last executing test programs:

2.194943747s ago: executing program 1 (id=1445):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x9, 0xd}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x57, 0xb, 0x8, 0x4, 0x1, 0x6, 0xfff, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0x5, 0xe, 0x5]}}, {{0x1c, 0x1, {0x1, 0x1, 0xc, 0x8, 0x1, 0x8001, 0x5, 0x5}}, {0xe, 0x2, [0xfffb, 0x8006, 0xec7, 0x2, 0x9b2b]}}, {{0x1c, 0x1, {0x3, 0x6, 0xfff9, 0x1, 0x2, 0xfff, 0x6, 0x5}}, {0xe, 0x2, [0x5, 0x3, 0x3, 0x9, 0x4]}}]}]}, 0xac}}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, r1, 0x5, 0x0, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1, <r7=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000440)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xaa6}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000180)=""/155, 0x41100, 0x28, '\x00', r4, 0x18, r1, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x10, 0x6, 0x8}, 0x10, 0x22f7, r1, 0x3, &(0x7f00000004c0)=[r1, r1, r6, r1, r1, r7], &(0x7f0000000500)=[{0x5, 0x1, 0xc, 0x1}, {0x3, 0x1, 0x4, 0x9}, {0x4, 0x4, 0x3, 0x8}], 0x10, 0x1}, 0x94)

2.132971043s ago: executing program 1 (id=1448):
r0 = socket$netlink(0x10, 0x3, 0x15)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x33, 0x3, 0x7005132, "8f5151239582"}})

1.693995642s ago: executing program 2 (id=1453):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x8000000, 0x0, 0x2, 0x1, 0x6}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = accept4(r1, &(0x7f00000000c0)=@tipc, &(0x7f0000000040)=0x80, 0x80000)
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x20010, r2, 0x180000000)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x20, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @dev, @remote}, &(0x7f00000001c0)=0xc)
bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, &(0x7f0000000400)}, 0x20)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0xfd, 0x89, 0x0, @rand_addr, @private}}}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_buf(r7, 0x29, 0x15, &(0x7f0000000280)=""/155, &(0x7f0000000340)=0x9b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000d3000010886a49741f0000008510000001000000950000000000001d69108d000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xa}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x8000000, 0x0, 0x2, 0x1, 0x6}, 0x20) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
accept4(r1, &(0x7f00000000c0)=@tipc, &(0x7f0000000040)=0x80, 0x80000) (async)
mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x20010, r2, 0x180000000) (async)
recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x20, 0x0) (async)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @remote}, &(0x7f00000001c0)=0xc) (async)
bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async)
close(r4) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, &(0x7f0000000400)}, 0x20) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0xfd, 0x89, 0x0, @rand_addr, @private}}}}) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
getsockopt$inet6_buf(r7, 0x29, 0x15, &(0x7f0000000280)=""/155, &(0x7f0000000340)=0x9b) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000d3000010886a49741f0000008510000001000000950000000000001d69108d000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xa}, 0x94) (async)

1.575032052s ago: executing program 2 (id=1454):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe000001000000008400120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000845}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x10401, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0xfffffff4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x0)

1.504849671s ago: executing program 2 (id=1455):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) (async)
write$tun(r0, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x67cb}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x38000, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff}) (rerun: 32)
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x301, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x60000800) (rerun: 64)

1.404760018s ago: executing program 2 (id=1456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0xfffffffc, 0x9, 0xff, 0x81, r3, 0x900, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c460992"], 0x48)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050002000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000400440028000d01"], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdc01, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x32a, 0x9, 0x8, 0x3}, 0x4, r8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44891}, 0x2400c800)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r9=>0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_SE_IO(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008090}, 0x0)
pipe(&(0x7f0000000200)={<r11=>0xffffffffffffffff})
read$nci(r11, &(0x7f0000000240)=""/172, 0xac)

1.214038679s ago: executing program 1 (id=1457):
socket$unix(0x1, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func_proto={0x2, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x6}]}, @var={0xfffffffe, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61]}}, 0x0, 0x3f}, 0x28)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x7, 0x0, &(0x7f00000000c0)="cfe3fcd2bdfa09", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="18002e0056020100257a2523cb758cbd70cfce89", @ANYRES32=0x0], 0x18}}, 0x24008040)

1.15481291s ago: executing program 1 (id=1458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r3=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2022)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r10, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x44}}, 0x40048a4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', <r13=>0x0})
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(r14, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="06b500"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r13, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x44, r16, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@void, @val={0xc, 0x99, {0x40, 0x52}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x1, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x5}, {0x5, 0x5}]}]}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, r16, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8a539d035d"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xf, 0x4, "fd46a5c48a05260c75f5be"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3cda2a0c0d"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "5ebef7e2ff"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

504.255248ms ago: executing program 2 (id=1461):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002340)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x814)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0xffffffffffffffc9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd8}}, 0x0)

491.08247ms ago: executing program 2 (id=1463):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)={0x5c, 0xa, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x46, [0x101, 0x200, 0x4, 0x6]}}]}, 0x60)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x256d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x313)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$packet(0x11, 0x2, 0x300)
unshare(0x400)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
read(r4, &(0x7f0000000100)=""/41, 0x29)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000200)=0x5f, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa0fffff000000007010000f8ffffffb702000008000000b7030000000000008500fdffc900000095"], &(0x7f0000000000)='GPL\x00', 0xf}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x1, 0x4004894)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r6, &(0x7f00000000c0), 0x12)
close(r6)
sendmmsg$inet(r3, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x892}], 0x1}}], 0x1, 0x80)

304.813342ms ago: executing program 0 (id=1465):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x5, 0xce)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002740)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000033c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}]}, 0x3c}}, 0x0)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r8, 0x5421, 0x0)
connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x47}, 0xa)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neonbs\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000a00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6000000000183afffe0000ff020000000000000000001000000001880090780000aa0001000000aae47dddbd3a7de012ff8137ee7a5d7c6489b00c6dd27475d6d606f6033b874215ad250c0bbce365bf00d6a7936e54450902"], 0x0)
r9 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r9, 0x5452, &(0x7f00000013c0)=0xc7f)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x20008844)
recvmmsg(r9, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}, {{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/168, 0xa8}], 0x6, &(0x7f00000002c0)=""/35, 0x23}, 0x9}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/183, 0xb7}, {&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/125, 0x7d}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000340)}], 0x6, &(0x7f0000000a80)=""/63, 0x3f}, 0x5}], 0x3, 0x40000021, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r9)

303.55636ms ago: executing program 1 (id=1466):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9, 0x0, 0x0, 0x3}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040)) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) (rerun: 64)

213.77646ms ago: executing program 0 (id=1467):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x3db7}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x5, 0x80000402, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x2f00, 0xfffffffe, 0x8}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 64)
ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) (async)
r4 = socket$l2tp6(0xa, 0x2, 0x73) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', <r5=>0x0, 0x40, 0xdc4fc8dd4c35619f, 0x4, 0x400, {{0x6, 0x4, 0x0, 0x39, 0x18, 0x67, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@end]}}}}})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r6, &(0x7f0000000180), 0x400000000000077, 0x7600)
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@private0, @in=@loopback, 0x4e21, 0x8, 0x4e24, 0x6, 0xa, 0x80, 0x80, 0x11, r5, 0xee00}, {0x7, 0x1, 0x9, 0xffffffffffffffff, 0xabe, 0x7, 0x8, 0xff}, {0x7, 0xffffffffffffffc0, 0x6, 0x8000000000000001}, 0x81d, 0x6e6bb0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x4d3, 0x6c}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x6}}, 0xe8)

86.529657ms ago: executing program 0 (id=1468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)

85.051443ms ago: executing program 0 (id=1469):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e0000000800028004001200080003"], 0x44}}, 0x4000000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@gettaction={0x150, 0x32, 0x310, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfc000000}}, {0xc, 0x43, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x53}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x228}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="090528bd7000fadbdf252800000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000842)

24.130489ms ago: executing program 0 (id=1470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)

282.887µs ago: executing program 0 (id=1471):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x100, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r5, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r8, 0xe6905000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000040), 0x4)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))

0s ago: executing program 1 (id=1472):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}]}}]}, 0x3c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000340)="f3b07e9b76fa0e34e19ec37359de7595b197825f5b394a4900afa6c16c641f28faab14954f2c1806ad033341c7d11fe73b108d61f9b61db1508a1e642045c2510c8680b78e8cd3cdd0ee24e31a132fcd3aa1db2cd839b8916589873652d96895288e466701e2ec6889e1be5eec7386236221cbbc5b654ae6703e114e255d42bd3c9bd5f4101b48a23d9672c4cb37e23685d1c4e2c3c3948d1a7621e4fb0fa1185d10159d4279db8f181aa67e23318c", 0xaf)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000180)=@netrom)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000140)=<r6=>0x0, &(0x7f00000001c0)=0x4)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x8, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r6, {0xa, 0x6}, {0xb, 0x6}, {0xfff3, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x2000c000)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}]}}]}, 0x3c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000340)="f3b07e9b76fa0e34e19ec37359de7595b197825f5b394a4900afa6c16c641f28faab14954f2c1806ad033341c7d11fe73b108d61f9b61db1508a1e642045c2510c8680b78e8cd3cdd0ee24e31a132fcd3aa1db2cd839b8916589873652d96895288e466701e2ec6889e1be5eec7386236221cbbc5b654ae6703e114e255d42bd3c9bd5f4101b48a23d9672c4cb37e23685d1c4e2c3c3948d1a7621e4fb0fa1185d10159d4279db8f181aa67e23318c", 0xaf) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
socket$inet6(0xa, 0x5, 0x0) (async)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000180)=@netrom) (async)
pipe(&(0x7f0000000080)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@getqdisc={0x48, 0x26, 0x8, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r6, {0xa, 0x6}, {0xb, 0x6}, {0xfff3, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x2000c000) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5155' (ED25519) to the list of known hosts.
syzkaller login: [   55.593635][ T5809] cgroup: Unknown subsys name 'net'
[   55.727209][ T5809] cgroup: Unknown subsys name 'cpuset'
[   55.731643][ T5809] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.446603][ T5809] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.679098][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.682497][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.685722][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.701763][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.705648][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.710478][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.713941][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.718692][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.732718][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.737533][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.752761][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.756391][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.779699][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.795409][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.805105][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.116094][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   63.177010][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   63.267736][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.272048][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.275866][ T5828] bridge_slave_0: entered allmulticast mode
[   63.280097][ T5828] bridge_slave_0: entered promiscuous mode
[   63.293693][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   63.309601][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.312635][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.315871][ T5828] bridge_slave_1: entered allmulticast mode
[   63.319834][ T5828] bridge_slave_1: entered promiscuous mode
[   63.407531][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.427586][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.467026][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.469427][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.471767][ T5835] bridge_slave_0: entered allmulticast mode
[   63.475750][ T5835] bridge_slave_0: entered promiscuous mode
[   63.503703][ T5828] team0: Port device team_slave_0 added
[   63.509679][ T5828] team0: Port device team_slave_1 added
[   63.513166][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.518033][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.521009][ T5835] bridge_slave_1: entered allmulticast mode
[   63.525387][ T5835] bridge_slave_1: entered promiscuous mode
[   63.545939][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.548902][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.551947][ T5833] bridge_slave_0: entered allmulticast mode
[   63.557230][ T5833] bridge_slave_0: entered promiscuous mode
[   63.562285][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.565376][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.568404][ T5833] bridge_slave_1: entered allmulticast mode
[   63.572328][ T5833] bridge_slave_1: entered promiscuous mode
[   63.647874][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.651716][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.655050][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.665501][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.673785][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.680445][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.685532][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.689046][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.691821][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.702387][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.757343][ T5833] team0: Port device team_slave_0 added
[   63.791213][ T5835] team0: Port device team_slave_0 added
[   63.796959][ T5833] team0: Port device team_slave_1 added
[   63.817953][ T5835] team0: Port device team_slave_1 added
[   63.840339][ T5828] hsr_slave_0: entered promiscuous mode
[   63.843896][ T5828] hsr_slave_1: entered promiscuous mode
[   63.880300][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.883054][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.893230][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.917353][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.920099][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.930503][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.950526][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.953102][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.963376][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.969901][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.972698][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.984529][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.107653][ T5835] hsr_slave_0: entered promiscuous mode
[   64.110869][ T5835] hsr_slave_1: entered promiscuous mode
[   64.114938][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.118374][ T5835] Cannot create hsr debugfs directory
[   64.153314][ T5833] hsr_slave_0: entered promiscuous mode
[   64.157263][ T5833] hsr_slave_1: entered promiscuous mode
[   64.160381][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.163493][ T5833] Cannot create hsr debugfs directory
[   64.507561][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.533598][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.567802][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.588840][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.617386][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.626246][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.645234][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.673337][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.735313][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.751648][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.765164][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.776567][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.835761][ T5832] Bluetooth: hci2: command tx timeout
[   64.837210][   T54] Bluetooth: hci0: command tx timeout
[   64.837864][ T5218] Bluetooth: hci1: command tx timeout
[   64.882681][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.920621][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.926720][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   64.942673][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.945240][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.968210][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.971201][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.986154][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   65.003513][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.011526][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.014517][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.038156][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.041146][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.063016][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   65.082132][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.084576][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.098224][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.100583][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.227249][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.301144][ T5828] veth0_vlan: entered promiscuous mode
[   65.327681][ T5828] veth1_vlan: entered promiscuous mode
[   65.368523][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.375142][ T5828] veth0_macvtap: entered promiscuous mode
[   65.381394][ T5828] veth1_macvtap: entered promiscuous mode
[   65.409206][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.423202][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.432987][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.441965][ T5833] veth0_vlan: entered promiscuous mode
[   65.450450][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.458123][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.461520][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.465451][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.491275][ T5833] veth1_vlan: entered promiscuous mode
[   65.541929][ T5835] veth0_vlan: entered promiscuous mode
[   65.575840][ T5833] veth0_macvtap: entered promiscuous mode
[   65.585939][ T5835] veth1_vlan: entered promiscuous mode
[   65.589415][ T5833] veth1_macvtap: entered promiscuous mode
[   65.614615][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.641447][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.642330][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.649371][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.661686][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.667660][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.670507][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.673420][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.727645][ T5835] veth0_macvtap: entered promiscuous mode
[   65.742892][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.760227][ T5835] veth1_macvtap: entered promiscuous mode
[   65.763194][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.798864][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.801390][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.828063][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.853217][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.857302][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.857751][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.878759][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.881840][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.893014][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.900079][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.903611][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.035326][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.038604][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.091019][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.101611][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.158453][ T5905] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   66.249290][ T5905] gretap1: entered promiscuous mode
[   66.260971][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.486361][ T5921] netlink: 'syz.1.10': attribute type 1 has an invalid length.
[   66.492049][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   66.510101][ T5921] bridge1: the hash_elasticity option has been deprecated and is always 16
[   66.615420][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.707649][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.808652][ T5948] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:2
[   66.918311][ T5832] Bluetooth: hci2: command tx timeout
[   66.920100][ T5832] Bluetooth: hci1: command tx timeout
[   66.922201][ T5832] Bluetooth: hci0: command tx timeout
[   67.078334][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   67.083673][ T5967] netlink: 'syz.0.20': attribute type 30 has an invalid length.
[   67.100246][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'.
[   67.106393][ T5967] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.109299][ T5967] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.111967][ T5967] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.115225][ T5967] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.123173][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   67.127518][ T5967] netlink: 'syz.0.20': attribute type 30 has an invalid length.
[   67.139631][ T5967] Zero length message leads to an empty skb
[   67.190039][ T5972] netlink: 176 bytes leftover after parsing attributes in process `syz.1.22'.
[   67.360730][ T5980] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.385963][ T5985] netlink: 'syz.0.26': attribute type 20 has an invalid length.
[   67.415931][ T5985] warning: `syz.0.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.476163][ T5992] netlink: 788 bytes leftover after parsing attributes in process `syz.2.25'.
[   67.516599][ T5992] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25'.
[   67.771436][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   68.236620][ T6005] netlink: 'syz.2.30': attribute type 1 has an invalid length.
[   68.455432][ T6017] netlink: 256 bytes leftover after parsing attributes in process `syz.2.33'.
[   68.707624][ T6035] xt_cgroup: invalid path, errno=-2
[   68.803135][ T6041] bridge0: port 3(syz_tun) entered blocking state
[   68.807372][ T6041] bridge0: port 3(syz_tun) entered disabled state
[   68.810764][ T6041] syz_tun: entered allmulticast mode
[   68.816807][ T6041] syz_tun: entered promiscuous mode
[   68.820499][ T6041] bridge0: port 3(syz_tun) entered blocking state
[   68.823861][ T6041] bridge0: port 3(syz_tun) entered forwarding state
[   68.996559][   T54] Bluetooth: hci0: command tx timeout
[   68.996627][ T5218] Bluetooth: hci2: command tx timeout
[   69.000893][ T5832] Bluetooth: hci1: command tx timeout
[   69.036633][ T6061] netlink: 'syz.1.46': attribute type 9 has an invalid length.
[   69.138369][ T6067] netlink: 'syz.0.49': attribute type 8 has an invalid length.
[   69.417788][ T6085] netlink: 'syz.2.56': attribute type 9 has an invalid length.
[   69.428968][ T6085] netlink: 'syz.2.56': attribute type 7 has an invalid length.
[   69.567161][ T6089] IPVS: persistence engine module ip_vs_pe_ not found
[   70.211198][ T6120] IPVS: set_ctl: invalid protocol: 8 172.20.20.38:20004
[   70.608270][ T6130] syz.2.69 uses obsolete (PF_INET,SOCK_PACKET)
[   70.613878][ T6130] mac80211_hwsim hwsim6 ": renamed from wlan0 (while UP)
[   70.668500][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.723362][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.075025][ T5832] Bluetooth: hci1: command tx timeout
[   71.077313][ T5832] Bluetooth: hci2: command tx timeout
[   71.077406][ T5218] Bluetooth: hci0: command tx timeout
[   71.249948][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.322068][ T6159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.483093][ T6166] tun0: tun_chr_ioctl cmd 1074025681
[   71.548762][ T6170] openvswitch: netlink: Multiple metadata blocks provided
[   71.669873][ T6176] __nla_validate_parse: 16 callbacks suppressed
[   71.669886][ T6176] netlink: 3850 bytes leftover after parsing attributes in process `syz.0.88'.
[   71.676338][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'.
[   71.787657][ T6176] netlink: 316 bytes leftover after parsing attributes in process `syz.0.88'.
[   71.956253][ T6184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.027758][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   72.030673][ T6188] validate_nla: 2 callbacks suppressed
[   72.030700][ T6188] netlink: 'syz.0.92': attribute type 5 has an invalid length.
[   72.039727][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'.
[   72.049072][ T6188] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   72.052906][ T6188] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   72.057568][ T6188] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   72.060359][ T6188] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   72.063793][ T6188] geneve2: entered promiscuous mode
[   72.067096][ T6188] geneve2: entered allmulticast mode
[   73.279445][ T6220] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[   73.297970][ T6222] netlink: 'syz.1.103': attribute type 2 has an invalid length.
[   73.415975][ T6224] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   73.420790][ T6224] netlink: 216 bytes leftover after parsing attributes in process `syz.0.101'.
[   73.583230][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.601622][ T6228] bond0: (slave rose0): Enslaving as an active interface with an up link
[   73.866931][ T6258] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   74.053092][ T6274] xt_nat: multiple ranges no longer supported
[   74.080010][ T6277] sctp: [Deprecated]: syz.0.116 (pid 6277) Use of int in maxseg socket option.
[   74.080010][ T6277] Use struct sctp_assoc_value instead
[   74.149647][ T6276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.119'.
[   74.322352][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.121'.
[   74.702888][ T6318] netlink: 'syz.1.124': attribute type 11 has an invalid length.
[   74.861396][ T6330] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.127'.
[   74.881345][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'.
[   75.518733][ T6379] netlink: 'syz.0.136': attribute type 6 has an invalid length.
[   75.530532][ T6379] netlink: 'syz.0.136': attribute type 6 has an invalid length.
[   75.697193][ T6395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.030654][ T6427] ip6gretap0: entered promiscuous mode
[   76.035961][ T6427] syz_tun: entered promiscuous mode
[   76.215959][ T6447] dummy0: entered allmulticast mode
[   76.230736][ T6440] netlink: 'syz.1.150': attribute type 9 has an invalid length.
[   76.391304][ T6460] syzkaller1: entered promiscuous mode
[   76.393521][ T6460] syzkaller1: entered allmulticast mode
[   76.586872][ T6470] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   76.589912][ T6470] netlink: 'syz.0.161': attribute type 4 has an invalid length.
[   76.905780][ T6503] __nla_validate_parse: 14 callbacks suppressed
[   76.905795][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'.
[   76.929732][ T6502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'.
[   77.030962][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'.
[   77.152810][ T6511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.171'.
[   77.158613][ T6511] netlink: 56 bytes leftover after parsing attributes in process `syz.2.171'.
[   77.211888][ T6513] veth2: entered allmulticast mode
[   77.229375][ T6513] veth3: entered promiscuous mode
[   77.412749][ T6520] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.175'.
[   77.505915][ T6531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.506187][ T6532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.586887][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'.
[   77.723887][ T6544] netlink: 'syz.1.183': attribute type 11 has an invalid length.
[   77.799484][ T6551] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   77.803976][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'.
[   77.824936][ T6551] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   77.923338][ T6560] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.946769][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'.
[   78.047682][ T6567] syzkaller0: entered promiscuous mode
[   78.050064][ T6567] syzkaller0: entered allmulticast mode
[   78.097900][ T6569] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.193'.
[   78.226743][ T6579] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   78.227930][ T6580] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   78.468400][ T6594] xt_TPROXY: Can be used only with -p tcp or -p udp
[   78.473708][ T6596] xt_TPROXY: Can be used only with -p tcp or -p udp
[   78.866651][ T6622] Bluetooth: MGMT ver 1.23
[   78.888910][ T6622] veth0: entered promiscuous mode
[   78.899625][ T6621] veth0: left promiscuous mode
[   78.908595][ T5830] IPVS: starting estimator thread 0...
[   79.016616][ T6632] IPVS: using max 61 ests per chain, 146400 per kthread
[   79.349107][ T6669] syzkaller1: entered promiscuous mode
[   79.350858][ T6669] syzkaller1: entered allmulticast mode
[   79.586126][ T6684] netlink: 'syz.0.222': attribute type 21 has an invalid length.
[   80.013845][ T6719] batman_adv: batadv0: Adding interface: dummy0
[   80.016394][ T6719] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.034209][ T6719] batman_adv: batadv0: Interface activated: dummy0
[   80.053617][ T6719] batadv0: mtu less than device minimum
[   80.065257][ T6719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.070551][ T6719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.074821][ T6719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.079168][ T6719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.082931][ T6719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.087139][ T6719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.090967][ T6719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   80.136980][ T6724] sock: sock_timestamping_bind_phc: sock not bind to device
[   80.668701][ T6771] bridge_slave_0: default FDB implementation only supports local addresses
[   80.745024][ T6772] netlink: 'syz.1.244': attribute type 5 has an invalid length.
[   80.776322][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.779883][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.093592][ T6805] erspan0: entered promiscuous mode
[   81.098606][ T6805] batman_adv: batadv0: Adding interface: macvlan2
[   81.101290][ T6805] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.117170][ T6805] batman_adv: batadv0: Interface activated: macvlan2
[   81.537266][ T6841] netlink: 'syz.0.266': attribute type 4 has an invalid length.
[   81.543052][ T6839] netlink: 'syz.0.266': attribute type 4 has an invalid length.
[   81.910683][ T6876] batadv_slave_1: entered promiscuous mode
[   81.927771][ T6875] batadv_slave_1: left promiscuous mode
[   81.950524][ T6881] veth0: entered promiscuous mode
[   81.969135][ T6881] veth0: left promiscuous mode
[   82.040091][ T6883] __nla_validate_parse: 17 callbacks suppressed
[   82.040101][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'.
[   82.058487][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'.
[   82.153117][ T6887] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.156841][ T6887] bond0: (slave bond1): Enslaving as an active interface with an up link
[   82.326485][ T6836] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   82.589233][ T6920] netlink: 244 bytes leftover after parsing attributes in process `syz.0.284'.
[   82.682499][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'.
[   82.701650][ T6933] netlink: 'syz.1.287': attribute type 33 has an invalid length.
[   82.704206][ T6933] netlink: 152 bytes leftover after parsing attributes in process `syz.1.287'.
[   82.779744][ T6940] wireguard: wg1: Could not create IPv4 socket
[   83.532398][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'.
[   83.540161][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'.
[   83.810028][ T6966] netlink: 188 bytes leftover after parsing attributes in process `syz.1.299'.
[   83.993691][ T6970] netlink: 'syz.2.301': attribute type 9 has an invalid length.
[   83.997431][ T6970] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.301'.
[   84.252047][ T6989] netlink: 'syz.2.306': attribute type 21 has an invalid length.
[   84.255484][ T6989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.306'.
[   84.442889][ T7003] net_ratelimit: 16 callbacks suppressed
[   84.442905][ T7003] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   84.600363][ T7011] netlink: 'syz.2.312': attribute type 6 has an invalid length.
[   84.916794][ T7038] IPv6: sit2: Disabled Multicast RS
[   84.919224][ T7038] sit2: entered allmulticast mode
[   85.047929][ T7044] openvswitch: netlink: Missing valid actions attribute.
[   85.050442][ T7044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.204963][ T7046] netlink: 'syz.2.324': attribute type 13 has an invalid length.
[   85.207725][ T7046] netlink: 'syz.2.324': attribute type 17 has an invalid length.
[   85.255323][ T7046] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.276830][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.332098][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.388201][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.685167][ T7036] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   85.822228][ T7062] lo speed is unknown, defaulting to 1000
[   85.826713][ T7062] lo speed is unknown, defaulting to 1000
[   85.832139][ T7062] lo speed is unknown, defaulting to 1000
[   85.843111][ T7062] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.862203][ T7062] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   85.917335][ T7062] lo speed is unknown, defaulting to 1000
[   85.923500][ T7062] lo speed is unknown, defaulting to 1000
[   85.929247][ T7062] lo speed is unknown, defaulting to 1000
[   85.968881][ T7062] Driver unsupported XDP return value 0 on prog  (id 59) dev N/A, expect packet loss!
[   86.158174][ T7079] netlink: 'syz.0.331': attribute type 1 has an invalid length.
[   86.160941][ T7079] netlink: 'syz.0.331': attribute type 2 has an invalid length.
[   86.272972][ T7086] netlink: 'syz.2.334': attribute type 2 has an invalid length.
[   86.386695][ T7097] netlink: 'syz.0.338': attribute type 2 has an invalid length.
[   86.467399][ T7101] xt_CT: You must specify a L4 protocol and not use inversions on it
[   86.565865][ T7108] netlink: 'syz.0.341': attribute type 3 has an invalid length.
[   86.603064][   T24] cfg80211: failed to load regulatory.db
[   86.702586][ T7119] ipvlan2: entered promiscuous mode
[   86.706677][ T7119] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   86.745045][ T7122] Cannot find add_set index 0 as target
[   86.747077][ T7123] Cannot find add_set index 0 as target
[   87.148520][ T7144] __nla_validate_parse: 11 callbacks suppressed
[   87.148533][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'.
[   87.153346][ T7144] (unnamed net_device) (uninitialized): option coupled_control: invalid value (11)
[   87.470234][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'.
[   87.733193][ T7169] bond_slave_0: mtu less than device minimum
[   87.938306][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[   87.941182][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[   88.159039][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[   88.398382][ T7212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.371'.
[   88.402886][ T7212] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.371'.
[   88.692977][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   88.693772][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   88.745970][ T7228] netlink: 56 bytes leftover after parsing attributes in process `syz.2.376'.
[   88.959492][ T7237] 8021q: adding VLAN 0 to HW filter on device bond3
[   88.965020][ T7237] bond2: (slave bond3): making interface the new active one
[   88.970084][ T7237] bond2: (slave bond3): Enslaving as an active interface with an up link
[   88.986745][ T7237] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[   88.996091][ T7237] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.168322][ T7249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.339083][   T33] audit: type=1804 audit(1752850303.972:2): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.387" name="/newroot/121/cgroup.controllers" dev="tmpfs" ino=636 res=1 errno=0
[   89.351144][   T33] audit: type=1800 audit(1752850303.982:3): pid=7267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.387" name="cgroup.controllers" dev="tmpfs" ino=636 res=0 errno=0
[   89.409236][ T7271] validate_nla: 5 callbacks suppressed
[   89.409254][ T7271] netlink: 'syz.1.388': attribute type 58 has an invalid length.
[   89.521411][ T7278] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   89.525535][ T7278] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   89.535374][ T7281] netlink: 'syz.1.392': attribute type 15 has an invalid length.
[   89.960878][ T7307] netlink: 'syz.2.399': attribute type 3 has an invalid length.
[   90.258976][ T7327] tipc: Started in network mode
[   90.260829][ T7327] tipc: Node identity ac14140f, cluster identity 4711
[   90.263405][ T7327] tipc: New replicast peer: 255.255.255.83
[   90.267987][ T7327] tipc: Enabled bearer <udp:>, priority 10
[   90.533012][ T7345] tap0: tun_chr_ioctl cmd 1074025678
[   90.541531][ T7345] tap0: group set to 0
[   90.575901][ T7351] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[   90.613692][ T7351] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.658222][ T7351] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.661314][ T7351] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   90.669838][ T7351] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   90.706365][ T7360] gretap1: entered promiscuous mode
[   90.711860][ T7360] bond2: (slave gretap1): making interface the new active one
[   90.717059][ T7360] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   90.732203][ T7359] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[   90.770626][ T7359] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.791392][ T7351] macvlan5: entered promiscuous mode
[   90.793599][ T7351] macvlan5: entered allmulticast mode
[   90.801486][ T7351] bond2: entered promiscuous mode
[   90.806558][ T7351] 8021q: adding VLAN 0 to HW filter on device macvlan5
[   90.812249][ T7351] bond2: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   90.819424][ T7351] bond2: left promiscuous mode
[   90.870140][ T7359] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.874916][ T7359] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   90.887194][ T7359] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   91.205611][ T7399] netlink: 'syz.2.421': attribute type 13 has an invalid length.
[   91.208101][ T7399] netlink: 'syz.2.421': attribute type 17 has an invalid length.
[   91.266134][ T7404] netlink: 'syz.0.425': attribute type 21 has an invalid length.
[   91.301089][ T7399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.341452][ T7405] lo speed is unknown, defaulting to 1000
[   91.385872][ T5830] tipc: Node number set to 2886997007
[   91.447032][ T7412] wireguard: wg1: Could not create IPv4 socket
[   91.638006][ T7426] netlink: 'syz.0.432': attribute type 2 has an invalid length.
[   91.823399][ T7444] netlink: 'syz.2.437': attribute type 12 has an invalid length.
[   91.947792][ T7451] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.965702][ T7451] macvlan5: entered promiscuous mode
[   91.968224][ T7451] macvlan5: entered allmulticast mode
[   91.971644][ T7451] bond3: entered promiscuous mode
[   91.976625][ T7451] 8021q: adding VLAN 0 to HW filter on device macvlan5
[   92.001607][ T7451] bond3: left promiscuous mode
[   92.060791][ T7458] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   92.298570][ T7475] sctp: [Deprecated]: syz.2.445 (pid 7475) Use of int in maxseg socket option.
[   92.298570][ T7475] Use struct sctp_assoc_value instead
[   92.417554][ T7484] __nla_validate_parse: 21 callbacks suppressed
[   92.417580][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'.
[   92.437479][ T7484] vlan2: entered promiscuous mode
[   92.439419][ T7484] veth0: entered promiscuous mode
[   92.468509][ T7487] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   92.536262][ T7491] netlink: 68 bytes leftover after parsing attributes in process `syz.0.452'.
[   92.691410][ T7500] netlink: 676 bytes leftover after parsing attributes in process `syz.0.455'.
[   92.695143][ T7500] netlink: 676 bytes leftover after parsing attributes in process `syz.0.455'.
[   92.730047][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'.
[   93.171344][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[   93.470177][ T7523] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001
[   93.473149][ T7523] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001
[   93.479007][ T7523] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001
[   93.485912][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'.
[   93.488985][ T7523] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001
[   93.521447][ T7521] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.561616][ T7529] erspan0: entered promiscuous mode
[   93.572415][ T7529] batman_adv: batadv0: Adding interface: macvlan2
[   93.574851][ T7529] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.582580][ T7529] batman_adv: batadv0: Interface activated: macvlan2
[   93.586304][ T7529] batadv0: mtu less than device minimum
[   93.588717][ T7529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.593665][ T7529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.597733][ T7529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.601719][ T7529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.605791][ T7529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.610027][ T7529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   93.876940][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'.
[   93.891292][ T7549] ip6t_REJECT: ECHOREPLY is not supported
[   93.935872][ T7550] lo speed is unknown, defaulting to 1000
[   93.973843][ T7553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.471'.
[   93.987216][ T7544] ieee802154 phy0 wpan0: encryption failed: -22
[   93.990977][ T7544] netlink: 112 bytes leftover after parsing attributes in process `syz.1.468'.
[   94.098048][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.102123][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.175803][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.179685][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.182875][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.189830][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.193044][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.199281][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.207938][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.217109][ T7559] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   94.331395][ T7567] tap0: tun_chr_ioctl cmd 1074025673
[   94.333088][ T7567] tap0: tun_chr_ioctl cmd 1074025673
[   94.407503][ T7572] lo speed is unknown, defaulting to 1000
[   94.543924][ T7581] lo speed is unknown, defaulting to 1000
[   95.138796][ T7625] validate_nla: 1 callbacks suppressed
[   95.138813][ T7625] netlink: 'syz.2.489': attribute type 16 has an invalid length.
[   95.143966][ T7625] netlink: 'syz.2.489': attribute type 17 has an invalid length.
[   95.170514][ T7624] netlink: 'syz.0.490': attribute type 9 has an invalid length.
[   95.187041][ T7624] netlink: 'syz.0.490': attribute type 11 has an invalid length.
[   95.334688][ T7629] syzkaller0: entered promiscuous mode
[   95.336412][ T7629] syzkaller0: entered allmulticast mode
[   95.428081][ T5862] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   95.438430][ T7631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.796356][ T7653] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[   95.820382][ T7653] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.187714][ T7681] netlink: 'syz.0.507': attribute type 18 has an invalid length.
[   96.278658][ T7684] netlink: 'syz.1.508': attribute type 27 has an invalid length.
[   96.468681][ T7702] trusted_key: syz.0.513 sent an empty control message without MSG_MORE.
[   97.541252][ T7766] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   97.549321][ T7766] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[   98.508072][ T7782] __nla_validate_parse: 14 callbacks suppressed
[   98.508087][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'.
[   98.620564][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'.
[   98.667522][ T7788] lo speed is unknown, defaulting to 1000
[   98.989609][ T7794] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.057661][ T7798] batadv_slave_1: entered promiscuous mode
[   99.116607][ T7798] batadv_slave_1: left promiscuous mode
[   99.316104][ T7809] syzkaller1: entered promiscuous mode
[   99.318477][ T7809] syzkaller1: entered allmulticast mode
[   99.444335][ T7811] gtp0: entered promiscuous mode
[   99.446450][ T7811] gtp0: entered allmulticast mode
[   99.609871][ T7819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.543'.
[  101.195845][ T7832] netlink: 'syz.2.547': attribute type 1 has an invalid length.
[  101.198920][ T7832] netlink: 208 bytes leftover after parsing attributes in process `syz.2.547'.
[  101.371913][ T7841] netlink: 148 bytes leftover after parsing attributes in process `syz.2.551'.
[  101.380587][ T7841] xt_hashlimit: size too large, truncated to 1048576
[  102.383851][ T7900] netlink: 'syz.2.565': attribute type 3 has an invalid length.
[  102.391682][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'.
[  102.529315][ T7909] net_ratelimit: 15 callbacks suppressed
[  102.529327][ T7909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.625146][ T7911] syzkaller0: entered promiscuous mode
[  102.628133][ T7911] syzkaller0: entered allmulticast mode
[  102.634320][ T7913] netlink: 'syz.2.570': attribute type 1 has an invalid length.
[  102.782664][ T7924] lo speed is unknown, defaulting to 1000
[  102.853162][ T7921] lo speed is unknown, defaulting to 1000
[  102.902846][ T7922] lo speed is unknown, defaulting to 1000
[  103.058548][ T7937] netlink: 'syz.1.576': attribute type 2 has an invalid length.
[  103.076826][ T7937] x_tables: duplicate underflow at hook 2
[  103.230105][ T7937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.576'.
[  103.752416][ T7970] netlink: 'syz.1.585': attribute type 1 has an invalid length.
[  103.756735][ T7975] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.761503][ T7970] netlink: 224 bytes leftover after parsing attributes in process `syz.1.585'.
[  103.778071][ T7970] netlink: 'syz.1.585': attribute type 1 has an invalid length.
[  103.784780][ T7970] netlink: 224 bytes leftover after parsing attributes in process `syz.1.585'.
[  103.807649][ T7970] netlink: 'syz.1.585': attribute type 5 has an invalid length.
[  103.810124][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'.
[  104.002469][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.589'.
[  104.189092][ T8012] xt_TCPMSS: Only works on TCP SYN packets
[  104.189108][ T8011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.207127][ T8010] tipc: Resetting bearer <eth:syzkaller0>
[  104.263358][ T8009] tipc: Disabling bearer <eth:syzkaller0>
[  104.763768][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'.
[  104.769848][ T8069] netdevsim netdevsim1: Direct firmware load for .
[  104.769848][ T8069]  failed with error -2
[  104.773484][ T8069] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  104.773484][ T8069] 
[  104.882229][ T8073] netlink: 'syz.2.601': attribute type 1 has an invalid length.
[  104.932335][ T8067] tipc: Started in network mode
[  104.933966][ T8067] tipc: Node identity ea4986ffeeac, cluster identity 4711
[  104.937218][ T8067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.940813][ T8067] syzkaller0: entered promiscuous mode
[  104.943134][ T8067] syzkaller0: entered allmulticast mode
[  104.952998][ T8067] tipc: Resetting bearer <eth:syzkaller0>
[  104.963938][ T8066] tipc: Resetting bearer <eth:syzkaller0>
[  104.977028][ T8066] tipc: Disabling bearer <eth:syzkaller0>
[  105.038664][ T8082] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  105.062620][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'.
[  105.081916][ T8082] netlink: 'syz.2.603': attribute type 4 has an invalid length.
[  105.138125][ T8085] netlink: 'syz.2.604': attribute type 2 has an invalid length.
[  105.156726][ T8085] : entered promiscuous mode
[  105.164582][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'.
[  105.363834][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.610'.
[  105.381604][ T8102] unsupported nlmsg_type 40
[  105.427312][ T8110] xt_bpf: check failed: parse error
[  105.483791][ T8112] : entered promiscuous mode
[  105.519690][ T8115] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.612'.
[  105.796093][ T8125] macsec1: entered promiscuous mode
[  105.806313][ T8125] macsec1: entered allmulticast mode
[  105.815647][ T8127] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  105.948957][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[  105.990519][ T8130] No such timeout policy "syz1"
[  106.112308][ T8133] pimreg3: entered allmulticast mode
[  106.195301][ T8135] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  106.210654][ T8135] syz_tun: left allmulticast mode
[  106.212436][ T8135] syz_tun: left promiscuous mode
[  106.214532][ T8135] bridge0: port 3(syz_tun) entered disabled state
[  106.227093][ T8135] bridge_slave_0: left allmulticast mode
[  106.229346][ T8135] bridge_slave_0: left promiscuous mode
[  106.231778][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.248617][ T8135] bridge_slave_1: left allmulticast mode
[  106.250842][ T8135] bridge_slave_1: left promiscuous mode
[  106.253121][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.260131][ T8138] validate_nla: 4 callbacks suppressed
[  106.260179][ T8138] netlink: 'syz.0.619': attribute type 10 has an invalid length.
[  106.272454][ T8135] bond0: (slave bond_slave_0): Releasing backup interface
[  106.283978][ T8135] bond0: (slave bond_slave_1): Releasing backup interface
[  106.309517][ T8135] team0: Port device team_slave_0 removed
[  106.322503][ T8135] team0: Port device team_slave_1 removed
[  106.325437][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.328052][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.331933][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.335329][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.342865][ T8135] bond0: (slave bond1): Releasing backup interface
[  106.350854][ T8135] bond2: (slave gretap1): Releasing active interface
[  106.359398][ T5830] lo speed is unknown, defaulting to 1000
[  106.469521][ T8138] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  106.472517][ T8138] bond0: (slave wlan1): refused to change device type
[  106.524230][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.551584][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.575488][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.595301][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.616204][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.638374][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.659797][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.680989][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  106.697214][ T8143] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[  107.028854][ T8187] ip6tnl1: entered promiscuous mode
[  107.412554][ T8215] lo speed is unknown, defaulting to 1000
[  108.315593][ T8258] lo speed is unknown, defaulting to 1000
[  108.889046][ T8272] lo speed is unknown, defaulting to 1000
[  109.081544][ T8281] __nla_validate_parse: 7 callbacks suppressed
[  109.081563][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.650'.
[  109.642556][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'.
[  109.645167][ T8310] tipc: Started in network mode
[  109.651954][ T8310] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  109.656286][ T8310] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  109.756391][ T8318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.760529][ T8318] syzkaller0: entered promiscuous mode
[  109.762296][ T8318] syzkaller0: entered allmulticast mode
[  109.790954][ T8318] tipc: Resetting bearer <eth:syzkaller0>
[  109.796361][ T8317] tipc: Resetting bearer <eth:syzkaller0>
[  109.807401][ T8321] ipt_REJECT: ECHOREPLY no longer supported.
[  109.810571][ T8317] tipc: Disabling bearer <eth:syzkaller0>
[  110.195246][ T8353] netlink: 60 bytes leftover after parsing attributes in process `syz.0.670'.
[  110.211160][ T8350] lo speed is unknown, defaulting to 1000
[  110.236535][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'.
[  110.240151][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.671'.
[  110.272221][ T8355] geneve2: entered allmulticast mode
[  110.292650][ T5830] IPVS: starting estimator thread 0...
[  110.314470][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  110.366209][ T8361] sit1: entered promiscuous mode
[  110.392963][ T8370] netlink: 48 bytes leftover after parsing attributes in process `syz.0.674'.
[  110.404197][ T8364] IPVS: using max 62 ests per chain, 148800 per kthread
[  110.504469][ T8377] dummy0: entered allmulticast mode
[  110.763844][ T8394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.679'.
[  110.775978][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'.
[  110.787174][ T8394] bridge0: port 1(batadv1) entered blocking state
[  110.789995][ T8394] bridge0: port 1(batadv1) entered disabled state
[  110.792793][ T8394] batadv1: entered allmulticast mode
[  110.796484][ T8394] batadv1: entered promiscuous mode
[  110.934344][ T8404] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  111.139765][ T8417] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  111.147723][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'.
[  111.150603][ T8417] chnl_net:caif_netlink_parms(): no params data found
[  111.199276][ T8420] netlink: 88 bytes leftover after parsing attributes in process `syz.2.684'.
[  111.289451][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  111.292821][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  111.436989][ T8439] validate_nla: 29 callbacks suppressed
[  111.437004][ T8439] netlink: 'syz.2.689': attribute type 13 has an invalid length.
[  111.447422][ T8439] netlink: 'syz.2.689': attribute type 17 has an invalid length.
[  111.461711][ T8439] gretap0: refused to change device tx_queue_len
[  111.466409][ T8439] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  112.348965][ T8445] Bluetooth: hci0: Opcode 0x080f failed: -4
[  112.401175][ T8465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  112.403867][ T8465] IPv6: NLM_F_CREATE should be set when creating new route
[  112.406210][ T8465] IPv6: NLM_F_CREATE should be set when creating new route
[  112.409240][ T8465] IPv6: NLM_F_CREATE should be set when creating new route
[  112.415059][ T8465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  112.436317][ T8468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.373094][ T8526] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  114.033534][ T8526] netlink: 'syz.0.702': attribute type 1 has an invalid length.
[  114.111885][ T8543] __nla_validate_parse: 1 callbacks suppressed
[  114.111897][ T8543] netlink: 244 bytes leftover after parsing attributes in process `syz.0.706'.
[  114.283858][ T8556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.709'.
[  114.335530][ T8560] x_tables: duplicate underflow at hook 1
[  114.418782][ T8565] x_tables: duplicate underflow at hook 1
[  114.541992][ T8573] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  114.564711][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.726441][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.174556][ T8593] lo speed is unknown, defaulting to 1000
[  115.435723][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'.
[  115.451336][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'.
[  115.455052][ T8612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.719'.
[  115.458821][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'.
[  115.462824][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'.
[  115.469931][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'.
[  115.569478][ T8620] netlink: 'syz.1.721': attribute type 2 has an invalid length.
[  115.572916][ T8620] netlink: 'syz.1.721': attribute type 1 has an invalid length.
[  115.583115][ T8620] netlink: 'syz.1.721': attribute type 1 has an invalid length.
[  115.620916][   T33] audit: type=1800 audit(1752850330.252:4): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.722" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1230 res=0 errno=0
[  115.634601][ T8617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.720'.
[  115.789607][ T8642] netlink: 'syz.1.727': attribute type 1 has an invalid length.
[  115.799128][ T8643] netlink: 'syz.1.727': attribute type 1 has an invalid length.
[  115.849312][ T8643] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.995457][ T8652] netlink: 348 bytes leftover after parsing attributes in process `syz.2.729'.
[  116.066416][ T8656] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  116.078351][ T8660] netlink: 'syz.0.732': attribute type 11 has an invalid length.
[  116.280269][ T8674] netlink: 'syz.1.736': attribute type 11 has an invalid length.
[  116.635876][ T8703] bridge_slave_0: left allmulticast mode
[  116.638249][ T8703] bridge_slave_0: left promiscuous mode
[  116.641463][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.658108][ T8703] bridge_slave_1: left allmulticast mode
[  116.660591][ T8703] bridge_slave_1: left promiscuous mode
[  116.663085][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.671137][ T8705] netlink: 'syz.1.743': attribute type 3 has an invalid length.
[  116.673974][ T8705] netlink: 'syz.1.743': attribute type 1 has an invalid length.
[  116.686635][   T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  116.692847][ T8703] bond0: (slave bond_slave_0): Releasing backup interface
[  116.703650][ T8703] bond0: (slave bond_slave_1): Releasing backup interface
[  116.725137][ T8703] team0: Port device team_slave_0 removed
[  116.736728][ T8703] team0: Port device team_slave_1 removed
[  116.739964][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.742954][ T8703] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.748514][ T8703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.752187][ T8703] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.770889][ T8703] batman_adv: batadv0: Interface deactivated: macvlan2
[  116.773794][ T8703] batman_adv: batadv0: Removing interface: macvlan2
[  116.782566][ T8703] bond2: (slave bond3): Releasing backup interface
[  116.791904][ T8703] bond2: (slave bond3): the permanent HWaddr of slave - c6:3e:84:14:98:c5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  116.806876][ T8703] bond2: (slave gretap1): making interface the new active one
[  116.818101][ T8703] bond2: (slave gretap1): Releasing backup interface
[  117.365282][ T8703] syz.2.742 (8703) used greatest stack depth: 17608 bytes left
[  117.544753][ T8739] bond0: entered promiscuous mode
[  118.106307][ T8765] netlink: 'syz.1.753': attribute type 39 has an invalid length.
[  118.197851][ T8741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.563192][ T8778] lo speed is unknown, defaulting to 1000
[  118.597269][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  118.610491][ T8783] openvswitch: netlink: Missing key (keys=40, expected=80)
[  118.828696][ T8793] erspan0: entered promiscuous mode
[  118.883140][ T8797] netlink: 'syz.2.761': attribute type 2 has an invalid length.
[  118.897631][ T8797] netlink: 'syz.2.761': attribute type 2 has an invalid length.
[  118.922042][ T8797] netlink: 'syz.2.761': attribute type 2 has an invalid length.
[  118.935136][ T8797] netlink: 'syz.2.761': attribute type 1 has an invalid length.
[  119.023316][ T8805] lo speed is unknown, defaulting to 1000
[  119.058542][ T8811] netlink: 'syz.1.763': attribute type 21 has an invalid length.
[  119.077606][ T8811] netlink: 'syz.1.763': attribute type 6 has an invalid length.
[  119.129273][ T8809] tipc: New replicast peer: 255.255.255.255
[  119.132320][ T8809] tipc: Enabled bearer <udp:syz2>, priority 10
[  119.135276][ T8809] __nla_validate_parse: 11 callbacks suppressed
[  119.135289][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'.
[  119.141210][ T8809] tipc: Disabling bearer <udp:syz2>
[  119.414835][ T8830] netlink: 'syz.0.767': attribute type 2 has an invalid length.
[  119.420822][ T8838] netlink: 56 bytes leftover after parsing attributes in process `syz.2.769'.
[  119.562993][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'.
[  119.572174][ T8846] netlink: 68 bytes leftover after parsing attributes in process `syz.1.772'.
[  119.582338][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'.
[  119.586236][ T8846] netlink: 68 bytes leftover after parsing attributes in process `syz.1.772'.
[  119.808333][ T8866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.777'.
[  120.479866][ T8900] IPVS: Scheduler module ip_vs_sip not found
[  120.723762][ T8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.771513][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'.
[  121.022573][ T5218] Bluetooth: hci2: link tx timeout
[  121.025142][ T5218] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.073954][ T8938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'.
[  121.396384][ T8957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.790'.
[  121.630893][ T8970] dummy0: left allmulticast mode
[  121.698359][ T8973] SET target dimension over the limit!
[  121.795629][ T2288] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  121.837185][ T8988] validate_nla: 1 callbacks suppressed
[  121.837196][ T8988] netlink: 'syz.0.798': attribute type 1 has an invalid length.
[  121.854611][ T8988] netlink: 'syz.0.798': attribute type 2 has an invalid length.
[  122.026980][ T9006] vlan2: entered promiscuous mode
[  122.028707][ T9006] bridge0: entered promiscuous mode
[  122.096893][ T9014] sctp: [Deprecated]: syz.2.805 (pid 9014) Use of int in maxseg socket option.
[  122.096893][ T9014] Use struct sctp_assoc_value instead
[  122.276061][ T9028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.279026][ T9028] IPv6: NLM_F_CREATE should be set when creating new route
[  122.282048][ T9028] IPv6: NLM_F_CREATE should be set when creating new route
[  122.321355][ T9028] xt_CT: You must specify a L4 protocol and not use inversions on it
[  122.693744][ T9065] netlink: 'syz.2.817': attribute type 11 has an invalid length.
[  122.735384][ T9063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.769771][ T9069] sctp: [Deprecated]: syz.1.818 (pid 9069) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.769771][ T9069] Use struct sctp_sack_info instead
[  122.796847][ T9057] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  122.800948][ T9069] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  122.833609][ T9069] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  123.048622][ T9089] pim6reg: entered allmulticast mode
[  123.076219][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  123.211098][ T9094] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  123.231700][ T9094] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  123.568495][ T9116] lo speed is unknown, defaulting to 1000
[  123.569657][ T9118] netlink: 'syz.2.826': attribute type 13 has an invalid length.
[  123.582795][ T9118] netlink: 'syz.2.826': attribute type 17 has an invalid length.
[  123.601600][ T9118] bond0: left promiscuous mode
[  123.609477][ T9118] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.628431][ T9118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.781088][ T9127] lo: entered promiscuous mode
[  123.926575][ T9132] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  123.932705][ T9132] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  124.420051][ T9155] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  124.618226][ T9129] lo: left promiscuous mode
[  124.933706][ T9183] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  124.992159][ T9182] can: request_module (can-proto-0) failed.
[  125.122463][ T9196] xt_ipcomp: unknown flags F7
[  125.131300][ T9195] xt_ipcomp: unknown flags F7
[  125.142066][ T9195] netlink: 'syz.1.843': attribute type 1 has an invalid length.
[  125.150988][ T9195] __nla_validate_parse: 14 callbacks suppressed
[  125.151003][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.843'.
[  125.378195][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'.
[  125.455229][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'.
[  125.459319][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'.
[  125.467606][ T9235] netlink: 56 bytes leftover after parsing attributes in process `syz.1.853'.
[  125.490497][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  125.496973][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'.
[  125.565616][ T9244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.854'.
[  125.746075][ T9263] netlink: 516 bytes leftover after parsing attributes in process `syz.2.858'.
[  125.785242][ T9271] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  125.805366][ T9272] netlink: 'syz.2.858': attribute type 10 has an invalid length.
[  125.831391][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.849403][ T9272] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  126.397629][ T9300] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.865'.
[  126.546348][ T9311] netlink: 'syz.0.868': attribute type 1 has an invalid length.
[  126.728485][ T9325] netlink: 'syz.0.871': attribute type 2 has an invalid length.
[  126.730862][ T9325] netlink: 'syz.0.871': attribute type 1 has an invalid length.
[  127.012061][ T9352] IPVS: length: 209 != 24
[  127.508270][ T9391] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 46426 - 0
[  127.513208][ T9391] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 46426 - 0
[  127.518088][ T9391] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 46426 - 0
[  127.520999][ T9391] geneve2: entered promiscuous mode
[  127.522756][ T9391] geneve2: entered allmulticast mode
[  127.555876][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.706641][ T9405] batman_adv: batadv0: Interface deactivated: dummy0
[  127.708905][ T9405] batman_adv: batadv0: Removing interface: dummy0
[  127.728906][ T9405] bridge_slave_0: left allmulticast mode
[  127.730864][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.734753][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.751186][ T9405] bridge_slave_1: left allmulticast mode
[  127.753047][ T9405] bridge_slave_1: left promiscuous mode
[  127.763181][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.770802][ T9405] bond0: (slave bond_slave_0): Releasing backup interface
[  127.776168][ T9405] bond0: (slave bond_slave_1): Releasing backup interface
[  127.790173][ T9405] team0: Port device team_slave_0 removed
[  127.800345][ T9405] team0: Port device team_slave_1 removed
[  127.802577][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.805518][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.808806][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.811317][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.818472][ T9405] batman_adv: batadv0: Interface deactivated: macvlan2
[  127.820633][ T9405] batman_adv: batadv0: Removing interface: macvlan2
[  127.836188][ T9412] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  127.843492][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.2.896 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  127.843506][ T9412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.843512][ T9412] Call Trace:
[  127.843516][ T9412]  <TASK>
[  127.843547][ T9412]  dump_stack_lvl+0x189/0x250
[  127.843574][ T9412]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.843584][ T9412]  ? __pfx__printk+0x10/0x10
[  127.843597][ T9412]  ? kernfs_path_from_node+0x2c/0x260
[  127.843607][ T9412]  ? kernfs_path_from_node+0x2c/0x260
[  127.843614][ T9412]  ? kernfs_path_from_node+0x2c/0x260
[  127.843622][ T9412]  ? kernfs_path_from_node+0x22c/0x260
[  127.843629][ T9412]  ? kernfs_path_from_node+0x2c/0x260
[  127.843638][ T9412]  sysfs_warn_dup+0x8e/0xa0
[  127.843653][ T9412]  sysfs_do_create_link_sd+0xc0/0x110
[  127.843662][ T9412]  device_add_class_symlinks+0x1cf/0x240
[  127.843679][ T9412]  device_add+0x475/0xb50
[  127.843693][ T9412]  wiphy_register+0x199a/0x26b0
[  127.843714][ T9412]  ? __pfx_wiphy_register+0x10/0x10
[  127.843723][ T9412]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  127.843740][ T9412]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  127.843755][ T9412]  ieee80211_register_hw+0x33e1/0x4120
[  127.843778][ T9412]  ? ieee80211_register_hw+0x14d1/0x4120
[  127.843793][ T9412]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  127.843807][ T9412]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.843826][ T9412]  ? __hrtimer_setup+0x187/0x210
[  127.843838][ T9412]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  127.843855][ T9412]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  127.843881][ T9412]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  127.843892][ T9412]  ? trace_kmalloc+0x1f/0xd0
[  127.843904][ T9412]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  127.843915][ T9412]  ? kstrndup+0xbf/0x160
[  127.843930][ T9412]  hwsim_new_radio_nl+0xea4/0x1b10
[  127.843943][ T9412]  ? __pfx___nla_validate_parse+0x10/0x10
[  127.843961][ T9412]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  127.843993][ T9412]  ? __nla_parse+0x40/0x60
[  127.844006][ T9412]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  127.844021][ T9412]  genl_family_rcv_msg_doit+0x215/0x300
[  127.844034][ T9412]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  127.844048][ T9412]  ? bpf_lsm_capable+0x9/0x20
[  127.844061][ T9412]  ? security_capable+0x7e/0x2e0
[  127.844075][ T9412]  genl_rcv_msg+0x60e/0x790
[  127.844086][ T9412]  ? __pfx_genl_rcv_msg+0x10/0x10
[  127.844094][ T9412]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  127.844136][ T9412]  netlink_rcv_skb+0x208/0x470
[  127.844150][ T9412]  ? __pfx_genl_rcv_msg+0x10/0x10
[  127.844159][ T9412]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  127.844178][ T9412]  ? down_read+0x1ad/0x2e0
[  127.844189][ T9412]  genl_rcv+0x28/0x40
[  127.844196][ T9412]  netlink_unicast+0x75c/0x8e0
[  127.844212][ T9412]  netlink_sendmsg+0x805/0xb30
[  127.844228][ T9412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.844241][ T9412]  ? aa_sock_msg_perm+0x94/0x160
[  127.844252][ T9412]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.844262][ T9412]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.844273][ T9412]  __sock_sendmsg+0x21c/0x270
[  127.844286][ T9412]  ____sys_sendmsg+0x505/0x830
[  127.844301][ T9412]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.844318][ T9412]  ? import_iovec+0x74/0xa0
[  127.844332][ T9412]  ___sys_sendmsg+0x21f/0x2a0
[  127.844346][ T9412]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.844377][ T9412]  ? __fget_files+0x2a/0x420
[  127.844385][ T9412]  ? __fget_files+0x3a0/0x420
[  127.844397][ T9412]  __x64_sys_sendmsg+0x19b/0x260
[  127.844411][ T9412]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.844428][ T9412]  ? rcu_is_watching+0x15/0xb0
[  127.844442][ T9412]  ? do_syscall_64+0xbe/0x3b0
[  127.844456][ T9412]  do_syscall_64+0xfa/0x3b0
[  127.844464][ T9412]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.844472][ T9412]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.844481][ T9412]  ? exc_page_fault+0x9f/0xf0
[  127.844489][ T9412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.844497][ T9412] RIP: 0033:0x7f29b318e9a9
[  127.844506][ T9412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.844523][ T9412] RSP: 002b:00007f29b3ff1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.844533][ T9412] RAX: ffffffffffffffda RBX: 00007f29b33b5fa0 RCX: 00007f29b318e9a9
[  127.844538][ T9412] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  127.844543][ T9412] RBP: 00007f29b3210d69 R08: 0000000000000000 R09: 0000000000000000
[  127.844548][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.844553][ T9412] R13: 0000000000000000 R14: 00007f29b33b5fa0 R15: 00007ffebdbe7368
[  127.844570][ T9412]  </TASK>
[  127.856674][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.230391][ T9436] netlink: 'syz.0.901': attribute type 21 has an invalid length.
[  128.232876][ T9436] IPv6: NLM_F_CREATE should be specified when creating new route
[  128.414509][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.541930][ T9492] netlink: 'syz.0.907': attribute type 21 has an invalid length.
[  128.595615][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  129.018026][ T9533] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  129.065916][ T9535] hsr_slave_0: left promiscuous mode
[  129.090463][ T9535] hsr_slave_1: left promiscuous mode
[  129.118902][ T9541] openvswitch: netlink: IPv4 tunnel dst address is zero
[  129.186219][ T9540] lo speed is unknown, defaulting to 1000
[  129.310151][ T9557] batadv1: left allmulticast mode
[  129.312146][ T9557] batadv1: left promiscuous mode
[  129.313902][ T9557] bridge0: port 1(batadv1) entered disabled state
[  130.141857][ T9622] netem: change failed
[  130.146645][ T9620] lo speed is unknown, defaulting to 1000
[  130.356993][ T9634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.362563][ T9634] tipc: Resetting bearer <eth:syzkaller0>
[  130.529504][ T9639] __nla_validate_parse: 12 callbacks suppressed
[  130.529517][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'.
[  130.541313][ T9639] xfrm2: entered promiscuous mode
[  130.543750][ T9639] xfrm2: entered allmulticast mode
[  130.731783][ T9649] lo speed is unknown, defaulting to 1000
[  130.826711][ T9649] netlink: 'syz.1.942': attribute type 2 has an invalid length.
[  131.242695][ T9661] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  131.264484][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.344630][ T9664] netlink: 44 bytes leftover after parsing attributes in process `syz.1.945'.
[  131.361071][   T24] tipc: Node number set to 82151167
[  131.394662][   T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  131.615589][ T9686] netlink: 'syz.0.951': attribute type 1 has an invalid length.
[  131.642989][ T9686] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  131.823288][ T9700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.954'.
[  131.833376][ T9700] netlink: 'syz.0.954': attribute type 1 has an invalid length.
[  131.853815][ T9700] bond5: entered promiscuous mode
[  131.856864][ T9700] bond5: entered allmulticast mode
[  131.858756][ T9700] 8021q: adding VLAN 0 to HW filter on device bond5
[  132.181168][ T9709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'.
[  132.312403][ T9712] xt_CT: No such helper "pptp"
[  132.359664][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  132.360493][ T9717] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  132.374761][ T9717] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  132.536875][ T9735] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  132.540867][ T9735] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  132.543744][ T9735] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  132.630015][ T9746] nbd: must specify at least one socket
[  132.688741][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.655577][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'.
[  133.721004][   T33] audit: type=1800 audit(1752850348.352:5): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.972" name=35FFFF dev="tmpfs" ino=1710 res=0 errno=0
[  133.863685][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'.
[  133.909509][ T9829] xt_CT: No such helper "pptp"
[  133.989641][ T9844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.011143][ T9844] tipc: Disabling bearer <eth:syzkaller0>
[  134.160891][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'.
[  134.641393][ T9899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.993'.
[  134.805351][ T9905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.995'.
[  135.842688][ T9930] xt_CT: No such helper "syz0"
[  135.991885][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1006'.
[  136.018225][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  136.023904][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  136.044707][   T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  136.249211][ T9971] lo speed is unknown, defaulting to 1000
[  136.315285][ T9978] IPv6: sit2: Disabled Multicast RS
[  136.372148][ T9983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1018'.
[  136.514232][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.564358][ T5875] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  136.600303][ T9999] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.604740][ T9998] xt_CT: You must specify a L4 protocol and not use inversions on it
[  136.677021][T10005] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1025'.
[  136.827420][T10021] nft_compat: unsupported protocol 0
[  136.924676][   T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  136.929849][T10030] IPVS: set_ctl: invalid protocol: 128 224.0.0.1:20000
[  136.935442][T10027] lo speed is unknown, defaulting to 1000
[  137.164347][ T9980] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  137.167181][ T9466] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  137.256640][T10051] : entered promiscuous mode
[  137.404410][T10058] block nbd1: server does not support multiple connections per device.
[  137.410862][T10058] block nbd1: shutting down sockets
[  137.490933][T10071] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1043'.
[  137.573609][T10076] lo speed is unknown, defaulting to 1000
[  137.596332][T10078] netlink: 'syz.2.1046': attribute type 83 has an invalid length.
[  137.664277][T10076] netlink: 'syz.1.1045': attribute type 62 has an invalid length.
[  137.862112][T10089] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  137.866688][T10089] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  138.110849][T10103] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  138.193700][T10106] netlink: 'syz.0.1054': attribute type 1 has an invalid length.
[  138.269519][T10106] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.297060][T10112] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.300530][T10112] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  138.308563][T10112] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  138.533283][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'.
[  138.572538][T10138] xt_hashlimit: max too large, truncated to 1048576
[  138.721579][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1063'.
[  138.723202][   T33] audit: type=1800 audit(1752850353.352:6): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1063" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1741 res=0 errno=0
[  138.797452][T10153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1065'.
[  139.034098][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  139.068762][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'.
[  139.117653][T10180] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1071'.
[  139.537629][T10213] xt_l2tp: v2 doesn't support IP mode
[  139.794450][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  139.936856][T10233] bond7: entered promiscuous mode
[  139.943133][T10233] bond7: entered allmulticast mode
[  140.508590][T10291] ip6gretap1: entered promiscuous mode
[  140.510825][T10291] ip6gretap1: entered allmulticast mode
[  140.741528][T10307] macvtap1: entered allmulticast mode
[  141.273014][T10358] lo speed is unknown, defaulting to 1000
[  141.289611][   T24] IPVS: starting estimator thread 0...
[  141.293883][T10369] ip6gre1: entered allmulticast mode
[  141.375190][T10373] IPVS: using max 61 ests per chain, 146400 per kthread
[  142.428661][T10414] __nla_validate_parse: 10 callbacks suppressed
[  142.428681][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'.
[  142.445021][T10414] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  142.653256][T10418] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  142.816582][T10431] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  142.918199][ T9457] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  142.934538][T10435] veth9: entered promiscuous mode
[  143.150560][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  143.465494][T10481] netlink: 'syz.2.1128': attribute type 1 has an invalid length.
[  143.523067][T10481] bond40: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  143.550704][T10481] veth5: entered promiscuous mode
[  143.557394][T10481] bond40: (slave veth5): Enslaving as a backup interface with a down link
[  143.711691][T10498] SET target dimension over the limit!
[  143.813267][T10506] tipc: Trying to set illegal importance in message
[  143.869858][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'.
[  144.126038][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  144.181872][T10530] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  144.332821][T10530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1144'.
[  144.734816][T10553] x_tables: duplicate underflow at hook 1
[  144.813825][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'.
[  144.819134][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'.
[  145.116784][T10560] sctp: [Deprecated]: syz.0.1151 (pid 10560) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.116784][T10560] Use struct sctp_sack_info instead
[  145.485088][T10589] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1161'.
[  145.536163][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1162'.
[  145.596102][T10595] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[  145.599251][T10595] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1164'.
[  145.618078][T10593] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  145.871494][T10593] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.875701][T10593] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.879244][T10593] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.882803][T10593] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.914075][T10597] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  146.029864][T10608] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  146.058482][T10608] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.102250][T10608] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.106792][T10608] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  146.113175][T10608] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  146.131452][T10611] netlink: 'syz.2.1169': attribute type 1 has an invalid length.
[  146.157667][T10618] veth1: entered promiscuous mode
[  146.162789][T10618] bond7: (slave veth1): Enslaving as an active interface with a down link
[  146.177762][T10608] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.289997][T10625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.032277][T10663] bond0: (slave batadv0): Releasing backup interface
[  147.053678][T10663] bond40: (slave ip6gretap2): Releasing backup interface
[  147.057267][T10663] bond40: (slave ip6gretap2): the permanent HWaddr of slave - 1a:ce:b5:13:c8:c5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  147.067092][T10663] bond40: (slave veth5): Releasing backup interface
[  147.077663][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.091466][T10665] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  147.174453][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.248084][T10679] netlink: 'syz.1.1189': attribute type 10 has an invalid length.
[  147.253915][T10679] team0: Device ipvlan1 failed to register rx_handler
[  147.270550][T10681] netem: change failed
[  147.394309][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  147.511508][T10696] __nla_validate_parse: 10 callbacks suppressed
[  147.511528][T10696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1195'.
[  147.524658][T10699] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  147.528623][T10696] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  147.533703][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1195'.
[  147.622069][T10714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.665070][T10716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'.
[  147.708306][T10720] syzkaller0: entered promiscuous mode
[  147.710611][T10720] syzkaller0: entered allmulticast mode
[  147.868003][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'.
[  147.900622][T10736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1205'.
[  148.007978][T10738] macsec4: entered promiscuous mode
[  148.010140][T10738] macsec4: entered allmulticast mode
[  148.449561][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  148.613035][T10768] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004
[  148.964936][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'.
[  148.977496][T10782] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1220'.
[  149.171170][T10795] netem: change failed
[  149.178639][T10796] xt_hashlimit: max too large, truncated to 1048576
[  149.181913][T10796] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  149.242690][T10799] netlink: 'syz.1.1227': attribute type 1 has an invalid length.
[  149.281386][T10799] bond8: entered promiscuous mode
[  149.283280][T10799] bond8: entered allmulticast mode
[  149.289161][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'.
[  149.299169][T10799] bridge3: the hash_elasticity option has been deprecated and is always 16
[  149.311340][T10800] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  149.313915][T10800] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1226'.
[  149.318408][T10799] bond8: (slave bridge3): making interface the new active one
[  149.321094][T10799] bridge3: entered promiscuous mode
[  149.323035][T10799] bridge3: entered allmulticast mode
[  149.326574][T10799] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  149.597638][T10822] netlink: 'syz.2.1233': attribute type 1 has an invalid length.
[  149.762841][T10826] lo speed is unknown, defaulting to 1000
[  150.027178][T10843] lo speed is unknown, defaulting to 1000
[  150.453519][T10858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  150.512601][T10858] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  150.654816][T10865] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  151.320600][T10917] syzkaller1: entered promiscuous mode
[  151.323667][T10917] syzkaller1: entered allmulticast mode
[  152.385608][T10943] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  152.454241][T10951] netlink: 'syz.2.1276': attribute type 11 has an invalid length.
[  152.507605][T10956] netlink: 'syz.1.1275': attribute type 1 has an invalid length.
[  152.547224][T10953] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  152.556135][T10953] __nla_validate_parse: 11 callbacks suppressed
[  152.556145][T10953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'.
[  152.630053][T10964] xt_recent: Unsupported userspace flags (00000048)
[  152.801009][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'.
[  152.822655][T10970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.827310][T10971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.832062][T10970] syzkaller0: entered promiscuous mode
[  152.834855][T10970] syzkaller0: entered allmulticast mode
[  152.857102][T10969] tipc: Resetting bearer <eth:syzkaller0>
[  152.871652][T10969] tipc: Disabling bearer <eth:syzkaller0>
[  153.003387][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'.
[  153.007861][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'.
[  153.459716][T10990] veth0_to_bridge: entered allmulticast mode
[  153.599722][T11001] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1294'.
[  153.638588][T11005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1294'.
[  153.645200][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'.
[  153.679432][T11008] netlink: 'syz.2.1296': attribute type 8 has an invalid length.
[  153.710816][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'.
[  153.713602][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1297'.
[  153.721918][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1297'.
[  153.783031][T11014] netlink: 'syz.1.1299': attribute type 2 has an invalid length.
[  153.787232][T11014] nbd: must specify a device to reconfigure
[  154.051759][T11023] netlink: 'syz.2.1302': attribute type 1 has an invalid length.
[  154.159526][T11027] Bluetooth: MGMT ver 1.23
[  154.490453][T11033] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.493791][T11033] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.498340][T11033] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.558932][T11033] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 46426 - 0
[  154.561914][T11033] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 46426 - 0
[  154.569189][T11033] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 46426 - 0
[  154.920528][T11059] netlink: 'syz.2.1313': attribute type 1 has an invalid length.
[  155.101458][T11073] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.186220][T11079] syzkaller1: entered promiscuous mode
[  155.188094][T11079] syzkaller1: entered allmulticast mode
[  155.208675][T11076] bond0: entered promiscuous mode
[  155.300078][T11087] netlink: 'syz.0.1323': attribute type 4 has an invalid length.
[  156.409262][T11118] sctp: [Deprecated]: syz.0.1332 (pid 11118) Use of int in maxseg socket option.
[  156.409262][T11118] Use struct sctp_assoc_value instead
[  156.417765][T11120] bridge0: port 1(gretap0) entered blocking state
[  156.430167][T11120] bridge0: port 1(gretap0) entered disabled state
[  156.434698][T11120] gretap0: entered allmulticast mode
[  156.437604][T11120] gretap0: entered promiscuous mode
[  156.495188][T11127] netlink: 'syz.1.1335': attribute type 20 has an invalid length.
[  156.797193][T11160] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.877405][T11160] veth11: entered promiscuous mode
[  157.913652][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ac77400: rx timeout, send abort
[  158.063935][T11185] __nla_validate_parse: 7 callbacks suppressed
[  158.063951][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[  158.283722][T11193] netlink: 'syz.2.1346': attribute type 9 has an invalid length.
[  158.289542][T11193] netlink: 'syz.2.1346': attribute type 6 has an invalid length.
[  158.417960][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ac77400: abort rx timeout. Force session deactivation
[  158.589667][T11199] tipc: New replicast peer: 255.255.255.83
[  158.592128][T11199] tipc: Enabled bearer <udp:>, priority 10
[  158.671749][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  158.678597][T11204] netlink: 'syz.0.1350': attribute type 10 has an invalid length.
[  158.690002][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.693030][T11204] batadv0: entered promiscuous mode
[  158.696749][T11204] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  158.750548][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1351'.
[  158.768702][T11206] netlink: 'syz.0.1351': attribute type 10 has an invalid length.
[  158.775635][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1351'.
[  159.062733][T11213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1353'.
[  159.251362][T11223] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1355'.
[  159.318018][T11226] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1355'.
[  159.323721][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'.
[  159.606184][T11239] netlink: 'syz.0.1361': attribute type 5 has an invalid length.
[  159.613443][T11239] netlink: 'syz.0.1361': attribute type 1 has an invalid length.
[  159.654680][T11239] 8021q: adding VLAN 0 to HW filter on device bond8
[  159.735459][T11238] delete_channel: no stack
[  159.790744][T11243] syzkaller0: entered promiscuous mode
[  159.793027][T11243] syzkaller0: entered allmulticast mode
[  159.871273][T11251] netlink: 'syz.2.1363': attribute type 21 has an invalid length.
[  161.332784][T11251] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1363'.
[  161.389691][T11264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.393743][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[  161.443094][T11268] sctp: [Deprecated]: syz.1.1368 (pid 11268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  161.443094][T11268] Use struct sctp_sack_info instead
[  161.509046][T11273] vlan3: entered promiscuous mode
[  161.511213][T11273] vlan3: entered allmulticast mode
[  161.513271][T11273] hsr_slave_1: entered allmulticast mode
[  162.034302][ T2288] page_pool_release_retry() stalled pool shutdown: id 19, 1 inflight 60 sec
[  162.114665][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  162.139090][T11327] veth0: entered promiscuous mode
[  162.155894][T11327] veth0: left promiscuous mode
[  162.700293][T11364] netlink: 'syz.0.1390': attribute type 2 has an invalid length.
[  162.703873][T11364] netlink: 'syz.0.1390': attribute type 1 has an invalid length.
[  163.148557][T11375] __nla_validate_parse: 13 callbacks suppressed
[  163.148572][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'.
[  163.155393][T11375] gretap0: left allmulticast mode
[  163.157563][T11375] gretap0: left promiscuous mode
[  163.159872][T11375] bridge0: port 1(gretap0) entered disabled state
[  163.366970][T11388] bridge: RTM_NEWNEIGH with invalid ether address
[  163.409772][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'.
[  163.468368][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  163.473030][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  163.476324][T11400] netlink: 'syz.1.1401': attribute type 1 has an invalid length.
[  163.478861][T11400] netlink: 'syz.1.1401': attribute type 2 has an invalid length.
[  163.730812][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'.
[  163.745524][T11417] netlink: 'syz.2.1407': attribute type 7 has an invalid length.
[  163.748374][T11417] netlink: 'syz.2.1407': attribute type 8 has an invalid length.
[  163.751462][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'.
[  163.769573][T11417] bridge0: entered promiscuous mode
[  163.781837][T11417] ip6gretap0: entered promiscuous mode
[  163.784690][T11417] bridge0: left promiscuous mode
[  163.790263][T11417] ip6gretap0: left promiscuous mode
[  163.852668][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'.
[  163.860582][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'.
[  163.876070][T11424] netlink: 'syz.0.1410': attribute type 12 has an invalid length.
[  163.886146][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'.
[  164.142613][T11452] netlink: 'syz.2.1417': attribute type 1 has an invalid length.
[  164.146498][T11452] netlink: 'syz.2.1417': attribute type 2 has an invalid length.
[  164.152922][T11452] netlink: 'syz.2.1417': attribute type 1 has an invalid length.
[  164.159379][T11454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.776880][T11475] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1425'.
[  165.851157][T11534] xt_hashlimit: size too large, truncated to 1048576
[  166.265214][T11552] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[  166.268623][T11552] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[  166.799526][T11575] bond0: option lp_interval: invalid value (18446744073709551604)
[  166.802848][T11575] bond0: option lp_interval: allowed values 1 - 2147483647
[  167.253765][T11590] IPv6: NLM_F_REPLACE set, but no existing node found!
[  167.258909][T11590] netlink: 'syz.1.1458': attribute type 11 has an invalid length.
[  167.979541][T11610] validate_nla: 7 callbacks suppressed
[  167.979559][T11610] netlink: 'syz.2.1463': attribute type 21 has an invalid length.
[  167.991081][T11612] netlink: 'syz.0.1464': attribute type 21 has an invalid length.
[  168.085549][T11617] No such timeout policy "syz0"
[  168.091444][T11617] No such timeout policy "syz0"
[  168.095193][T11617] No such timeout policy "syz0"
[  168.099102][T11617] No such timeout policy "syz0"
[  168.103820][T11617] No such timeout policy "syz0"
[  168.115602][T11617] No such timeout policy "syz0"
[  168.125806][T11617] No such timeout policy "syz0"
[  168.130630][T11617] No such timeout policy "syz0"
[  168.136931][T11617] No such timeout policy "syz0"
[  168.143178][T11617] No such timeout policy "syz0"
[  168.255189][T11625] __nla_validate_parse: 14 callbacks suppressed
[  168.255208][T11625] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1468'.
[  168.262316][T11625] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  168.401353][T11635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.435692][T11631] 
[  168.436832][T11631] ======================================================
[  168.439623][T11631] WARNING: possible circular locking dependency detected
[  168.442438][T11631] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  168.446984][T11631] ------------------------------------------------------
[  168.449832][T11631] syz.0.1471/11631 is trying to acquire lock:
[  168.452576][T11631] ffffffff8f674638 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  168.456218][T11631] 
[  168.456218][T11631] but task is already holding lock:
[  168.459037][T11631] ffffffff8f6745d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  168.463280][T11631] 
[  168.463280][T11631] which lock already depends on the new lock.
[  168.463280][T11631] 
[  168.467897][T11631] 
[  168.467897][T11631] the existing dependency chain (in reverse order) is:
[  168.471700][T11631] 
[  168.471700][T11631] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  168.474821][T11631]        lock_acquire+0x120/0x360
[  168.476673][T11631]        _raw_spin_lock_bh+0x36/0x50
[  168.478521][T11631]        nr_rt_ioctl+0x390/0xd50
[  168.480060][T11631]        sock_do_ioctl+0xdc/0x300
[  168.481820][T11631]        sock_ioctl+0x576/0x790
[  168.483407][T11631]        __se_sys_ioctl+0xfc/0x170
[  168.485118][T11631]        do_syscall_64+0xfa/0x3b0
[  168.486667][T11631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.489021][T11631] 
[  168.489021][T11631] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  168.491584][T11631]        lock_acquire+0x120/0x360
[  168.493152][T11631]        _raw_spin_lock_bh+0x36/0x50
[  168.494974][T11631]        nr_rt_ioctl+0x193/0xd50
[  168.496593][T11631]        sock_do_ioctl+0xdc/0x300
[  168.498226][T11631]        sock_ioctl+0x576/0x790
[  168.500090][T11631]        __se_sys_ioctl+0xfc/0x170
[  168.501797][T11631]        do_syscall_64+0xfa/0x3b0
[  168.503484][T11631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.505730][T11631] 
[  168.505730][T11631] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  168.508362][T11631]        validate_chain+0xb9b/0x2140
[  168.510395][T11631]        __lock_acquire+0xab9/0xd20
[  168.512506][T11631]        lock_acquire+0x120/0x360
[  168.514482][T11631]        _raw_spin_lock_bh+0x36/0x50
[  168.516542][T11631]        nr_rt_device_down+0xa9/0x720
[  168.518643][T11631]        nr_device_event+0x137/0x150
[  168.520675][T11631]        notifier_call_chain+0x1b6/0x3e0
[  168.522851][T11631]        __dev_notify_flags+0x18d/0x2e0
[  168.525029][T11631]        netif_change_flags+0xe8/0x1a0
[  168.527136][T11631]        dev_change_flags+0x130/0x260
[  168.529208][T11631]        dev_ioctl+0x7b4/0x1150
[  168.531099][T11631]        sock_do_ioctl+0x22c/0x300
[  168.533101][T11631]        sock_ioctl+0x576/0x790
[  168.534999][T11631]        __se_sys_ioctl+0xfc/0x170
[  168.536989][T11631]        do_syscall_64+0xfa/0x3b0
[  168.538960][T11631]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.541450][T11631] 
[  168.541450][T11631] other info that might help us debug this:
[  168.541450][T11631] 
[  168.545457][T11631] Chain exists of:
[  168.545457][T11631]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  168.545457][T11631] 
[  168.550712][T11631]  Possible unsafe locking scenario:
[  168.550712][T11631] 
[  168.553651][T11631]        CPU0                    CPU1
[  168.555735][T11631]        ----                    ----
[  168.557813][T11631]   lock(nr_neigh_list_lock);
[  168.559671][T11631]                                lock(&nr_node->node_lock);
[  168.562504][T11631]                                lock(nr_neigh_list_lock);
[  168.565368][T11631]   lock(nr_node_list_lock);
[  168.567215][T11631] 
[  168.567215][T11631]  *** DEADLOCK ***
[  168.567215][T11631] 
[  168.569968][T11631] 2 locks held by syz.0.1471/11631:
[  168.571575][T11631]  #0: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  168.574302][T11631]  #1: ffffffff8f6745d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  168.577547][T11631] 
[  168.577547][T11631] stack backtrace:
[  168.579475][T11631] CPU: 1 UID: 0 PID: 11631 Comm: syz.0.1471 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  168.579489][T11631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.579496][T11631] Call Trace:
[  168.579503][T11631]  <TASK>
[  168.579509][T11631]  dump_stack_lvl+0x189/0x250
[  168.579524][T11631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.579536][T11631]  ? __pfx__printk+0x10/0x10
[  168.579548][T11631]  ? print_lock_name+0xde/0x100
[  168.579559][T11631]  print_circular_bug+0x2ee/0x310
[  168.579571][T11631]  check_noncircular+0x134/0x160
[  168.579582][T11631]  validate_chain+0xb9b/0x2140
[  168.579593][T11631]  ? rt6_disable_ip+0x6b3/0x720
[  168.579607][T11631]  ? __lock_acquire+0xab9/0xd20
[  168.579615][T11631]  __lock_acquire+0xab9/0xd20
[  168.579624][T11631]  ? nr_rt_device_down+0xa9/0x720
[  168.579634][T11631]  lock_acquire+0x120/0x360
[  168.579641][T11631]  ? nr_rt_device_down+0xa9/0x720
[  168.579651][T11631]  ? nr_rt_device_down+0xa9/0x720
[  168.579659][T11631]  _raw_spin_lock_bh+0x36/0x50
[  168.579671][T11631]  ? nr_rt_device_down+0xa9/0x720
[  168.579679][T11631]  nr_rt_device_down+0xa9/0x720
[  168.579687][T11631]  ? do_raw_spin_unlock+0x4d/0x240
[  168.579700][T11631]  nr_device_event+0x137/0x150
[  168.579709][T11631]  notifier_call_chain+0x1b6/0x3e0
[  168.579721][T11631]  __dev_notify_flags+0x18d/0x2e0
[  168.579735][T11631]  ? __pfx___dev_notify_flags+0x10/0x10
[  168.579746][T11631]  ? __dev_change_flags+0x4cc/0x6d0
[  168.579760][T11631]  ? __pfx___dev_change_flags+0x10/0x10
[  168.579771][T11631]  ? dev_ioctl+0x7a4/0x1150
[  168.579780][T11631]  ? full_name_hash+0x92/0xe0
[  168.579790][T11631]  netif_change_flags+0xe8/0x1a0
[  168.579802][T11631]  dev_change_flags+0x130/0x260
[  168.579813][T11631]  dev_ioctl+0x7b4/0x1150
[  168.579823][T11631]  sock_do_ioctl+0x22c/0x300
[  168.579834][T11631]  ? __pfx_sock_do_ioctl+0x10/0x10
[  168.579842][T11631]  ? __lock_acquire+0xab9/0xd20
[  168.579852][T11631]  sock_ioctl+0x576/0x790
[  168.579860][T11631]  ? __pfx_sock_ioctl+0x10/0x10
[  168.579868][T11631]  ? __fget_files+0x2a/0x420
[  168.579875][T11631]  ? __fget_files+0x3a0/0x420
[  168.579881][T11631]  ? __fget_files+0x2a/0x420
[  168.579888][T11631]  ? bpf_lsm_file_ioctl+0x9/0x20
[  168.579898][T11631]  ? __pfx_sock_ioctl+0x10/0x10
[  168.579905][T11631]  __se_sys_ioctl+0xfc/0x170
[  168.579915][T11631]  do_syscall_64+0xfa/0x3b0
[  168.579924][T11631]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.579931][T11631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.579939][T11631]  ? exc_page_fault+0x9f/0xf0
[  168.579947][T11631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.579955][T11631] RIP: 0033:0x7f8ce1f8e9a9
[  168.579964][T11631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.579971][T11631] RSP: 002b:00007f8ce2edc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  168.579980][T11631] RAX: ffffffffffffffda RBX: 00007f8ce21b5fa0 RCX: 00007f8ce1f8e9a9
[  168.579986][T11631] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005
[  168.579991][T11631] RBP: 00007f8ce2010d69 R08: 0000000000000000 R09: 0000000000000000
[  168.579997][T11631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.580003][T11631] R13: 0000000000000000 R14: 00007f8ce21b5fa0 R15: 00007fff5b31bdb8
[  168.580012][T11631]  </TASK>

VM DIAGNOSIS:
14:53:03  Registers:
info registers vcpu 0

CPU#0
RAX=c1e0cb8c7b55c400 RBX=ffffffff81976c78 RCX=c1e0cb8c7b55c400 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001100 CR3=0000000027e22000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8ce2011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002b28 RDI=0000000000002b29 RBP=00000000000003f8 RSP=ffffc90004fbf030
R8 =ffff88801fbb0237 R9 =1ffff11003f76046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8cc R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8ce2edc6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000025ee6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=b0aaa89fe5adf33c 7984fa3ac6fca9e0
XMM02=8b765e816f4c61d6 71159cecccb82352 XMM03=748fbe5524554838 e663a65063be3a8d
XMM04=1f549f46325334ce 59c69de16b751ca5 XMM05=05261f549f463253 34ce59c69de16b75
XMM06=1ca5748fbe552455 4838e663a65063be XMM07=3a8d8b765e816f4c 61d671159cecccb8
XMM08=2352b0aaa89fe5ad f33c7984fa3ac6fc XMM09=0000000000000000 00007f29b3211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
