] bridge0: port 3(dummy0) entered blocking state
[   84.549878][ T6887] bridge0: port 3(dummy0) entered disabled state
[   84.552554][ T6887] dummy0: entered allmulticast mode
[   84.557427][ T6887] dummy0: entered promiscuous mode
[   84.559644][ T6887] bridge0: port 3(dummy0) entered blocking state
[   84.561925][ T6887] bridge0: port 3(dummy0) entered forwarding state
[   85.440471][ T6914] veth0_to_bond: left allmulticast mode
[   85.442935][ T6914] veth0_to_bond: left promiscuous mode
[   85.449154][ T6914] bridge0: port 2(veth0_to_bond) entered disabled state
[   85.476389][ T6914] bond0: (slave bond_slave_0): Releasing backup interface
[   85.489512][ T6914] bond_slave_0: left promiscuous mode
[   85.502950][ T6914] bond0: (slave bond_slave_1): Releasing backup interface
[   85.508118][ T6914] bond_slave_1: left promiscuous mode
[   85.519641][ T6914] team0: Port device team_slave_0 removed
[   85.529059][ T6914] team0: Port device team_slave_1 removed
[   85.531449][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.534014][ T6914] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.540860][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.543183][ T6914] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.553821][ T6914] veth3: left allmulticast mode
[   85.556921][ T5819] Bluetooth: hci2: command 0x0405 tx timeout
[   85.560366][ T6914] veth3: left promiscuous mode
[   85.562197][ T6914] bridge0: port 1(veth3) entered disabled state
[   85.568189][ T6914] bridge0: port 3(vlan2) entered disabled state
[   85.573564][ T6914] bond1: (slave ip6gretap1): Releasing backup interface
[   85.582560][ T6914] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 86:71:5a:4f:a9:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   85.592785][ T6914] bond1: (slave veth5): Releasing backup interface
[   85.605162][ T6914] bond2: (slave veth7): Releasing backup interface
[   85.610929][ T6914] bond3: (slave veth9): Releasing backup interface
[   85.646443][ T6933] dummy0 speed is unknown, defaulting to 1000
[   86.082098][ T6953] openvswitch: netlink: nsh attribute has 65438 unknown bytes.
[   86.088447][ T6953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.493585][ T6984] Cannot find set identified by id 0 to match
[   86.512003][ T6984] bond3: entered promiscuous mode
[   86.520353][ T6984] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.646934][ T6996] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   86.648570][ T6997] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   86.688986][ T6996] Cannot find set identified by id 0 to match
[   86.943812][ T7009] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   86.961092][ T7009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   87.023450][ T7019] validate_nla: 10 callbacks suppressed
[   87.023463][ T7019] netlink: 'syz.0.349': attribute type 1 has an invalid length.
[   87.064031][ T7016] bridge0: port 3(dummy0) entered disabled state
[   87.066852][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.071364][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.167860][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.176258][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.231630][ T7016] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.234255][ T7016] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.237464][ T7016] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.240168][ T7016] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.245911][ T7016] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   87.269467][ T7016] veth3: left promiscuous mode
[   87.272496][ T7016] veth5: left promiscuous mode
[   87.278630][ T7016] veth7: left promiscuous mode
[   87.282078][ T7016] veth9: left promiscuous mode
[   87.284252][ T7016] veth11: left promiscuous mode
[   87.287846][ T7016] veth13: left promiscuous mode
[   87.327472][ T7024] veth11: entered promiscuous mode
[   87.331114][ T7024] bond4: (slave veth11): Enslaving as a backup interface with a down link
[   87.412160][ T7029] netlink: 'syz.2.351': attribute type 5 has an invalid length.
[   87.453365][ T7034] __nla_validate_parse: 38 callbacks suppressed
[   87.453378][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'.
[   87.466751][ T7034] netlink: 'syz.0.352': attribute type 23 has an invalid length.
[   87.507972][ T7036] No such timeout policy "syz1"
[   87.961888][ T7059] xt_CT: You must specify a L4 protocol and not use inversions on it
[   87.962554][ T7058] xt_CT: You must specify a L4 protocol and not use inversions on it
[   88.114009][ T7077] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   88.130774][ T7077] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   88.133790][ T7077] netlink: 'syz.0.363': attribute type 1 has an invalid length.
[   88.310342][ T7085] bridge0: failed insert local address into bridge forwarding table
[   88.398332][ T7089] netlink: 'syz.1.367': attribute type 21 has an invalid length.
[   88.482732][ T7085] openvswitch: netlink: IP tunnel dst address not specified
[   88.487259][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[   88.489835][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'.
[   88.737712][ T7099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.766370][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'.
[   88.877178][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'.
[   88.970108][ T7118] netlink: 244 bytes leftover after parsing attributes in process `syz.1.375'.
[   89.040349][ T7123] netlink: 14 bytes leftover after parsing attributes in process `syz.2.376'.
[   89.136250][ T7123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.142551][ T7123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.148747][ T7123] bond0 (unregistering): Released all slaves
[   89.496211][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'.
[   89.588685][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.385'.
[   89.593102][ T7161] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.386'.
[   89.727290][ T7177] xt_check_table_hooks: 23 callbacks suppressed
[   89.727302][ T7177] x_tables: duplicate underflow at hook 1
[   89.835956][ T7184] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   89.848334][ T7187] netlink: 'syz.2.391': attribute type 32 has an invalid length.
[   89.871090][ T7185] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   89.909997][ T7186] dummy0 speed is unknown, defaulting to 1000
[   89.983430][ T7191] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[   90.029618][ T7191] veth15: entered promiscuous mode
[   90.037241][ T7191] bond0: (slave veth15): Enslaving as a backup interface with a down link
[   90.101294][ T7196] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   90.104842][ T7196] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   92.032804][ T7279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.038754][   T47] dummy0 speed is unknown, defaulting to 1000
[   92.090571][ T7285] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   92.094087][ T7285] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   92.544058][ T7314] syzkaller1: entered promiscuous mode
[   92.546427][ T7314] syzkaller1: entered allmulticast mode
[   92.816816][ T7318] dummy0 speed is unknown, defaulting to 1000
[   92.823239][ T7321] validate_nla: 3 callbacks suppressed
[   92.823250][ T7321] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[   92.830448][ T7321] __nla_validate_parse: 13 callbacks suppressed
[   92.830465][ T7321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.428'.
[   92.987706][ T7333] netlink: 'syz.2.430': attribute type 1 has an invalid length.
[   93.043657][ T7333] veth17: entered promiscuous mode
[   93.050473][ T7333] bond8: (slave veth17): Enslaving as a backup interface with a down link
[   93.219994][ T7349] dummy0 speed is unknown, defaulting to 1000
[   93.479604][ T7362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.493119][ T7361] netlink: 'syz.1.440': attribute type 1 has an invalid length.
[   93.493839][ T7362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.571403][ T7361] veth7: entered promiscuous mode
[   93.587889][ T7361] bond4: (slave veth7): Enslaving as a backup interface with a down link
[   93.899116][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'.
[   94.006637][ T7400] netlink: 'syz.2.449': attribute type 2 has an invalid length.
[   94.024689][ T7400] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.449'.
[   94.037215][ T7400] SET target dimension over the limit!
[   94.052153][ T7403] netlink: 'syz.1.450': attribute type 1 has an invalid length.
[   94.158448][ T7403] veth9: entered promiscuous mode
[   94.163425][ T7403] bond5: (slave veth9): Enslaving as a backup interface with a down link
[   94.256726][ T7415] netlink: 'syz.1.453': attribute type 15 has an invalid length.
[   94.260235][ T7415] netlink: 17 bytes leftover after parsing attributes in process `syz.1.453'.
[   94.388122][ T7438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.457'.
[   94.617259][ T7455] dummy0 speed is unknown, defaulting to 1000
[   94.619889][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'.
[   94.623259][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'.
[   94.766846][ T7474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.469'.
[   94.769521][ T7474] netlink: 'syz.2.469': attribute type 1 has an invalid length.
[   95.071326][ T7495] xt_CT: No such helper "snmp"
[   95.110280][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'.
[   95.222319][ T7507] bond9: entered promiscuous mode
[   95.224028][ T7507] bond9: entered allmulticast mode
[   95.226374][ T7507] 8021q: adding VLAN 0 to HW filter on device bond9
[   95.231313][ T7507] netlink: 'syz.2.478': attribute type 11 has an invalid length.
[   95.233632][ T7507] netlink: 'syz.2.478': attribute type 4 has an invalid length.
[   95.235950][ T7507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.478'.
[   95.283776][ T7510] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   95.499589][ T7522] x_tables: ip6_tables: udplite match: only valid for protocol 136
[   95.620316][ T7527] netlink: 'syz.1.484': attribute type 1 has an invalid length.
[   95.698444][ T7527] veth11: entered promiscuous mode
[   95.701936][ T7527] bond6: (slave veth11): Enslaving as a backup interface with a down link
[   96.370489][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.410329][ T7578] vlan2: entered promiscuous mode
[   96.412020][ T7578] vlan2: entered allmulticast mode
[   96.413525][ T7578] hsr_slave_1: entered allmulticast mode
[   96.419113][ T7578] netlink: 'syz.2.493': attribute type 1 has an invalid length.
[   96.972008][ T7589] veth19: entered promiscuous mode
[   96.981611][ T7589] bond10: (slave veth19): Enslaving as a backup interface with a down link
[   97.319651][ T7613] veth21: entered promiscuous mode
[   97.328065][ T7613] bond11: (slave veth21): Enslaving as a backup interface with a down link
[   98.217452][ T7656] validate_nla: 2 callbacks suppressed
[   98.217465][ T7656] netlink: 'syz.1.516': attribute type 1 has an invalid length.
[   98.264618][ T7656] veth13: entered promiscuous mode
[   98.268096][ T7656] bond7: (slave veth13): Enslaving as a backup interface with a down link
[   98.301120][ T7662] __nla_validate_parse: 42 callbacks suppressed
[   98.301133][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'.
[   98.309186][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.518'.
[   98.310314][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'.
[   98.316251][ T7664] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   98.388754][ T7668] No such timeout policy "syz0"
[   98.493599][ T7677] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   98.498791][ T7677] xt_SECMARK: invalid mode: 0
[   98.748569][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.527'.
[   98.898700][ T7694] 8021q: adding VLAN 0 to HW filter on device team0
[   98.904582][ T7694] bridge0: port 3(dummy0) entered blocking state
[   98.907455][ T7694] bridge0: port 3(dummy0) entered forwarding state
[   98.912351][ T7694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.018259][ T7695] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.528'.
[   99.212080][ T7699] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[   99.243214][ T7699] 8021q: adding VLAN 0 to HW filter on device bond8
[   99.331838][ T7702] tipc: Started in network mode
[   99.334131][ T7702] tipc: Node identity da01fd6a5c45, cluster identity 4711
[   99.338824][ T7702] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   99.367098][ T7702] tipc: Resetting bearer <eth:syzkaller0>
[   99.375914][ T7701] tipc: Resetting bearer <eth:syzkaller0>
[   99.604361][ T7705] netlink: 'syz.0.531': attribute type 1 has an invalid length.
[   99.609476][ T7705] netlink: 224 bytes leftover after parsing attributes in process `syz.0.531'.
[   99.820037][ T7707] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[  100.364863][   T47] tipc: Node number set to 2252668266
[  100.505530][ T5864] IPVS: starting estimator thread 0...
[  100.604606][ T7714] IPVS: using max 37 ests per chain, 88800 per kthread
[  100.660611][ T7701] tipc: Disabling bearer <eth:syzkaller0>
[  100.667141][ T7707] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  100.679188][ T7709] veth23: entered promiscuous mode
[  100.830187][ T7731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.930339][ T7736] Cannot find add_set index 0 as target
[  100.976812][ T7739] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[  100.979805][ T7739] netlink: 184 bytes leftover after parsing attributes in process `syz.1.541'.
[  100.987351][ T7739] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[  101.002456][ T7742] netlink: 14 bytes leftover after parsing attributes in process `syz.2.542'.
[  101.063777][ T7747] C: renamed from team_slave_0
[  101.086421][ T7747] netlink: 'syz.0.543': attribute type 4 has an invalid length.
[  101.089446][ T7747] netlink: 116 bytes leftover after parsing attributes in process `syz.0.543'.
[  101.102882][ T7747] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  101.260612][ T7768] netlink: 516 bytes leftover after parsing attributes in process `syz.1.547'.
[  101.307879][ T7766] dummy0 speed is unknown, defaulting to 1000
[  101.361235][ T7771] dummy0 speed is unknown, defaulting to 1000
[  101.386508][ T7777] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[  101.471350][ T7777] tap0: tun_chr_ioctl cmd 1074025677
[  101.473697][ T7777] tap0: linktype set to 0
[  101.807772][ T7799] : entered promiscuous mode
[  102.171265][ T7818] IPv6: Can't replace route, no match found
[  102.871471][ T7829] bond4: (slave veth11): Releasing backup interface
[  103.032754][ T7838] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  103.178793][ T7850] netlink: 'syz.0.569': attribute type 8 has an invalid length.
[  103.361784][ T7861] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[  103.478609][ T7861] veth15: entered promiscuous mode
[  103.485383][ T7861] bond9: (slave veth15): Enslaving as a backup interface with a down link
[  103.560974][ T7872] __nla_validate_parse: 6 callbacks suppressed
[  103.560995][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'.
[  103.582076][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'.
[  103.588923][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'.
[  103.826191][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'.
[  103.943000][ T7898] netlink: 'syz.2.583': attribute type 1 has an invalid length.
[  104.006876][ T7898] veth23: entered promiscuous mode
[  104.010401][ T7898] bond12: (slave veth23): Enslaving as a backup interface with a down link
[  104.228937][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'.
[  104.247721][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'.
[  104.307534][ T7916] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  104.343042][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  104.603147][ T7941] SET target dimension over the limit!
[  104.760663][ T7957] netlink: 9 bytes leftover after parsing attributes in process `syz.2.602'.
[  104.874015][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'.
[  105.129031][ T7998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.612'.
[  105.452503][ T8018] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[  105.494223][ T8018] veth25: entered promiscuous mode
[  105.500693][ T8018] bond14: (slave veth25): Enslaving as a backup interface with a down link
[  105.860531][ T8038] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  106.008161][ T8046] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  106.057585][ T8046] veth27: entered promiscuous mode
[  106.062390][ T8046] bond15: (slave veth27): Enslaving as a backup interface with a down link
[  106.104301][ T8049] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  106.192886][ T8053] dummy0 speed is unknown, defaulting to 1000
[  106.477220][ T8072] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[  107.574734][ T8072] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  107.575734][ T8076] tipc: Invalid UDP bearer configuration
[  107.578991][ T8076] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  107.613879][ T8079] veth29: entered promiscuous mode
[  107.953369][ T8097] macvtap1: entered allmulticast mode
[  107.957944][ T8097] veth0_macvtap: entered allmulticast mode
[  107.961022][ T8095] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  108.048279][ T8103] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  108.054366][ T8103] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20003
[  108.169558][ T8110] netlink: 'syz.1.646': attribute type 1 has an invalid length.
[  108.248736][ T8110] veth19: entered promiscuous mode
[  108.257003][ T8110] bond10: (slave veth19): Enslaving as a backup interface with a down link
[  109.080802][ T8131] netlink: 'syz.2.654': attribute type 2 has an invalid length.
[  109.094203][ T8131] __nla_validate_parse: 46 callbacks suppressed
[  109.094224][ T8131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.654'.
[  109.304310][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  109.318841][ T8137] netlink: 'syz.0.656': attribute type 1 has an invalid length.
[  109.420980][ T8137] veth15: entered promiscuous mode
[  109.428558][ T8137] bond5: (slave veth15): Enslaving as a backup interface with a down link
[  109.437741][ T8140] dummy0: entered promiscuous mode
[  109.528642][ T8144] netlink: 'syz.2.659': attribute type 1 has an invalid length.
[  109.531447][ T8139] dummy0: left promiscuous mode
[  109.627515][ T8151] veth29: entered promiscuous mode
[  109.667448][ T8153] netlink: 64 bytes leftover after parsing attributes in process `syz.1.662'.
[  109.675798][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'.
[  109.699251][ T8144] erspan0: entered allmulticast mode
[  109.739458][ T8154] dummy0 speed is unknown, defaulting to 1000
[  110.028794][ T8177] netlink: 'syz.1.667': attribute type 1 has an invalid length.
[  110.165005][ T8177] veth21: entered promiscuous mode
[  110.171025][ T8177] bond11: (slave veth21): Enslaving as a backup interface with a down link
[  110.286002][ T8183] netlink: 'syz.0.668': attribute type 25 has an invalid length.
[  110.559710][ T8214] syzkaller1: entered promiscuous mode
[  110.561410][ T8214] syzkaller1: entered allmulticast mode
[  110.646220][ T8220] netlink: 'syz.0.677': attribute type 1 has an invalid length.
[  110.714212][ T8220] veth17: entered promiscuous mode
[  110.718663][ T8220] bond6: (slave veth17): Enslaving as a backup interface with a down link
[  110.812395][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'.
[  110.818950][ T8229] IPv6: NLM_F_REPLACE set, but no existing node found!
[  110.962355][ T8252] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  110.976283][ T8252] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  111.102927][ T8265] netlink: 'syz.1.688': attribute type 1 has an invalid length.
[  111.146433][ T8275] netlink: 36 bytes leftover after parsing attributes in process `syz.0.691'.
[  111.150116][ T8265] veth23: entered promiscuous mode
[  111.159919][ T8265] bond12: (slave veth23): Enslaving as a backup interface with a down link
[  111.199881][ T8276] dummy0 speed is unknown, defaulting to 1000
[  111.477192][ T8297] netlink: 'syz.0.697': attribute type 10 has an invalid length.
[  111.486408][ T8297] bridge_slave_1: entered promiscuous mode
[  111.489303][ T8297] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  111.632180][ T8304] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[  111.678431][ T8304] veth25: entered promiscuous mode
[  111.687221][ T8304] bond13: (slave veth25): Enslaving as a backup interface with a down link
[  111.722228][ T8310] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  111.764380][ T8312] x_tables: duplicate underflow at hook 3
[  111.812078][ T8312] bond14 (unregistering): Released all slaves
[  112.190211][ T8328] netlink: 'syz.2.708': attribute type 1 has an invalid length.
[  112.245489][ T8328] veth29: entered promiscuous mode
[  112.249756][ T8328] bond16: (slave veth29): Enslaving as a backup interface with a down link
[  112.312957][ T8333] xt_hashlimit: overflow, try lower: 6/0
[  112.342373][ T8335] trusted_key: syz.1.710 sent an empty control message without MSG_MORE.
[  112.510864][ T8345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  112.513809][ T8345] IPv6: NLM_F_CREATE should be set when creating new route
[  112.739296][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'.
[  112.893867][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.899108][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.901898][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.904283][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.908388][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.910722][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.913069][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.916225][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.918899][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  112.921411][ T8363] ipt_REJECT: ECHOREPLY no longer supported.
[  113.030915][ T8368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'.
[  113.379132][ T8376] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  113.382067][ T8376] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  113.393306][ T8378] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  113.482657][ T8380] veth31: entered promiscuous mode
[  113.586566][ T8388] erspan0: left allmulticast mode
[  113.618486][ T8390] netlink: 48 bytes leftover after parsing attributes in process `syz.1.732'.
[  113.649377][ T8388] bridge0: port 3(dummy0) entered disabled state
[  113.682209][ T8388] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  113.691472][ T8388] veth15: left promiscuous mode
[  113.700698][ T8388] veth17: left promiscuous mode
[  113.709727][ T8388] bond9: left promiscuous mode
[  113.713355][ T8388] bond9: left allmulticast mode
[  113.722587][ T8388] vlan2: left promiscuous mode
[  113.727134][ T8388] vlan2: left allmulticast mode
[  113.729110][ T8388] hsr_slave_1: left allmulticast mode
[  113.734275][ T8388] veth19: left promiscuous mode
[  113.738685][ T8388] veth21: left promiscuous mode
[  113.743179][ T8388] veth23: left promiscuous mode
[  113.747621][ T8388] veth25: left promiscuous mode
[  113.752048][ T8388] veth27: left promiscuous mode
[  113.757254][ T8388] veth29: left promiscuous mode
[  113.761305][ T8388] veth31: left promiscuous mode
[  113.867837][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'.
[  113.946101][ T8400] veth19: entered promiscuous mode
[  113.952551][ T8400] bond8: (slave veth19): Enslaving as a backup interface with a down link
[  114.150355][ T8408] netlink: 52 bytes leftover after parsing attributes in process `syz.0.738'.
[  114.216103][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'.
[  114.609452][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'.
[  114.716049][ T8430] validate_nla: 2 callbacks suppressed
[  114.716067][ T8430] netlink: 'syz.1.743': attribute type 1 has an invalid length.
[  114.766716][ T8430] veth27: entered promiscuous mode
[  114.773397][ T8430] bond15: (slave veth27): Enslaving as a backup interface with a down link
[  114.822093][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'.
[  114.927221][ T8442] netlink: 596 bytes leftover after parsing attributes in process `syz.2.747'.
[  115.059859][ T8449] dummy0 speed is unknown, defaulting to 1000
[  115.097288][ T8457] netlink: 64 bytes leftover after parsing attributes in process `syz.2.749'.
[  115.129407][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  115.132805][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  115.150291][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[  115.303844][ T8464] veth0_to_bridge: entered promiscuous mode
[  115.309040][ T8463] veth0_to_bridge: left promiscuous mode
[  115.413022][ T8466] netlink: 'syz.1.754': attribute type 1 has an invalid length.
[  115.459747][ T8466] veth29: entered promiscuous mode
[  115.465982][ T8466] bond16: (slave veth29): Enslaving as a backup interface with a down link
[  115.533591][ T8471] macsec0: entered promiscuous mode
[  115.540955][ T8471] macsec0: left promiscuous mode
[  115.589524][ T8477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.758'.
[  115.665805][ T8485] netlink: 'syz.2.760': attribute type 2 has an invalid length.
[  115.686618][ T8485] dummy0 speed is unknown, defaulting to 1000
[  115.859540][ T8493] netlink: 'syz.1.763': attribute type 1 has an invalid length.
[  115.902762][ T8493] veth31: entered promiscuous mode
[  115.919638][ T8493] bond17: (slave veth31): Enslaving as a backup interface with a down link
[  116.167868][ T8510] netlink: 'syz.1.769': attribute type 1 has an invalid length.
[  116.226676][ T8514] netlink: 'syz.2.772': attribute type 1 has an invalid length.
[  116.299410][ T8514] veth33: entered promiscuous mode
[  116.306567][ T8514] bond17: (slave veth33): Enslaving as a backup interface with a down link
[  116.362592][ T8522] netdevsim netdevsim0: Direct firmware load for .
[  116.362592][ T8522]  failed with error -2
[  116.378449][ T8522] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  116.378449][ T8522] 
[  116.662184][ T8548] bridge2: entered promiscuous mode
[  116.664337][ T8548] bridge2: entered allmulticast mode
[  116.767552][ T8554] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  116.818056][ T8554] veth35: entered promiscuous mode
[  116.823908][ T8554] bond18: (slave veth35): Enslaving as a backup interface with a down link
[  117.070030][ T8557] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  117.504344][ T8583] veth33: left promiscuous mode
[  117.513530][ T8583] veth35: left promiscuous mode
[  117.610955][ T8591] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  117.613717][ T8591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.699838][ T8596] netlink: 'syz.1.798': attribute type 1 has an invalid length.
[  117.775875][ T8596] veth33: entered promiscuous mode
[  117.780151][ T8596] bond18: (slave veth33): Enslaving as a backup interface with a down link
[  117.873000][ T8614] netlink: 'syz.2.805': attribute type 1 has an invalid length.
[  117.928808][ T8614] 8021q: adding VLAN 0 to HW filter on device bond20
[  117.939922][ T8614] bond19: (slave bond20): making interface the new active one
[  117.946903][ T8614] bond19: (slave bond20): Enslaving as an active interface with an up link
[  117.975910][ T8614] bond19: (slave gretap1): Enslaving as a backup interface with an up link
[  117.998419][ T5819] Bluetooth: hci2: link tx timeout
[  118.000525][ T5819] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.145636][ T8632] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[  118.203053][ T8632] veth37: entered promiscuous mode
[  118.208617][ T8632] bond19: (slave veth37): Enslaving as a backup interface with a down link
[  118.539997][ T8674] veth39: entered promiscuous mode
[  118.545353][ T8674] bond20: (slave veth39): Enslaving as a backup interface with a down link
[  118.574271][ T8677] dummy0 speed is unknown, defaulting to 1000
[  119.331515][ T8715] __nla_validate_parse: 18 callbacks suppressed
[  119.331528][ T8715] netlink: 44 bytes leftover after parsing attributes in process `syz.1.832'.
[  119.450734][ T8728] netlink: 11 bytes leftover after parsing attributes in process `syz.1.838'.
[  119.478111][ T8731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.836'.
[  119.573490][ T8739] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  119.577050][ T8740] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  119.580839][ T8737] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  119.627335][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.837'.
[  119.630011][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'.
[  119.642880][ T8737] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.839'.
[  120.048054][ T5814] Bluetooth: hci2: command 0x0405 tx timeout
[  120.089087][ T8769] Cannot find set identified by id 2 to match
[  120.200688][ T8769] wg1: entered promiscuous mode
[  120.202207][ T8769] wg1: entered allmulticast mode
[  120.368066][ T8774] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  120.487499][ T8778] validate_nla: 3 callbacks suppressed
[  120.487517][ T8778] netlink: 'syz.2.851': attribute type 1 has an invalid length.
[  120.559860][ T8778] veth37: entered promiscuous mode
[  120.565589][ T8778] bond21: (slave veth37): Enslaving as a backup interface with a down link
[  120.665458][ T8784] syzkaller1: entered promiscuous mode
[  120.667632][ T8784] syzkaller1: entered allmulticast mode
[  120.823633][ T8799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.858'.
[  120.916340][ T8810] netlink: 'syz.2.862': attribute type 1 has an invalid length.
[  120.999092][ T8810] veth39: entered promiscuous mode
[  121.003781][ T8810] bond22: (slave veth39): Enslaving as a backup interface with a down link
[  121.044774][ T8821] netlink: 'syz.2.867': attribute type 26 has an invalid length.
[  121.097187][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.869'.
[  121.119641][ T8829] xt_hashlimit: size too large, truncated to 1048576
[  121.122488][ T8829] xt_hashlimit: max too large, truncated to 1048576
[  121.199931][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[  121.203093][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'.
[  121.207729][ T8836] netlink: 'syz.1.871': attribute type 7 has an invalid length.
[  121.331999][ T8846] netlink: 'syz.0.873': attribute type 1 has an invalid length.
[  121.406134][ T8846] veth21: entered promiscuous mode
[  121.410558][ T8846] bond9: (slave veth21): Enslaving as a backup interface with a down link
[  122.309184][ T8903] IPv6: sit1: Disabled Multicast RS
[  122.312254][ T8903] sit1: entered allmulticast mode
[  122.997052][ T8916] sctp: [Deprecated]: syz.0.888 (pid 8916) Use of int in maxseg socket option.
[  122.997052][ T8916] Use struct sctp_assoc_value instead
[  123.049644][ T8918] tipc: Started in network mode
[  123.051324][ T8918] tipc: Node identity 00000000000000000300000040000001, cluster identity 4711
[  123.056455][ T8918] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  123.133028][ T8922] netlink: 'syz.0.891': attribute type 4 has an invalid length.
[  123.460774][ T8931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  123.709469][ T8942] netlink: 'syz.1.898': attribute type 23 has an invalid length.
[  123.771618][ T8942] dummy0 speed is unknown, defaulting to 1000
[  123.886914][ T8947] netlink: 'syz.2.899': attribute type 1 has an invalid length.
[  123.951403][ T8947] veth41: entered promiscuous mode
[  123.956894][ T8947] bond23: (slave veth41): Enslaving as a backup interface with a down link
[  124.167786][ T8957] netlink: 'syz.1.903': attribute type 6 has an invalid length.
[  124.299560][ T8966] netlink: 'syz.2.906': attribute type 1 has an invalid length.
[  124.390437][ T8966] veth43: entered promiscuous mode
[  124.396549][ T8966] bond24: (slave veth43): Enslaving as a backup interface with a down link
[  124.512859][ T8984] __nla_validate_parse: 7 callbacks suppressed
[  124.512871][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[  124.517872][ T8984] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  124.520339][ T8984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.607961][ T8986] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  124.610445][ T8986] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  124.671357][ T8994] veth23: entered promiscuous mode
[  124.677663][ T8994] bond10: (slave veth23): Enslaving as a backup interface with a down link
[  124.795674][ T9006] bond11: entered promiscuous mode
[  124.797264][ T9006] bond11: entered allmulticast mode
[  124.799105][ T9006] 8021q: adding VLAN 0 to HW filter on device bond11
[  124.901664][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'.
[  124.981051][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'.
[  124.984233][ T9017] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  124.996029][ T9017] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  125.019717][ T9017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'.
[  125.841845][ T9041] IPv6: sit1: Disabled Multicast RS
[  125.844120][ T9041] sit1: entered allmulticast mode
[  125.936125][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'.
[  125.971884][ T9044] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  126.097015][ T9055] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  126.102328][ T9056] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  126.174118][ T9060] syz.1.940 (9060) used obsolete PPPIOCDETACH ioctl
[  126.400000][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'.
[  126.403172][ T9071] validate_nla: 1 callbacks suppressed
[  126.403185][ T9071] netlink: 'syz.2.944': attribute type 7 has an invalid length.
[  126.407694][ T9071] netlink: 'syz.2.944': attribute type 8 has an invalid length.
[  126.410108][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'.
[  126.440476][ T9073] IPv6: sit1: Disabled Multicast RS
[  126.442847][ T9073] sit1: entered allmulticast mode
[  126.483476][ T9077] netlink: 128 bytes leftover after parsing attributes in process `syz.2.946'.
[  126.542171][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'.
[  126.599719][ T9085] netlink: 830 bytes leftover after parsing attributes in process `syz.1.948'.
[  127.403450][ T9019] Set syz1 is full, maxelem 65536 reached
[  127.434992][ T9103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.459702][ T9107] IPv6: sit2: Disabled Multicast RS
[  127.461837][ T9107] sit2: entered allmulticast mode
[  127.909698][ T9141] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  128.279860][ T9166] netlink: 'syz.0.975': attribute type 1 has an invalid length.
[  128.306592][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.329056][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.364361][ T9166] veth25: entered promiscuous mode
[  128.371706][ T9166] bond12: (slave veth25): Enslaving as a backup interface with a down link
[  128.639528][ T9189] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  128.660967][ T9190] netlink: 'syz.1.984': attribute type 1 has an invalid length.
[  128.705709][ T9190] veth41: entered promiscuous mode
[  128.711014][ T9190] bond21: (slave veth41): Enslaving as a backup interface with a down link
[  128.954105][ T9216] netlink: 'syz.1.993': attribute type 1 has an invalid length.
[  128.979442][ T9218] openvswitch: netlink: Flow key attr not present in new flow.
[  128.979461][ T9212] openvswitch: netlink: Flow key attr not present in new flow.
[  128.997082][ T9216] veth43: entered promiscuous mode
[  129.001664][ T9216] bond22: (slave veth43): Enslaving as a backup interface with a down link
[  129.039329][ T9220] netlink: 'syz.1.994': attribute type 2 has an invalid length.
[  129.318537][ T9235] netlink: 'syz.1.1001': attribute type 1 has an invalid length.
[  129.364855][ T9235] veth45: entered promiscuous mode
[  129.372241][ T9235] bond23: (slave veth45): Enslaving as a backup interface with a down link
[  129.626104][ T9259] netlink: 'syz.2.1009': attribute type 1 has an invalid length.
[  129.653760][ T9259] veth45: entered promiscuous mode
[  129.658278][ T9259] bond25: (slave veth45): Enslaving as a backup interface with a down link
[  129.683233][ T9262] __nla_validate_parse: 15 callbacks suppressed
[  129.683246][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1010'.
[  129.685704][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1011'.
[  129.756751][ T9269] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1013'.
[  129.907616][ T9284] netlink: 'syz.2.1018': attribute type 7 has an invalid length.
[  129.926292][ T9286] netlink: 'syz.0.1019': attribute type 1 has an invalid length.
[  130.009178][ T9286] veth27: entered promiscuous mode
[  130.014340][ T9286] bond13: (slave veth27): Enslaving as a backup interface with a down link
[  130.171771][ T9304] dummy0 speed is unknown, defaulting to 1000
[  130.251038][ T9313] dummy0 speed is unknown, defaulting to 1000
[  130.429354][ T9323] veth29: entered promiscuous mode
[  130.433419][ T9323] bond14: (slave veth29): Enslaving as a backup interface with a down link
[  130.509359][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'.
[  130.647476][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1029'.
[  130.735402][ T9332] openvswitch: netlink: IPv4 tun info is not correct
[  130.738441][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'.
[  130.873462][ T9341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1032'.
[  131.002673][ T9349] veth31: entered promiscuous mode
[  131.006928][ T9349] bond15: (slave veth31): Enslaving as a backup interface with a down link
[  131.059191][ T9354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1038'.
[  131.135118][ T9361] bridge0: failed insert local address into bridge forwarding table
[  131.138618][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'.
[  131.336801][ T9376] veth47: entered promiscuous mode
[  131.342296][ T9376] bond26: (slave veth47): Enslaving as a backup interface with a down link
[  131.469886][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[  131.728974][ T9399] validate_nla: 3 callbacks suppressed
[  131.729026][ T9399] netlink: 'syz.0.1053': attribute type 1 has an invalid length.
[  131.784104][ T9399] veth33: entered promiscuous mode
[  131.797440][ T9399] bond16: (slave veth33): Enslaving as a backup interface with a down link
[  132.310639][ T9423] netlink: 'syz.1.1061': attribute type 1 has an invalid length.
[  132.406029][ T9423] veth49: entered promiscuous mode
[  132.411084][ T9423] bond24: (slave veth49): Enslaving as a backup interface with a down link
[  132.766494][ T9452] sch_tbf: burst 1885 is lower than device lo mtu (65550) !
[  132.891477][ T9464] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  132.953558][ T9464] veth49: entered promiscuous mode
[  132.961131][ T9464] bond27: (slave veth49): Enslaving as a backup interface with a down link
[  133.141514][ T9475] tipc: MTU too low for tipc bearer
[  134.002742][ T9493] bridge_slave_1: left allmulticast mode
[  134.007021][ T9493] bridge_slave_1: left promiscuous mode
[  134.009361][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.019479][ T9493] bridge_slave_0: left allmulticast mode
[  134.021615][ T9493] bridge_slave_0: left promiscuous mode
[  134.025081][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.033854][ T9496] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[  134.169376][ T9496] 8021q: adding VLAN 0 to HW filter on device bond28
[  134.299443][ T9503] sctp: [Deprecated]: syz.1.1086 (pid 9503) Use of int in maxseg socket option.
[  134.299443][ T9503] Use struct sctp_assoc_value instead
[  134.519651][ T9521] dummy0: left allmulticast mode
[  134.524540][ T9521] dummy0: left promiscuous mode
[  134.526690][ T9521] bridge0: port 3(dummy0) entered disabled state
[  134.536425][ T9521] bridge_slave_1: left allmulticast mode
[  134.538251][ T9521] bridge_slave_1: left promiscuous mode
[  134.540161][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.556875][ T9521] bridge_slave_0: left allmulticast mode
[  134.559122][ T9521] bridge_slave_0: left promiscuous mode
[  134.562784][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.712952][ T9539] netlink: 'syz.1.1098': attribute type 1 has an invalid length.
[  134.765673][ T9539] veth51: entered promiscuous mode
[  134.770169][ T9539] bond25: (slave veth51): Enslaving as a backup interface with a down link
[  137.907948][ T9552] __nla_validate_parse: 6 callbacks suppressed
[  137.907964][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'.
[  138.081133][ T9567] netlink: 'syz.2.1109': attribute type 1 has an invalid length.
[  138.153871][ T9567] veth53: entered promiscuous mode
[  138.160175][ T9567] bond29: (slave veth53): Enslaving as a backup interface with a down link
[  138.520924][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'.
[  138.523852][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'.
[  138.534717][ T9584] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1115'.
[  138.544519][ T9584] netlink: 'syz.2.1115': attribute type 3 has an invalid length.
[  138.547040][ T9584] netlink: 'syz.2.1115': attribute type 2 has an invalid length.
[  138.549818][ T9584] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1115'.
[  138.553420][ T9584] netlink: 'syz.2.1115': attribute type 2 has an invalid length.
[  138.564903][ T9584] sit1: entered promiscuous mode
[  138.646592][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'.
[  138.649471][ T9588] netlink: 'syz.2.1117': attribute type 3 has an invalid length.
[  138.794822][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'.
[  139.038971][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'.
[  139.044130][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'.
[  139.132049][ T9612] netlink: 'syz.1.1124': attribute type 1 has an invalid length.
[  139.178856][ T9619] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[  139.206274][ T9612] veth53: entered promiscuous mode
[  139.211731][ T9612] bond26: (slave veth53): Enslaving as a backup interface with a down link
[  139.289828][ T9623] bridge_slave_0: entered promiscuous mode
[  139.541026][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.618570][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.698296][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.739951][ T9642] netlink: 'syz.1.1134': attribute type 3 has an invalid length.
[  139.742472][ T9642] netlink: 'syz.1.1134': attribute type 3 has an invalid length.
[  139.777779][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.856682][ T9644] netlink: 'syz.1.1135': attribute type 1 has an invalid length.
[  139.942536][ T9644] veth55: entered promiscuous mode
[  139.952886][ T9644] bond27: (slave veth55): Enslaving as a backup interface with a down link
[  139.981273][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  139.985863][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  139.989209][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  139.993467][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  139.996704][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.523627][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  140.527218][   T13] bridge_slave_1: left promiscuous mode
[  140.530042][   T13] bond0 (unregistering): Released all slaves
[  140.537632][   T13] bond1 (unregistering): Released all slaves
[  140.545080][   T13] bond2 (unregistering): Released all slaves
[  140.552903][   T13] bond3 (unregistering): Released all slaves
[  140.562645][   T13] bond4 (unregistering): Released all slaves
[  140.577546][   T13] bond5 (unregistering): (slave veth15): Releasing backup interface
[  140.581318][   T13] bond5 (unregistering): Released all slaves
[  140.591019][   T13] bond6 (unregistering): (slave veth17): Releasing backup interface
[  140.597432][   T13] bond6 (unregistering): Released all slaves
[  140.604712][   T13] bond7 (unregistering): Released all slaves
[  140.613313][   T13] bond8 (unregistering): (slave veth19): Releasing backup interface
[  140.631917][   T13] bond8 (unregistering): Released all slaves
[  140.643601][   T13] bond9 (unregistering): (slave veth21): Releasing backup interface
[  140.650069][   T13] bond9 (unregistering): Released all slaves
[  140.658918][   T13] bond10 (unregistering): (slave veth23): Releasing backup interface
[  140.662480][   T13] bond10 (unregistering): Released all slaves
[  140.730905][   T13] bond11 (unregistering): Released all slaves
[  140.741302][   T13] bond12 (unregistering): (slave veth25): Releasing backup interface
[  140.745126][   T13] bond12 (unregistering): Released all slaves
[  140.753822][   T13] bond13 (unregistering): (slave veth27): Releasing backup interface
[  140.757531][   T13] bond13 (unregistering): Released all slaves
[  140.767160][   T13] bond14 (unregistering): (slave veth29): Releasing backup interface
[  140.771007][   T13] bond14 (unregistering): Released all slaves
[  140.782450][   T13] bond15 (unregistering): (slave veth31): Releasing backup interface
[  140.788340][   T13] bond15 (unregistering): Released all slaves
[  140.798411][   T13] bond16 (unregistering): (slave veth33): Releasing backup interface
[  140.802151][   T13] bond16 (unregistering): Released all slaves
[  140.897975][   T13] : left promiscuous mode
[  140.990623][ T9646] dummy0 speed is unknown, defaulting to 1000
[  141.011635][   T13] : left promiscuous mode
[  141.111569][   T13] tipc: Left network mode
[  141.120272][ T9662] dummy0 speed is unknown, defaulting to 1000
[  141.271200][ T9664] dummy0 speed is unknown, defaulting to 1000
[  141.271372][ T9646] chnl_net:caif_netlink_parms(): no params data found
[  141.390596][   T13] hsr_slave_0: left promiscuous mode
[  141.393297][   T13] hsr_slave_1: left promiscuous mode
[  141.405743][   T13] veth1_macvtap: left promiscuous mode
[  141.408137][   T13] veth0_macvtap: left promiscuous mode
[  142.036022][ T5819] Bluetooth: hci1: command tx timeout
[  142.407424][ T9686] netlink: 'syz.2.1142': attribute type 1 has an invalid length.
[  142.484689][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.486934][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.489159][ T9646] bridge_slave_0: entered allmulticast mode
[  142.491874][ T9646] bridge_slave_0: entered promiscuous mode
[  142.497623][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.499877][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.502254][ T9646] bridge_slave_1: entered allmulticast mode
[  142.504950][ T9646] bridge_slave_1: entered promiscuous mode
[  142.553398][ T9686] veth55: entered promiscuous mode
[  142.558835][ T9686] bond30: (slave veth55): Enslaving as a backup interface with a down link
[  142.564265][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.576589][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.662503][ T9646] team0: Port device team_slave_0 added
[  142.678082][ T9646] team0: Port device team_slave_1 added
[  142.757839][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.760215][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.781207][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.788028][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.790703][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.815868][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.834311][   T13] IPVS: stop unused estimator thread 0...
[  142.880255][ T9646] hsr_slave_0: entered promiscuous mode
[  142.882571][ T9646] hsr_slave_1: entered promiscuous mode
[  142.894983][ T9646] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.897262][ T9646] Cannot create hsr debugfs directory
[  143.548800][ T9646] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  143.577369][ T9646] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  143.597843][ T9646] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  143.602577][ T9646] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  143.750985][ T9742] tipc: Enabled bearer <udp:syz1>, priority 10
[  143.760719][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.764702][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'.
[  143.795522][ T9646] 8021q: adding VLAN 0 to HW filter on device team0
[  143.806663][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.809491][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.833111][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.835941][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.060345][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.077229][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'.
[  144.080923][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1161'.
[  144.090643][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'.
[  144.097719][ T9646] veth0_vlan: entered promiscuous mode
[  144.102544][ T9646] veth1_vlan: entered promiscuous mode
[  144.114719][ T5819] Bluetooth: hci1: command tx timeout
[  144.122718][ T9646] veth0_macvtap: entered promiscuous mode
[  144.134557][ T9646] veth1_macvtap: entered promiscuous mode
[  144.157416][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.178467][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.189715][ T9646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.192928][ T9646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.196956][ T9646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.200332][ T9646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.228804][ T9760] netlink: 'syz.1.1163': attribute type 3 has an invalid length.
[  144.271636][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.274008][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.307550][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.312945][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.353985][ T9767] xfrm1: entered promiscuous mode
[  144.356685][ T9767] xfrm1: entered allmulticast mode
[  144.366861][ T9770] xt_hashlimit: size too large, truncated to 1048576
[  144.377793][ T9770] syz.1.1165: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  144.383379][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.1.1165 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  144.383392][ T9770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.383398][ T9770] Call Trace:
[  144.383402][ T9770]  <TASK>
[  144.383407][ T9770]  dump_stack_lvl+0x189/0x250
[  144.383437][ T9770]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.383449][ T9770]  ? __pfx__printk+0x10/0x10
[  144.383458][ T9770]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.383467][ T9770]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.383476][ T9770]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  144.383485][ T9770]  warn_alloc+0x214/0x310
[  144.383498][ T9770]  ? __pfx_warn_alloc+0x10/0x10
[  144.383510][ T9770]  ? __get_vm_area_node+0x28f/0x300
[  144.383518][ T9770]  ? htable_create+0xfc/0x7a0
[  144.383548][ T9770]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  144.383569][ T9770]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  144.383580][ T9770]  ? rcu_is_watching+0x15/0xb0
[  144.383593][ T9770]  ? htable_create+0xfc/0x7a0
[  144.383602][ T9770]  ? htable_create+0xfc/0x7a0
[  144.383610][ T9770]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  144.383619][ T9770]  ? htable_create+0xfc/0x7a0
[  144.383627][ T9770]  ? hashlimit_pernet+0x23/0x240
[  144.383640][ T9770]  htable_create+0xfc/0x7a0
[  144.383652][ T9770]  hashlimit_mt_check_common+0x719/0xa10
[  144.383667][ T9770]  hashlimit_mt_check_v1+0x221/0x360
[  144.383678][ T9770]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  144.383690][ T9770]  ? xt_find_match+0x1f7/0x250
[  144.383703][ T9770]  xt_check_match+0x3d1/0xab0
[  144.383712][ T9770]  ? __pfx___mutex_lock+0x10/0x10
[  144.383725][ T9770]  ? __pfx_xt_check_match+0x10/0x10
[  144.383736][ T9770]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  144.383748][ T9770]  ? xt_find_match+0x1f7/0x250
[  144.383760][ T9770]  translate_table+0x1553/0x2040
[  144.383780][ T9770]  ? __pfx_translate_table+0x10/0x10
[  144.383790][ T9770]  ? __might_fault+0xb0/0x130
[  144.383806][ T9770]  ? _copy_from_user+0x94/0xb0
[  144.383816][ T9770]  do_ip6t_set_ctl+0x970/0xce0
[  144.383828][ T9770]  ? rcu_is_watching+0x15/0xb0
[  144.383839][ T9770]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  144.383856][ T9770]  ? __pfx___mutex_lock+0x10/0x10
[  144.383867][ T9770]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  144.383881][ T9770]  ? __pfx_futex_wait+0x10/0x10
[  144.383898][ T9770]  nf_setsockopt+0x26f/0x290
[  144.383916][ T9770]  rawv6_setsockopt+0x23b/0x5b0
[  144.383931][ T9770]  ? __lock_acquire+0xab9/0xd20
[  144.383949][ T9770]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  144.383989][ T9770]  ? aa_sock_opt_perm+0x74/0x110
[  144.384004][ T9770]  ? sock_common_setsockopt+0x36/0xc0
[  144.384015][ T9770]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  144.384034][ T9770]  do_sock_setsockopt+0x25a/0x3e0
[  144.384050][ T9770]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  144.384067][ T9770]  ? __fget_files+0x2a/0x420
[  144.384082][ T9770]  __x64_sys_setsockopt+0x18b/0x220
[  144.384094][ T9770]  do_syscall_64+0xfa/0x3b0
[  144.384101][ T9770]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.384112][ T9770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.384120][ T9770]  ? exc_page_fault+0x9f/0xf0
[  144.384140][ T9770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.384148][ T9770] RIP: 0033:0x7f1c2b78e929
[  144.384156][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.384163][ T9770] RSP: 002b:00007f1c2c619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  144.384171][ T9770] RAX: ffffffffffffffda RBX: 00007f1c2b9b6080 RCX: 00007f1c2b78e929
[  144.384177][ T9770] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009
[  144.384181][ T9770] RBP: 00007f1c2b810b39 R08: 00000000000004c0 R09: 0000000000000000
[  144.384186][ T9770] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  144.384190][ T9770] R13: 0000000000000000 R14: 00007f1c2b9b6080 R15: 00007fff9c386198
[  144.384203][ T9770]  </TASK>
[  144.389425][ T9770] Mem-Info:
[  144.506364][ T9770] active_anon:11479 inactive_anon:0 isolated_anon:0
[  144.506364][ T9770]  active_file:1083 inactive_file:38238 isolated_file:0
[  144.506364][ T9770]  unevictable:1768 dirty:126 writeback:0
[  144.506364][ T9770]  slab_reclaimable:9661 slab_unreclaimable:60625
[  144.506364][ T9770]  mapped:18057 shmem:2475 pagetables:888
[  144.506364][ T9770]  sec_pagetables:0 bounce:0
[  144.506364][ T9770]  kernel_misc_reclaimable:0
[  144.506364][ T9770]  free:276257 free_pcp:25729 free_cma:0
[  144.519393][ T9770] Node 0 active_anon:11772kB inactive_anon:0kB active_file:3292kB inactive_file:137512kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48252kB dirty:172kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7920kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  144.529987][ T9770] Node 1 active_anon:34120kB inactive_anon:0kB active_file:1040kB inactive_file:15448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23964kB dirty:352kB writeback:0kB shmem:4972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5328kB pagetables:1244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  144.540275][ T9770] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  144.548667][ T9770] lowmem_reserve[]: 0 815 815 815 815
[  144.550368][ T9770] Node 0 DMA32 free:221176kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11772kB inactive_anon:0kB active_file:3292kB inactive_file:137512kB unevictable:3536kB writepending:172kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:53056kB local_pcp:14208kB free_cma:0kB
[  144.559487][ T9770] lowmem_reserve[]: 0 0 0 0 0
[  144.560909][ T9770] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  144.570044][ T9770] lowmem_reserve[]: 0 0 854 854 854
[  144.571591][ T9770] Node 1 Normal free:412316kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34120kB inactive_anon:0kB active_file:1040kB inactive_file:15448kB unevictable:3536kB writepending:352kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:47412kB local_pcp:26740kB free_cma:0kB
[  144.581628][ T9770] lowmem_reserve[]: 0 0 0 0 0
[  144.583090][ T9770] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  144.586973][ T9770] Node 0 DMA32: 656*4kB (UM) 700*8kB (UME) 221*16kB (UM) 49*32kB (UME) 42*64kB (UME) 27*128kB (UME) 18*256kB (UM) 9*512kB (UM) 6*1024kB (UME) 5*2048kB (UM) 43*4096kB (UM) = 221200kB
[  144.593001][ T9770] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  144.600517][ T9770] Node 1 Normal: 330*4kB (UME) 215*8kB (UE) 555*16kB (UM) 774*32kB (UM) 136*64kB (UM) 13*128kB (UME) 17*256kB (U) 17*512kB (UME) 22*1024kB (UME) 9*2048kB (UME) 76*4096kB (UM) = 412368kB
[  144.606399][ T9770] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.609291][ T9770] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  144.612055][ T9770] 41784 total pagecache pages
[  144.613540][ T9770] 0 pages in swap cache
[  144.615337][ T9770] Free swap  = 124996kB
[  144.616706][ T9770] Total swap = 124996kB
[  144.618043][ T9770] 786301 pages RAM
[  144.619287][ T9770] 0 pages HighMem/MovableOnly
[  144.620765][ T9770] 240368 pages reserved
[  144.622182][ T9770] 0 pages cma reserved
[  144.829536][ T9787] netlink: 'syz.1.1171': attribute type 1 has an invalid length.
[  144.993173][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'.
[  145.210196][ T9801] netlink: 'syz.1.1176': attribute type 3 has an invalid length.
[  145.213321][ T9801] netlink: 'syz.1.1176': attribute type 3 has an invalid length.
[  145.319488][ T9805] netlink: 'syz.2.1178': attribute type 1 has an invalid length.
[  145.332577][ T9805] netlink: 'syz.2.1178': attribute type 1 has an invalid length.
[  145.459215][ T9816] netlink: 'syz.1.1180': attribute type 13 has an invalid length.
[  145.462583][ T9816] netlink: 'syz.1.1180': attribute type 17 has an invalid length.
[  145.515623][ T9816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.558627][ T9816] dummy0 speed is unknown, defaulting to 1000
[  145.580251][ T9819] netlink: 'syz.2.1181': attribute type 1 has an invalid length.
[  145.580256][ T9818] netlink: 'syz.2.1181': attribute type 1 has an invalid length.
[  145.601338][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1180'.
[  145.615630][ T9818] 8021q: adding VLAN 0 to HW filter on device bond31
[  145.657743][ T9818] 8021q: adding VLAN 0 to HW filter on device bond31
[  145.660584][ T9818] bond31: (slave vxcan1): The slave device specified does not support setting the MAC address
[  145.666587][ T9818] bond31: (slave vxcan1): Error -95 calling set_mac_address
[  145.680716][ T9816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.690069][ T9819] bond31: (slave bridge2): Enslaving as an active interface with a down link
[  145.702665][ T9821] bond31: (slave bridge3): Enslaving as an active interface with a down link
[  145.752160][ T9820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.813361][ T9816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.132328][ T5679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.395300][ T9831] veth57: entered promiscuous mode
[  146.402496][ T9831] bond32: (slave veth57): Enslaving as a backup interface with a down link
[  146.418033][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.422674][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.430341][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.435936][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.446107][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.500533][ T9835] dummy0 speed is unknown, defaulting to 1000
[  146.633463][ T9846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1189'.
[  146.653554][ T9835] chnl_net:caif_netlink_parms(): no params data found
[  146.787442][ T9835] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.791738][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.794006][ T9835] bridge_slave_0: entered allmulticast mode
[  146.804117][ T9835] bridge_slave_0: entered promiscuous mode
[  146.808335][ T9835] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.810494][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.812642][ T9835] bridge_slave_1: entered allmulticast mode
[  146.817008][ T9835] bridge_slave_1: entered promiscuous mode
[  146.856895][ T9835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.865863][ T9835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.896687][ T9835] team0: Port device team_slave_0 added
[  146.904084][ T9835] team0: Port device team_slave_1 added
[  146.929696][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.931823][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.940180][ T9835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.945149][ T9835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.948453][ T9835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.958495][ T9835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.967117][ T9871] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  146.995804][ T9835] hsr_slave_0: entered promiscuous mode
[  146.998699][ T9835] hsr_slave_1: entered promiscuous mode
[  147.001058][ T9835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.003372][ T9835] Cannot create hsr debugfs directory
[  147.018334][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'.
[  147.022050][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'.
[  147.469640][ T5679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.520451][ T5679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.577077][ T5679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.671539][ T5679] bridge_slave_1: left allmulticast mode
[  147.673718][ T5679] bridge_slave_1: left promiscuous mode
[  147.677517][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.685854][ T5679] bridge_slave_0: left allmulticast mode
[  147.688247][ T5679] bridge_slave_0: left promiscuous mode
[  147.690623][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.809328][ T9891] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1201'.
[  148.076108][ T5679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.082734][ T5679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.088103][ T5679] bond0 (unregistering): Released all slaves
[  148.366681][ T9920] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  148.434862][ T5679] hsr_slave_0: left promiscuous mode
[  148.437426][ T5679] hsr_slave_1: left promiscuous mode
[  148.439737][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.442431][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.450715][ T5679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.453096][ T5679] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.478338][ T5679] veth1_macvtap: left promiscuous mode
[  148.480259][ T5679] veth0_macvtap: left promiscuous mode
[  148.482214][ T5679] veth1_vlan: left promiscuous mode
[  148.483974][ T5679] veth0_vlan: left promiscuous mode
[  148.515037][ T5814] Bluetooth: hci1: command tx timeout
[  148.918107][ T5679] team0 (unregistering): Port device team_slave_1 removed
[  148.946315][ T5679] team0 (unregistering): Port device team_slave_0 removed
[  149.451122][ T9835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  149.453992][ T9946] validate_nla: 6 callbacks suppressed
[  149.454001][ T9946] netlink: 'syz.2.1215': attribute type 2 has an invalid length.
[  149.463634][ T9835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  149.480401][ T9835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.498494][ T9835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.619644][ T9835] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.649394][ T9835] 8021q: adding VLAN 0 to HW filter on device team0
[  149.665238][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.667483][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.681988][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.684656][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.974194][ T9835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.011260][ T9835] veth0_vlan: entered promiscuous mode
[  150.026041][ T9835] veth1_vlan: entered promiscuous mode
[  150.027215][ T9971] __nla_validate_parse: 7 callbacks suppressed
[  150.027226][ T9971] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1219'.
[  150.049266][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1219'.
[  150.087751][ T9835] veth0_macvtap: entered promiscuous mode
[  150.093197][ T9835] veth1_macvtap: entered promiscuous mode
[  150.106423][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.116665][ T9835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.129252][ T9835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.132750][ T9835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.136870][ T9835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.140156][ T9835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.245115][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.247677][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.286942][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.290233][ T9977] netlink: 'syz.2.1221': attribute type 1 has an invalid length.
[  150.290378][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.258154][T10000] macsec1: entered promiscuous mode
[  151.260122][T10000] macsec1: entered allmulticast mode
[  151.303622][T10002] IPv6: sit2: Disabled Multicast RS
[  151.306432][T10002] sit2: entered allmulticast mode
[  151.358999][T10002] netlink: 'syz.2.1228': attribute type 5 has an invalid length.
[  151.494991][T10007] netlink: 'syz.1.1230': attribute type 15 has an invalid length.
[  151.538466][T10014] netlink: 'syz.2.1232': attribute type 1 has an invalid length.
[  151.590939][T10014] veth59: entered promiscuous mode
[  151.596647][T10014] bond35: (slave veth59): Enslaving as a backup interface with a down link
[  151.725241][T10037] netlink: 'syz.2.1239': attribute type 30 has an invalid length.
[  151.751256][T10037] netlink: 'syz.2.1239': attribute type 30 has an invalid length.
[  151.786181][ T7369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.935660][T10047] netlink: 'syz.2.1242': attribute type 1 has an invalid length.
[  152.035834][T10047] veth61: entered promiscuous mode
[  152.048119][T10047] bond38: (slave veth61): Enslaving as a backup interface with a down link
[  152.052216][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.057969][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.061717][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.067309][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.070227][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.093435][T10053] dummy0 speed is unknown, defaulting to 1000
[  152.171821][T10059] ip6tnl1: entered promiscuous mode
[  152.184820][T10059] ip6tnl1: entered allmulticast mode
[  152.230694][T10053] chnl_net:caif_netlink_parms(): no params data found
[  152.298284][T10065] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1246'.
[  152.301068][T10065] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1246'.
[  152.314549][T10053] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.316845][T10053] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.319098][T10053] bridge_slave_0: entered allmulticast mode
[  152.321885][T10053] bridge_slave_0: entered promiscuous mode
[  152.327479][T10053] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.334590][T10053] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.337382][T10053] bridge_slave_1: entered allmulticast mode
[  152.341649][T10053] bridge_slave_1: entered promiscuous mode
[  152.370964][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.391081][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.466875][T10053] team0: Port device team_slave_0 added
[  152.470660][T10053] team0: Port device team_slave_1 added
[  152.497273][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.499822][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.509218][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.513674][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.515942][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.523738][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.562071][T10081] netlink: 'syz.2.1250': attribute type 10 has an invalid length.
[  152.579618][T10053] hsr_slave_0: entered promiscuous mode
[  152.582085][T10053] hsr_slave_1: entered promiscuous mode
[  152.584110][T10053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.586752][T10053] Cannot create hsr debugfs directory
[  152.589410][T10081] veth0_vlan: left promiscuous mode
[  152.594123][T10081] veth0_vlan: entered promiscuous mode
[  152.606236][T10081] team0: Device veth0_vlan failed to register rx_handler
[  152.652753][T10085] netlink: 'syz.2.1251': attribute type 1 has an invalid length.
[  152.712141][T10085] veth63: entered promiscuous mode
[  152.717793][T10085] bond39: (slave veth63): Enslaving as a backup interface with a down link
[  152.793486][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'.
[  153.121177][T10103] "syz.2.1255" (10103) uses obsolete ecb(arc4) skcipher
[  153.160551][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'.
[  153.212442][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'.
[  153.246111][T10112] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1257'.
[  153.263310][T10114] veth65: entered promiscuous mode
[  153.269116][T10114] bond40: (slave veth65): Enslaving as a backup interface with a down link
[  153.318387][T10112] syzkaller0: entered promiscuous mode
[  153.320574][T10112] syzkaller0: entered allmulticast mode
[  153.515978][T10121] nbd: socks must be embedded in a SOCK_ITEM attr
[  153.518594][T10121] block nbd0: shutting down sockets
[  154.114963][ T5814] Bluetooth: hci1: command tx timeout
[  154.648752][ T7369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.656741][T10120] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  154.661673][T10120] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  154.667119][T10120] workqueue: Failed to create a rescuer kthread for wq "bond41": -EINTR
[  154.707095][T10125] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  154.714359][T10125] team0: Device ipvlan2 is already an upper device of the team interface
[  154.763602][ T7369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.829100][ T7369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.856096][T10128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1262'.
[  154.862633][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  154.947814][ T7369] bridge_slave_1: left allmulticast mode
[  154.949707][ T7369] bridge_slave_1: left promiscuous mode
[  154.952368][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.958808][ T7369] bridge_slave_0: left allmulticast mode
[  154.960769][ T7369] bridge_slave_0: left promiscuous mode
[  154.963180][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.001934][T10135] validate_nla: 1 callbacks suppressed
[  155.001955][T10135] netlink: 'syz.1.1265': attribute type 1 has an invalid length.
[  155.281109][ T7369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.287685][ T7369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.291335][ T7369] bond0 (unregistering): Released all slaves
[  155.370279][T10137] veth57: entered promiscuous mode
[  155.391369][T10137] bond28: (slave veth57): Enslaving as a backup interface with a down link
[  155.500288][T10143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'.
[  155.526706][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'.
[  155.549948][T10140] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1266'.
[  155.567095][ T7369] hsr_slave_0: left promiscuous mode
[  155.569348][ T7369] hsr_slave_1: left promiscuous mode
[  155.572200][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.575751][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.579556][ T7369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.581950][ T7369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.602285][ T7369] veth1_macvtap: left promiscuous mode
[  155.603981][ T7369] veth0_macvtap: left promiscuous mode
[  155.605910][ T7369] veth1_vlan: left promiscuous mode
[  155.607616][ T7369] veth0_vlan: left promiscuous mode
[  155.995901][ T7369] team0 (unregistering): Port device team_slave_1 removed
[  156.034739][ T7369] team0 (unregistering): Port device team_slave_0 removed
[  156.195138][ T5814] Bluetooth: hci1: command tx timeout
[  156.418537][T10146] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  156.479896][T10150] netlink: 'syz.2.1269': attribute type 1 has an invalid length.
[  156.511260][T10150] 8021q: adding VLAN 0 to HW filter on device bond41
[  156.549104][T10150] 8021q: adding VLAN 0 to HW filter on device bond41
[  156.551717][T10150] bond41: (slave vxcan1): The slave device specified does not support setting the MAC address
[  156.556218][T10150] bond41: (slave vxcan1): Error -95 calling set_mac_address
[  156.641787][T10154] bond41: (slave bridge4): Enslaving as an active interface with a down link
[  156.708591][T10053] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  156.725879][T10053] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  156.734339][T10053] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  156.747947][T10053] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  156.761104][T10168] netlink: 'syz.1.1273': attribute type 1 has an invalid length.
[  156.804788][T10167] x_tables: duplicate underflow at hook 3
[  156.808410][T10168] veth59: entered promiscuous mode
[  156.812658][T10168] bond29: (slave veth59): Enslaving as a backup interface with a down link
[  156.871997][T10053] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.888333][T10053] 8021q: adding VLAN 0 to HW filter on device team0
[  156.900190][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.902391][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.910539][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.912790][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.950152][T10053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  157.048324][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.082683][T10053] veth0_vlan: entered promiscuous mode
[  157.092980][T10053] veth1_vlan: entered promiscuous mode
[  157.112496][T10053] veth0_macvtap: entered promiscuous mode
[  157.119770][T10053] veth1_macvtap: entered promiscuous mode
[  157.135336][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.142978][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.150405][T10053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.153225][T10053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.157413][T10053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.160117][T10053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.230048][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.232536][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.257889][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.260728][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.371551][T10197] netlink: 'syz.2.1281': attribute type 1 has an invalid length.
[  157.407016][T10197] veth69: entered promiscuous mode
[  157.411218][T10197] bond42: (slave veth69): Enslaving as a backup interface with a down link
[  157.796233][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'.
[  157.862071][   T55] block nbd0: Receive control failed (result -104)
[  157.915097][T10222] netlink: 'syz.2.1288': attribute type 1 has an invalid length.
[  157.958527][T10222] veth71: entered promiscuous mode
[  157.963000][T10222] bond43: (slave veth71): Enslaving as a backup interface with a down link
[  158.163408][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1293'.
[  158.169966][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'.
[  158.187121][T10237] netlink: 'syz.2.1293': attribute type 10 has an invalid length.
[  158.191118][T10237] bridge5: port 1(team0) entered blocking state
[  158.193835][T10237] bridge5: port 1(team0) entered disabled state
[  158.198664][T10237] team0: entered allmulticast mode
[  158.201052][T10237] team_slave_0: entered allmulticast mode
[  158.203575][T10237] team_slave_1: entered allmulticast mode
[  158.276868][ T5819] Bluetooth: hci1: command tx timeout
[  158.406261][T10249] netlink: 'syz.2.1296': attribute type 1 has an invalid length.
[  158.464975][T10249] veth73: entered promiscuous mode
[  158.471395][T10249] bond44: (slave veth73): Enslaving as a backup interface with a down link
[  158.707535][T10259] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1300'.
[  158.948759][T10269] netlink: 'syz.1.1303': attribute type 1 has an invalid length.
[  158.980060][T10269] veth61: entered promiscuous mode
[  158.986218][T10269] bond30: (slave veth61): Enslaving as a backup interface with a down link
[  159.307267][T10279] netlink: 'syz.1.1306': attribute type 10 has an invalid length.
[  159.462726][T10288] dummy0 speed is unknown, defaulting to 1000
[  159.794844][T10302] dummy0 speed is unknown, defaulting to 1000
[  159.824906][T10305] bridge: RTM_NEWNEIGH with invalid ether address
[  160.043647][T10320] bridge3: entered allmulticast mode
[  160.205259][T10325] syzkaller0: entered promiscuous mode
[  160.207761][T10325] syzkaller0: entered allmulticast mode
[  161.693840][T10337] netlink: 'syz.2.1320': attribute type 10 has an invalid length.
[  161.742437][T10339] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1321'.
[  161.792646][T10341] netlink: 'syz.2.1322': attribute type 1 has an invalid length.
[  161.838085][T10341] veth75: entered promiscuous mode
[  161.842427][T10341] bond45: (slave veth75): Enslaving as a backup interface with a down link
[  162.031044][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'.
[  162.056565][T10357] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1326'.
[  162.060075][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1326'.
[  162.072425][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'.
[  162.269115][ T5811] syz_tun (unregistering): left promiscuous mode
[  162.937871][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.941964][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.947177][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.951224][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.953954][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.986205][T10368] dummy0 speed is unknown, defaulting to 1000
[  163.056867][T10371] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  163.060327][T10371] bond0: option all_slaves_active: invalid value (7)
[  163.183976][T10368] chnl_net:caif_netlink_parms(): no params data found
[  163.289746][T10368] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.292611][T10368] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.299370][T10368] bridge_slave_0: entered allmulticast mode
[  163.303333][T10368] bridge_slave_0: entered promiscuous mode
[  163.308823][T10368] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.311844][T10368] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.324965][T10368] bridge_slave_1: entered allmulticast mode
[  163.330930][T10368] bridge_slave_1: entered promiscuous mode
[  163.368922][T10368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.375876][T10368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.409046][T10368] team0: Port device team_slave_0 added
[  163.413656][T10368] team0: Port device team_slave_1 added
[  163.443737][T10368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.446605][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.456821][T10368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.462580][T10368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.465448][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.479193][T10368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.522351][T10368] hsr_slave_0: entered promiscuous mode
[  163.524948][T10368] hsr_slave_1: entered promiscuous mode
[  163.527582][T10368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.530531][T10368] Cannot create hsr debugfs directory
[  163.668609][T10368] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.748104][T10368] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.808798][T10368] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.855104][T10368] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.956113][T10368] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  163.961907][T10368] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  163.966629][T10368] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  163.970947][T10368] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  164.028503][T10368] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.041672][T10368] 8021q: adding VLAN 0 to HW filter on device team0
[  164.048626][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.051060][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.066154][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.068681][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.196632][T10368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.230212][T10368] veth0_vlan: entered promiscuous mode
[  164.238891][T10368] veth1_vlan: entered promiscuous mode
[  164.243522][T10398] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1337'.
[  164.259802][T10368] veth0_macvtap: entered promiscuous mode
[  164.268864][T10368] veth1_macvtap: entered promiscuous mode
[  164.279934][T10368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.286690][T10368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.291851][T10368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.295800][T10368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.298620][T10368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.302105][T10368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.361974][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.367928][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.392323][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.396376][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.509480][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'.
[  164.512274][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'.
[  164.546451][T10411] veth1_to_bond: entered allmulticast mode
[  164.603165][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'.
[  164.676250][T10412] veth1_to_bond (unregistering): left allmulticast mode
[  164.994830][ T5819] Bluetooth: hci0: command tx timeout
[  165.686420][T10429] sctp: [Deprecated]: syz.2.1347 (pid 10429) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.686420][T10429] Use struct sctp_sack_info instead
[  165.774667][T10435] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20003
[  165.808476][T10438] netlink: 'syz.2.1350': attribute type 2 has an invalid length.
[  165.813875][T10438] wg1 speed is unknown, defaulting to 1000
[  165.818689][T10438] wg1 speed is unknown, defaulting to 1000
[  165.821619][T10438] wg1 speed is unknown, defaulting to 1000
[  165.830259][T10438] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  165.845732][T10438] wg1 speed is unknown, defaulting to 1000
[  165.848747][T10438] wg1 speed is unknown, defaulting to 1000
[  165.851506][T10438] wg1 speed is unknown, defaulting to 1000
[  165.855486][T10438] wg1 speed is unknown, defaulting to 1000
[  165.858706][T10439] netlink: 'syz.2.1350': attribute type 2 has an invalid length.
[  165.882574][T10443] ip6tnl0: Caught tx_queue_len zero misconfig
[  165.892704][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  165.946615][T10448] ipvlan2: entered promiscuous mode
[  165.948531][T10448] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  165.951182][T10448] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  168.363827][T10477] dummy0 speed is unknown, defaulting to 1000
[  168.370207][T10477] wg1 speed is unknown, defaulting to 1000
[  169.409552][T10523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.411890][T10523] IPv6: NLM_F_CREATE should be set when creating new route
[  169.418988][T10523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1374'.
[  169.453531][T10525] netlink: 'syz.2.1375': attribute type 1 has an invalid length.
[  169.494220][T10525] veth77: entered promiscuous mode
[  169.503454][T10525] bond47: (slave veth77): Enslaving as a backup interface with a down link
[  169.611718][T10528] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  169.611950][   T95] IPVS: starting estimator thread 0...
[  169.715260][T10530] IPVS: using max 41 ests per chain, 98400 per kthread
[  169.906872][T10548] netlink: 'syz.2.1382': attribute type 1 has an invalid length.
[  169.953639][T10548] veth79: entered promiscuous mode
[  169.959373][T10548] bond48: (slave veth79): Enslaving as a backup interface with a down link
[  170.007650][T10551] netlink: 'syz.2.1383': attribute type 1 has an invalid length.
[  170.119196][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'.
[  170.301621][T10562] dummy0 speed is unknown, defaulting to 1000
[  170.306289][T10562] wg1 speed is unknown, defaulting to 1000
[  170.671464][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'.
[  170.722645][T10572] netlink: 'syz.2.1389': attribute type 1 has an invalid length.
[  170.759881][T10572] veth81: entered promiscuous mode
[  170.763698][T10572] bond50: (slave veth81): Enslaving as a backup interface with a down link
[  170.796471][T10575] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1390'.
[  170.802272][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'.
[  170.855242][T10579] xt_CT: No such helper "snmp"
[  174.056289][T10591] bridge6: the hash_elasticity option has been deprecated and is always 16
[  174.059833][T10591] bridge6: entered allmulticast mode
[  174.095655][T10593] netlink: 'syz.2.1396': attribute type 1 has an invalid length.
[  174.126245][T10593] veth83: entered promiscuous mode
[  174.131304][T10593] bond51: (slave veth83): Enslaving as a backup interface with a down link
[  175.252945][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'.
[  175.257338][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'.
[  175.336864][T10616] netlink: 'syz.2.1402': attribute type 1 has an invalid length.
[  175.558053][T10623] sctp: [Deprecated]: syz.2.1405 (pid 10623) Use of int in maxseg socket option.
[  175.558053][T10623] Use struct sctp_assoc_value instead
[  175.567224][T10623] x_tables: duplicate underflow at hook 2
[  176.519138][T10631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1407'.
[  176.533313][ T7369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.546066][ T7369] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.555292][ T5862] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.590252][T10633] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  176.593411][T10633] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1408'.
[  176.649008][T10635] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1409'.
[  176.652135][T10635] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  176.655544][T10635] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  176.845382][ T5862] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.893601][T10645] dummy0 speed is unknown, defaulting to 1000
[  176.898537][T10645] wg1 speed is unknown, defaulting to 1000
[  177.566236][   T95] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  177.785779][T10650] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1412'.
[  177.916382][T10656] bridge_slave_0: entered promiscuous mode
[  177.940771][ T5864] hid-generic 0005:0B57:00AA.0001: collection stack underflow
[  177.943919][ T5864] hid-generic 0005:0B57:00AA.0001: item 0 0 0 12 parsing failed
[  177.950735][ T5864] hid-generic 0005:0B57:00AA.0001: probe with driver hid-generic failed with error -22
[  179.182180][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1422'.
[  179.318860][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1425'.
[  179.322269][T10694] netlink: 'syz.2.1425': attribute type 11 has an invalid length.
[  179.325713][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1425'.
[  179.390729][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1427'.
[  180.473561][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'.
[  180.477469][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'.
[  180.486938][T10711] : entered promiscuous mode
[  180.489375][T10711] netlink: 'syz.2.1431': attribute type 4 has an invalid length.
[  180.496500][T10711] netlink: 'syz.2.1431': attribute type 4 has an invalid length.
[  180.604678][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  181.373398][T10718] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1433'.
[  182.393078][T10732] netlink: 'syz.2.1437': attribute type 11 has an invalid length.
[  182.396308][T10732] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1437'.
[  182.588064][T10737] netlink: 'syz.2.1438': attribute type 1 has an invalid length.
[  182.624319][T10737] veth85: entered promiscuous mode
[  182.630514][T10737] bond53: (slave veth85): Enslaving as a backup interface with a down link
[  182.848220][T10751] pim6reg: entered allmulticast mode
[  182.851274][T10752] pim6reg: left allmulticast mode
[  182.851734][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.858018][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.862059][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.867220][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.870539][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.874069][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.879258][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.882980][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.890011][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  182.893501][T10751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  183.068579][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'.
[  183.329045][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'.
[  183.385719][T10780] netlink: 'syz.2.1454': attribute type 21 has an invalid length.
[  183.388872][T10780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1454'.
[  184.987990][T10831] netlink: 14528 bytes leftover after parsing attributes in process `syz.2.1472'.
[  185.000425][T10831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1472'.
[  185.269504][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'.
[  185.485501][T10856] __nla_validate_parse: 2 callbacks suppressed
[  185.485523][T10856] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1480'.
[  186.302893][T10858] bond54: entered promiscuous mode
[  186.308099][T10858] 8021q: adding VLAN 0 to HW filter on device bond54
[  186.346823][T10861] netlink: 'syz.2.1482': attribute type 13 has an invalid length.
[  186.652535][T10868] netlink: 'syz.2.1484': attribute type 3 has an invalid length.
[  186.655149][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'.
[  188.679100][T10886] netlink: 'syz.2.1490': attribute type 1 has an invalid length.
[  188.701011][T10886] bond55: (slave bridge7): making interface the new active one
[  188.704045][T10886] bond55: (slave bridge7): Enslaving as an active interface with an up link
[  189.014336][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'.
[  189.060675][T10905] netlink: 'syz.2.1495': attribute type 1 has an invalid length.
[  189.103808][T10905] veth87: entered promiscuous mode
[  189.112019][T10905] bond56: (slave veth87): Enslaving as a backup interface with a down link
[  189.174203][T10910] netlink: 'syz.2.1497': attribute type 1 has an invalid length.
[  189.178627][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'.
[  189.181969][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'.
[  189.288939][T10914] bridge_slave_0: left promiscuous mode
[  189.293303][T10914] veth37: left promiscuous mode
[  189.295895][T10914] veth39: left promiscuous mode
[  189.298761][T10914] veth41: left promiscuous mode
[  189.300998][T10914] veth43: left promiscuous mode
[  189.303213][T10914] veth45: left promiscuous mode
[  189.305552][T10914] veth47: left promiscuous mode
[  189.307929][T10914] veth49: left promiscuous mode
[  189.310881][T10914] veth53: left promiscuous mode
[  189.312859][T10914] sit1: left promiscuous mode
[  189.315322][T10914] veth55: left promiscuous mode
[  189.318013][T10914] veth57: left promiscuous mode
[  189.320459][T10914] macsec1: left promiscuous mode
[  189.322374][T10914] macsec1: left allmulticast mode
[  189.325941][T10914] veth59: left promiscuous mode
[  189.328359][T10914] veth61: left promiscuous mode
[  189.330523][T10914] ip6tnl1: left promiscuous mode
[  189.332437][T10914] ip6tnl1: left allmulticast mode
[  189.334942][T10914] veth63: left promiscuous mode
[  189.337166][T10914] veth65: left promiscuous mode
[  189.341186][T10914] veth69: left promiscuous mode
[  189.342941][T10914] veth71: left promiscuous mode
[  189.345428][T10914] veth73: left promiscuous mode
[  189.347357][T10914] veth75: left promiscuous mode
[  189.349450][T10914] veth77: left promiscuous mode
[  189.351661][T10914] veth79: left promiscuous mode
[  189.353612][T10914] veth81: left promiscuous mode
[  189.356042][T10914] bridge6: left allmulticast mode
[  189.357763][T10914] veth83: left promiscuous mode
[  189.359871][T10914] veth85: left promiscuous mode
[  189.361774][T10914] bond54: left promiscuous mode
[  189.375111][T10914] veth87: left promiscuous mode
[  189.593182][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  189.649277][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1502'.
[  189.720349][T10930] netlink: 'syz.2.1504': attribute type 1 has an invalid length.
[  189.767594][T10930] veth89: entered promiscuous mode
[  189.772888][T10930] bond57: (slave veth89): Enslaving as a backup interface with a down link
[  189.898605][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[  189.940043][T10939] netlink: 'syz.2.1506': attribute type 7 has an invalid length.
[  189.988814][T10941] netlink: 'syz.2.1507': attribute type 3 has an invalid length.
[  189.991825][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'.
[  190.108361][T10947] IPVS: set_ctl: invalid protocol: 24092 172.20.20.170:20002
[  190.297680][T10953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1511'.
[  191.116525][T10979] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1519'.
[  191.120426][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'.
[  191.297288][T10986] syz.2.1522 (10986) used greatest stack depth: 19080 bytes left
[  192.301704][T11000] netlink: 'syz.2.1527': attribute type 1 has an invalid length.
[  192.304013][T11000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1527'.
[  192.308283][T11000] x_tables: duplicate entry at hook 1
[  192.402732][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'.
[  192.573565][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'.
[  192.827893][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'.
[  192.831718][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'.
[  192.835845][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'.
[  192.839715][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'.
[  192.842534][T11033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'.
[  193.979211][T11049] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  194.960942][T11057] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.963970][T11057] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.966979][T11057] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.969593][T11057] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.763168][T11097] netlink: 'syz.2.1555': attribute type 1 has an invalid length.
[  195.790447][T11097] veth91: entered promiscuous mode
[  195.801689][T11097] bond58: (slave veth91): Enslaving as a backup interface with a down link
[  196.081880][T11118] netlink: 'syz.2.1562': attribute type 1 has an invalid length.
[  196.125383][T11118] veth93: entered promiscuous mode
[  196.132454][T11118] bond59: (slave veth93): Enslaving as a backup interface with a down link
[  196.180392][T11121] __nla_validate_parse: 32 callbacks suppressed
[  196.180411][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'.
[  196.316978][T11124] syzkaller1: entered promiscuous mode
[  196.319100][T11124] syzkaller1: entered allmulticast mode
[  196.601991][T11136] netlink: 'syz.2.1569': attribute type 1 has an invalid length.
[  196.647991][T11136] veth95: entered promiscuous mode
[  196.654116][T11136] bond60: (slave veth95): Enslaving as a backup interface with a down link
[  196.691890][T11140] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1570'.
[  196.778952][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1571'.
[  197.085732][   T24] ------------[ cut here ]------------
[  197.088008][   T24] workqueue: cannot queue hci_conn_timeout on wq hci1
[  197.090041][   T24] WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  197.092608][   T24] Modules linked in:
[  197.094101][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  197.098799][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.101717][   T24] Workqueue: events l2cap_chan_timeout
[  197.103376][   T24] RIP: 0010:__queue_work+0xd62/0xfe0
[  197.104972][   T24] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  197.111068][   T24] RSP: 0018:ffffc900001c77a8 EFLAGS: 00010046
[  197.112922][   T24] RAX: a4067c68ce0ec500 RBX: 0000000000000020 RCX: ffff8881006b0000
[  197.115369][   T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  197.117809][   T24] RBP: 1ffff11007323b38 R08: 0000000000000003 R09: 0000000000000004
[  197.120357][   T24] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  197.122692][   T24] R13: ffff88803b82c960 R14: ffff888100004008 R15: ffff88803991d978
[  197.125131][   T24] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  197.128039][   T24] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.130035][   T24] CR2: 000000110c30e230 CR3: 0000000027790000 CR4: 00000000000006f0
[  197.132476][   T24] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  197.134870][   T24] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  197.137392][   T24] Call Trace:
[  197.138658][   T24]  <TASK>
[  197.139575][   T24]  ? __queue_delayed_work+0xe1/0x2d0
[  197.141218][   T24]  queue_delayed_work_on+0x18b/0x280
[  197.142800][   T24]  ? __pfx___cancel_work+0x10/0x10
[  197.144335][   T24]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  197.146083][   T24]  ? hci_conn_drop+0x14d/0x280
[  197.147616][   T24]  l2cap_chan_del+0x285/0x5e0
[  197.149089][   T24]  l2cap_chan_close+0x597/0x980
[  197.150585][   T24]  ? __pfx_l2cap_chan_close+0x10/0x10
[  197.152182][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  197.153872][   T24]  l2cap_chan_timeout+0x158/0x390
[  197.155410][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  197.157349][   T24]  process_scheduled_works+0xae1/0x17b0
[  197.159405][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.161236][   T24]  worker_thread+0x8a0/0xda0
[  197.162659][   T24]  kthread+0x711/0x8a0
[  197.163946][   T24]  ? __pfx_worker_thread+0x10/0x10
[  197.165502][   T24]  ? __pfx_kthread+0x10/0x10
[  197.167029][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.168713][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.170345][   T24]  ? __pfx_kthread+0x10/0x10
[  197.171744][   T24]  ret_from_fork+0x3fc/0x770
[  197.173137][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  197.174723][   T24]  ? __switch_to_asm+0x39/0x70
[  197.176207][   T24]  ? __switch_to_asm+0x33/0x70
[  197.177871][   T24]  ? __pfx_kthread+0x10/0x10
[  197.179267][   T24]  ret_from_fork_asm+0x1a/0x30
[  197.180741][   T24]  </TASK>
[  197.181685][   T24] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  197.183914][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  197.187878][   T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.190964][   T24] Workqueue: events l2cap_chan_timeout
[  197.192664][   T24] Call Trace:
[  197.193725][   T24]  <TASK>
[  197.194647][   T24]  dump_stack_lvl+0x99/0x250
[  197.196109][   T24]  ? __asan_memcpy+0x40/0x70
[  197.197626][   T24]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.199234][   T24]  ? __pfx__printk+0x10/0x10
[  197.200590][   T24]  panic+0x2db/0x790
[  197.201800][   T24]  ? __pfx_panic+0x10/0x10
[  197.203168][   T24]  ? show_trace_log_lvl+0x4fb/0x550
[  197.204809][   T24]  ? ret_from_fork_asm+0x1a/0x30
[  197.206348][   T24]  __warn+0x31b/0x4b0
[  197.207811][   T24]  ? __queue_work+0xd62/0xfe0
[  197.209544][   T24]  ? __queue_work+0xd62/0xfe0
[  197.210934][   T24]  report_bug+0x2be/0x4f0
[  197.212204][   T24]  ? __queue_work+0xd62/0xfe0
[  197.213592][   T24]  ? __queue_work+0xd62/0xfe0
[  197.215049][   T24]  ? __queue_work+0xd64/0xfe0
[  197.216489][   T24]  handle_bug+0x84/0x160
[  197.217946][   T24]  exc_invalid_op+0x1a/0x50
[  197.219342][   T24]  asm_exc_invalid_op+0x1a/0x20
[  197.220839][   T24] RIP: 0010:__queue_work+0xd62/0xfe0
[  197.222707][   T24] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  197.228511][   T24] RSP: 0018:ffffc900001c77a8 EFLAGS: 00010046
[  197.230418][   T24] RAX: a4067c68ce0ec500 RBX: 0000000000000020 RCX: ffff8881006b0000
[  197.233172][   T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  197.236063][   T24] RBP: 1ffff11007323b38 R08: 0000000000000003 R09: 0000000000000004
[  197.238825][   T24] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  197.241223][   T24] R13: ffff88803b82c960 R14: ffff888100004008 R15: ffff88803991d978
[  197.243623][   T24]  ? __queue_work+0xd61/0xfe0
[  197.245072][   T24]  ? __queue_delayed_work+0xe1/0x2d0
[  197.246732][   T24]  queue_delayed_work_on+0x18b/0x280
[  197.248759][   T24]  ? __pfx___cancel_work+0x10/0x10
[  197.250345][   T24]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  197.252158][   T24]  ? hci_conn_drop+0x14d/0x280
[  197.253629][   T24]  l2cap_chan_del+0x285/0x5e0
[  197.255106][   T24]  l2cap_chan_close+0x597/0x980
[  197.256605][   T24]  ? __pfx_l2cap_chan_close+0x10/0x10
[  197.258504][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  197.260202][   T24]  l2cap_chan_timeout+0x158/0x390
[  197.261676][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  197.263460][   T24]  process_scheduled_works+0xae1/0x17b0
[  197.265160][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.267064][   T24]  worker_thread+0x8a0/0xda0
[  197.268812][   T24]  kthread+0x711/0x8a0
[  197.270053][   T24]  ? __pfx_worker_thread+0x10/0x10
[  197.271617][   T24]  ? __pfx_kthread+0x10/0x10
[  197.273097][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  197.274768][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.276379][   T24]  ? __pfx_kthread+0x10/0x10
[  197.277889][   T24]  ret_from_fork+0x3fc/0x770
[  197.279308][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  197.280901][   T24]  ? __switch_to_asm+0x39/0x70
[  197.282392][   T24]  ? __switch_to_asm+0x33/0x70
[  197.283902][   T24]  ? __pfx_kthread+0x10/0x10
[  197.285338][   T24]  ret_from_fork_asm+0x1a/0x30
[  197.286905][   T24]  </TASK>
[  197.288800][   T24] Kernel Offset: disabled
[  197.290317][   T24] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:57:17  Registers:
info registers vcpu 0

CPU#0
RAX=e6fd943f05e73e00 RBX=ffffffff81974d58 RCX=e6fd943f05e73e00 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe3feb74980 CR3=00000001164c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe3fec11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001c6f50
R8 =ffff8881089f0237 R9 =1ffff1102113e046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4935 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c30e230 CR3=0000000027790000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0006feffffff0009 0008000000000007
XMM02=190008aa1414ac00 1800080000000100 XMM03=0a00080000006400 020006feffffff00
XMM04=00007fe3ff8ed100 00007fe3fed84440 XMM05=00007fe3fed84458 00007fe3fed844a0
XMM06=00007fe3fed84498 00007fe3fed84490 XMM07=00007fe3fed84488 00007fe3fed84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe3fec11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
