last executing test programs:

4.581269684s ago: executing program 1 (id=2332):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b97eb090000bc25af427ec88ac6000a14000000ec03010000000000000000000000000a"], 0x28}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r8, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001005000000000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0)

4.511238496s ago: executing program 1 (id=2333):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00f0001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)

4.429927583s ago: executing program 1 (id=2334):
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000091000000000000000000850000003f0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@gettaction={0x64, 0x32, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc593}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80461fafc3f143f2}, 0x10)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x0, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0)
splice(r8, 0x0, r9, 0x0, 0x1, 0x5)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r0, 0xc, 0x0, 0x101, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
r11 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12)
r12 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000090560000280012800b000100697036746e6c0000180002801400020000000000000000000000ffffac14142a080004"], 0x50}}, 0x8000)

1.545928366s ago: executing program 0 (id=2370):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES16=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x10000008, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x9)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x8, 0xfffff032}]}, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000380)="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"/314, &(0x7f00000004c0)=""/21, 0x2}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4)

1.395606413s ago: executing program 1 (id=2374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$unix(0x1, 0x5, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000007e89552f1ca4db8162691ec9f45faa4573b5dd17a9e1ec5ad1593aa140ebdea8c73d27f2e8cae9c7773d256b045127498e95d9fda6f64bd7a848bc00001e615599e679bae361c0caf0192609f880daac249c9d1b58aabace18b848a5ca2760060ddcff4162afa11d40bd4c1a9dd7642ba9ef5399659d44aacc39e5e662f823040000000000", @ANYRES16=r5, @ANYRES16=r4], 0x3c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r7 = socket$inet6(0xa, 0x80802, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x1)
sendmmsg$inet6(r7, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x128, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xf8, 0x2, [@TCA_CGROUP_EMATCHES={0xf4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5f5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xab, 0x3, 0x2}, {0x7, 0x4, 0x7, 0x7}}}, @TCF_EM_META={0x9c, 0x2, 0x0, 0x0, {{0x1}, [@TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="6c33c1d97ddeab48f9", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="11e3a36c", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="cf88", @TCF_META_TYPE_VAR="b0d87d", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="4ea2a6b70a", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x80, 0x1}, {0x8001, 0xfa, 0x2}}}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="17", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a4bb95", @TCF_META_TYPE_VAR="a9f5", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x31, 0x2}, {0x7, 0x81, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8, 0x1}, {0x3, 0x10, 0x1}}}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x8}, {0x18d8, 0x0, 0x1}}}]}]}]}}]}, 0x128}}, 0x20004084)
r10 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ppoll(&(0x7f0000000140)=[{r7, 0x5}], 0x1, 0x0, 0x0, 0x0)

1.394265932s ago: executing program 0 (id=2375):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000120001022bbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0000001b06b1040808003f"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64)
r5 = socket(0x10, 0x803, 0x2) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200ff8d00"})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r7, 0x8, 0x70bd2d, 0x5, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) (async, rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (rerun: 32)
r8 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r10=>0x0}, &(0x7f00000001c0)=0x8) (async)
r11 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000300)={r10, 0x1001, 0xe6a, 0x0, 0x4, 0x7}, &(0x7f0000000500)=0x14) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000440)={r10, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) (async)
recvmmsg(r8, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000005b40)=""/152, 0x98}], 0x1}, 0x5}], 0x1, 0x2, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="000014000a000100aaaaaaaaaa00000008000f0001f5887a69d041860c850aeb4c236c577b349d60e1d8746e2be542fe03a0ee8475e5fd77379dae37bd6f6a67160c8ccc441299029bbc01e9"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (rerun: 32)

1.166236385s ago: executing program 0 (id=2377):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async, rerun: 32)
r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800", @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000cdf605efe7b5ece9accfbb00006d1b742936000000dbc2b11b49c374e5bef5373d3d78cdf1cfee8387ba6e71ab28ee523c95dec40351897161e06a574a52f71847ed54eea733c3323f8fabf12f45a970d46c1474553d681bcee88656dd9bf14a6db9120bab3e6a3fee8fe19d3e1a56804c4c5b46df"], 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
unshare(0x2c020400) (async)
r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'})

1.087996216s ago: executing program 1 (id=2379):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[], 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='afs_edit_dir\x00', r2, 0x0, 0x3}, 0x18)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4080)
write$nci(0xffffffffffffffff, 0x0, 0x12)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r3, 0x0, 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x840)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc000000100000022abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

1.087675076s ago: executing program 0 (id=2380):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2, 0x3}, 0x1c)
syz_emit_ethernet(0x143, &(0x7f0000000580)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x10d, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\n\x00', 0x0, 0x3a, 0x0, @mcast1, @private2, [], "1e9190520b5c95d164c6f8a0723d9381e28bc933b7009cdc2ac5ce4868537a8ca1c99252167f7a476046a1ab5ca245dcb5d2b603c597c28c3eeece830fa2aac70233811fdf1bdc36627eb33954a3df766bbd4c45677a8a2f15d8a9e44aa7fc974ddf69b5570011954bd910d92cf63b6eb07e0ba9dea1104d127d24d43d987962a182012d877563f33105ad5d8b7326d14bb899b6cf7fdb4bd668897666b0150b2f08b6de9b4a69cd7df2bb2d722d54a3b35ff023ac48fe7b59f6c954f7e5a51fc4076ff15c8a69e5583ce2f35fde87252bcad60f9f8f2143d56fe25354"}}}}}}}, 0x0)
unshare(0x6a040000)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={<r7=>0x0, @multicast2, @loopback}, &(0x7f00000001c0)=0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r8=>0x0, 0x29, 0x3, 0x3, 0x5, 0xb, @dev={0xfe, 0x80, '\x00', 0x30}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x8000, 0x1, 0x603}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xe4, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf2}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf8}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x4004800)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r10, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)

599.778248ms ago: executing program 2 (id=2383):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}]}, 0xf8}}, 0x0)

599.345006ms ago: executing program 2 (id=2384):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect$caif(r0, &(0x7f0000000080)=@dgm={0x25, 0x6, 0x1}, 0x18) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
sendmmsg$sock(r9, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x14, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x18}}], 0x1, 0x0)
setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000840)=0x4, 0x4) (async)
sendto$inet6(r8, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
writev(r8, &(0x7f0000001180)=[{&(0x7f0000001240)="06", 0x1}], 0x1) (async)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000980)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x200, 0x9, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}}, 0x40004) (async)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
ioctl$sock_netdev_private(r11, 0x8914, &(0x7f0000000100)="e949e63d33b105e8971e558afa9bf8dc19c2cd7e277c550f44300aab7acf4ecc07397e2bc7bb6297eff8c5c9cb69ebd567abebf809ab4a718095563eea6dceaba183ceb8dfe2df2d4b9fc5ffd9e9e50bfd6e5c4d344009deb98ee9f80541dc9b443db1ca24de334e0db8b2ef6226f481537373e71c770c2ff09f4f1044459448") (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x7023, 0x27}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x38}}, 0x28000000)

204.733528ms ago: executing program 2 (id=2385):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900feffffff1400350065727370616e3000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="5f0efc8be5b20e92672734af1615fbdd930304d0883e055e83e1fbe4e907781713655c7ada6b8975ecae38cf47a89bff8d3f72a0"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

204.034373ms ago: executing program 1 (id=2386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
accept(r1, &(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x80)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00'})
socket(0x10, 0x80002, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000038eb26d41032aa458e743976386d45956f596fabe75dda848f7fbf071c927621c55ea3b2da17588f35c02dce1bd0bc954c0a3a9ed5a27f712a3df1f97d263593873480e8a0f48ff7561f7ed0e295b0e6a64b6d", @ANYRES16=r3, @ANYBLOB="310300000000000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r7, 0x0, 0x0, 0x800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8, 0x0, 0x5}, 0x18)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r9, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
r10 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000c9e7cdf876f5ae9948a586776aaa166a3a00000000a147bdaaf60de75b6c30e0e7409a408bb81e789516b603243f77e5255d5cb56adad47b7e4cdad48b4d54a8cd4f5aec4fb9a5844a2f3c3a84f9fb863b64386792ff0cb933d699f34153d875f06eb55faf6668fa3235b0c3", @ANYRES16=r5, @ANYBLOB="3183000000000000000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r11}, 0x20)
sendmmsg$inet6(r11, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)

203.521958ms ago: executing program 0 (id=2387):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000)
socket$packet(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0xc000)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r7, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r7, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e30300"})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440"], 0xdc}}, 0x0)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10)
sendmmsg$inet(r10, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1b9ff8", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)}}], 0x2, 0x20008004)

57.440116ms ago: executing program 2 (id=2388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0xffffff06}, @ETHTOOL_A_STRSET_STRINGSETS={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x1}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x3}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}]}]}]}, 0x20}}, 0x0)

51.191712ms ago: executing program 0 (id=2389):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
close(0x3)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xb, &(0x7f0000000300)=""/11, 0x40f00, 0x55, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0xc, 0xe5, 0xff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="070036f0", 0x4)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0)

880.134µs ago: executing program 2 (id=2390):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}]}, 0xf8}}, 0x0)

0s ago: executing program 2 (id=2391):
unshare(0x6a040080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007010000000000000000017c00000800f880040008800c00018006000600800a00000800028004001980"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x4, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0xa, 0x4, 0x76}, 0x2c)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
unshare(0x32050100)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
connect$bt_l2cap(r5, &(0x7f0000000380), 0xe)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x6, 0x20a, 0x1, 0xfffffff9, 0x87, 0x6, 0x9, <r8=>0x0}, &(0x7f0000000240)=0x20)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r8, 0x7d}, &(0x7f00000002c0)=0x8)
sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r6, 0x0)

kernel console output (not intermixed with test programs):

ed state
[  144.939663][T10480] bond43: entered allmulticast mode
[  144.947975][T10480] bridge16: port 1(bond43) entered blocking state
[  144.950734][T10480] bridge16: port 1(bond43) entered forwarding state
[  144.955081][T10492] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  145.065628][T10503] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  145.081988][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  145.191412][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  145.249011][ T1090] bridge16: port 1(bond43) entered disabled state
[  145.321017][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  145.339811][T10525] wg1 speed is unknown, defaulting to 1000
[  145.343178][T10527] trusted_key: syz.2.1259 sent an empty control message without MSG_MORE.
[  145.350439][T10525] lo speed is unknown, defaulting to 1000
[  145.420484][T10531] netlink: 'syz.0.1260': attribute type 2 has an invalid length.
[  145.439269][T10531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.470273][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  145.481128][T10535] netlink: 'syz.0.1261': attribute type 10 has an invalid length.
[  145.554991][T10540] netlink: 'syz.0.1261': attribute type 10 has an invalid length.
[  145.557648][T10540] batadv0: entered allmulticast mode
[  145.559588][T10540] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  145.580213][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  145.651761][T10544] lo: left allmulticast mode
[  145.656829][T10544] rdma_rxe: rxe_newlink: failed to add lo
[  145.690045][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  146.235758][T10551] wg1 speed is unknown, defaulting to 1000
[  146.239731][T10551] lo speed is unknown, defaulting to 1000
[  146.248630][T10553] netlink: 'syz.1.1265': attribute type 1 has an invalid length.
[  146.311936][T10535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.333281][T10555] gretap2: entered allmulticast mode
[  146.413828][T10553] wg1 speed is unknown, defaulting to 1000
[  146.415287][T10557] __nla_validate_parse: 78 callbacks suppressed
[  146.415298][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'.
[  146.425342][T10553] lo speed is unknown, defaulting to 1000
[  146.506978][T10565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  146.565154][T10576] netlink: 'syz.0.1271': attribute type 1 has an invalid length.
[  146.623150][T10576] bond47: entered promiscuous mode
[  146.625576][T10576] 8021q: adding VLAN 0 to HW filter on device bond47
[  146.636433][T10572] bond37: (slave erspan0): Releasing active interface
[  146.647731][T10572] veth0_to_bond: left allmulticast mode
[  146.655989][T10572] veth0_to_bond: left promiscuous mode
[  146.664720][T10572] bridge12: port 2(veth0_to_bond) entered disabled state
[  146.698199][T10580] 8021q: adding VLAN 0 to HW filter on device bond47
[  146.700958][T10580] bond47: (slave wireguard4): The slave device specified does not support setting the MAC address
[  146.706225][T10580] bond47: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  146.741271][T10580] bond47: (slave wireguard4): making interface the new active one
[  146.746755][T10580] wireguard4: entered promiscuous mode
[  146.756843][T10580] bond47: (slave wireguard4): Enslaving as an active interface with an up link
[  146.875942][T10593] wg1 speed is unknown, defaulting to 1000
[  146.879670][T10593] lo speed is unknown, defaulting to 1000
[  146.910392][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'.
[  146.936859][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1275'.
[  146.980402][T10602] 8021q: adding VLAN 0 to HW filter on device bond50
[  147.183174][T10606] wg1 speed is unknown, defaulting to 1000
[  147.186917][T10606] lo speed is unknown, defaulting to 1000
[  147.260378][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'.
[  147.269078][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1279'.
[  147.534857][T10637] bond45: (slave bridge17): making interface the new active one
[  147.538701][T10637] bond45: (slave bridge17): Enslaving as an active interface with an up link
[  147.634532][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'.
[  147.639065][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'.
[  147.855343][T10664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1293'.
[  147.880131][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  147.969566][T10669] 8021q: adding VLAN 0 to HW filter on device bond47
[  147.977553][T10672] vxcan0: entered allmulticast mode
[  148.009593][T10669] bond47: (slave veth15): Enslaving as an active interface with a down link
[  148.026349][T10669] gretap3: entered promiscuous mode
[  148.029799][T10669] bond47: (slave gretap3): making interface the new active one
[  148.034670][T10669] bond47: (slave gretap3): Enslaving as an active interface with an up link
[  148.051140][T10669] macvlan5: entered promiscuous mode
[  148.058082][T10669] macvlan5: entered allmulticast mode
[  148.067436][T10669] bond47: entered promiscuous mode
[  148.074054][T10669] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  148.077909][T10669] bond47: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  148.079038][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'.
[  148.085302][T10669] bond47: left promiscuous mode
[  148.293481][T10689] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1300'.
[  148.346947][T10693] bridge18: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  148.508147][T10705] 8021q: adding VLAN 0 to HW filter on device bond51
[  148.551070][T10705] bond51: (slave veth15): Enslaving as an active interface with a down link
[  148.564665][T10705] nbd: couldn't find device at index 536870912
[  148.583574][T10705] gretap4: entered promiscuous mode
[  148.588409][T10705] bond51: (slave gretap4): making interface the new active one
[  148.596163][T10705] bond51: (slave gretap4): Enslaving as an active interface with an up link
[  148.881966][T10726] bond48: entered promiscuous mode
[  148.884306][T10726] 8021q: adding VLAN 0 to HW filter on device bond48
[  148.892643][T10722] pimreg: left allmulticast mode
[  148.944535][T10728] rdma_rxe: rxe_newlink: failed to add lo
[  149.006552][T10734] syz.2.1318: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  149.015755][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.2.1318 Not tainted syzkaller #0 PREEMPT(full) 
[  149.015773][T10734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.015780][T10734] Call Trace:
[  149.015785][T10734]  <TASK>
[  149.015791][T10734]  dump_stack_lvl+0x189/0x250
[  149.015813][T10734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.015829][T10734]  ? __pfx__printk+0x10/0x10
[  149.015847][T10734]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  149.015863][T10734]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  149.015877][T10734]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  149.015893][T10734]  warn_alloc+0x214/0x310
[  149.015912][T10734]  ? stack_depot_save_flags+0x40/0x860
[  149.015931][T10734]  ? __pfx_warn_alloc+0x10/0x10
[  149.015950][T10734]  ? kasan_save_track+0x4f/0x80
[  149.015965][T10734]  ? xskq_create+0x56/0x170
[  149.015976][T10734]  ? xsk_init_queue+0xb0/0x110
[  149.015985][T10734]  ? xsk_setsockopt+0x4dc/0x8d0
[  149.016001][T10734]  ? do_sock_setsockopt+0x17c/0x1b0
[  149.016014][T10734]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  149.016026][T10734]  ? do_syscall_64+0xfa/0x3b0
[  149.016038][T10734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.016056][T10734]  __vmalloc_node_range_noprof+0x125/0x12f0
[  149.016096][T10734]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  149.016125][T10734]  ? __kasan_kmalloc+0x93/0xb0
[  149.016144][T10734]  vmalloc_user_noprof+0xad/0xf0
[  149.016161][T10734]  ? xskq_create+0xbf/0x170
[  149.016173][T10734]  xskq_create+0xbf/0x170
[  149.016187][T10734]  xsk_init_queue+0xb0/0x110
[  149.016202][T10734]  xsk_setsockopt+0x4dc/0x8d0
[  149.016222][T10734]  ? __pfx_xsk_setsockopt+0x10/0x10
[  149.016241][T10734]  ? __pfx_aa_sk_perm+0x10/0x10
[  149.016260][T10734]  ? aa_sock_opt_perm+0xff/0x1b0
[  149.016273][T10734]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  149.016285][T10734]  ? __pfx_xsk_setsockopt+0x10/0x10
[  149.016303][T10734]  do_sock_setsockopt+0x17c/0x1b0
[  149.016318][T10734]  __x64_sys_setsockopt+0x13f/0x1b0
[  149.016336][T10734]  do_syscall_64+0xfa/0x3b0
[  149.016348][T10734]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.016359][T10734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.016369][T10734]  ? exc_page_fault+0x9f/0xf0
[  149.016381][T10734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.016392][T10734] RIP: 0033:0x7f2cf718eba9
[  149.016403][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.016413][T10734] RSP: 002b:00007f2cf803d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  149.016426][T10734] RAX: ffffffffffffffda RBX: 00007f2cf73d5fa0 RCX: 00007f2cf718eba9
[  149.016435][T10734] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  149.016467][T10734] RBP: 00007f2cf7211e19 R08: 0000000000000004 R09: 0000000000000000
[  149.016475][T10734] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.016482][T10734] R13: 00007f2cf73d6038 R14: 00007f2cf73d5fa0 R15: 00007ffdf85514c8
[  149.016502][T10734]  </TASK>
[  149.016508][T10734] Mem-Info:
[  149.102724][T10742] 8021q: adding VLAN 0 to HW filter on device bond49
[  149.140111][T10734] active_anon:4539 inactive_anon:0 isolated_anon:0
[  149.140111][T10734]  active_file:1597 inactive_file:38277 isolated_file:0
[  149.140111][T10734]  unevictable:1768 dirty:263 writeback:0
[  149.140111][T10734]  slab_reclaimable:10988 slab_unreclaimable:79707
[  149.140111][T10734]  mapped:18262 shmem:2446 pagetables:941
[  149.140111][T10734]  sec_pagetables:0 bounce:0
[  149.140111][T10734]  kernel_misc_reclaimable:0
[  149.140111][T10734]  free:260667 free_pcp:25721 free_cma:0
[  149.140189][T10734] Node 0 active_anon:10536kB inactive_anon:0kB active_file:4108kB inactive_file:18948kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25616kB dirty:440kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  149.140215][T10734] Node 1 active_anon:7620kB inactive_anon:0kB active_file:2280kB inactive_file:134160kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47432kB dirty:612kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8516kB pagetables:1588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  149.140244][T10734] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  149.140280][T10734] lowmem_reserve[]: 0 811 811 811 811
[  149.140299][T10734] Node 0 DMA32 free:369084kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10536kB inactive_anon:0kB active_file:4108kB inactive_file:18948kB unevictable:3536kB writepending:440kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:36220kB local_pcp:19456kB free_cma:0kB
[  149.140321][T10734] lowmem_reserve[]: 0
[  149.213796][T10734]  0 0 0 0
[  149.214882][T10734] Node 1 DMA32 free:445220kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:13232kB local_pcp:7964kB free_cma:0kB
[  149.231075][T10734] lowmem_reserve[]: 0 0 854 854 854
[  149.233419][T10734] Node 1 Normal free:213004kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7688kB inactive_anon:0kB active_file:2280kB inactive_file:134160kB unevictable:3536kB writepending:612kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:53528kB local_pcp:31576kB free_cma:0kB
[  149.251048][T10734] lowmem_reserve[]: 0 0 0 0 0
[  149.252911][T10734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  149.270027][T10734] Node 0 DMA32: 297*4kB (UE) 305*8kB (U) 13*16kB (UM) 237*32kB (U) 276*64kB (UM) 163*128kB (UM) 62*256kB (UM) 19*512kB (UM) 12*1024kB (UME) 1*2048kB (M) 68*4096kB (UM) = 368412kB
[  149.276117][T10734] Node 1 DMA32: 3*4kB (UM) 3*8kB (UM) 2*16kB (M) 3*32kB (UM) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 106*4096kB (M) = 445220kB
[  149.290180][T10734] Node 1 Normal: 227*4kB (UME) 432*8kB (UME) 432*16kB (UME) 381*32kB (UME) 97*64kB (UME) 98*128kB (UM) 64*256kB (UM) 31*512kB (UM) 23*1024kB (UM) 10*2048kB (UME) 23*4096kB (U) = 212716kB
[  149.312478][T10734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.315988][T10734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.326705][T10755] wg1 speed is unknown, defaulting to 1000
[  149.329401][T10734] 42320 total pagecache pages
[  149.331270][T10734] 0 pages in swap cache
[  149.332810][T10734] Free swap  = 124996kB
[  149.334472][T10734] Total swap = 124996kB
[  149.336388][T10734] 786301 pages RAM
[  149.338121][T10734] 0 pages HighMem/MovableOnly
[  149.339401][T10755] lo speed is unknown, defaulting to 1000
[  149.340168][T10734] 241350 pages reserved
[  149.340175][T10734] 0 pages cma reserved
[  149.689423][T10776] wg1 speed is unknown, defaulting to 1000
[  149.692666][ T5680] net_ratelimit: 28 callbacks suppressed
[  149.692675][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  149.704394][T10781] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  149.705385][T10776] lo speed is unknown, defaulting to 1000
[  149.819973][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  149.941398][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  150.062121][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  150.065958][T10799] validate_nla: 12 callbacks suppressed
[  150.065970][T10799] netlink: 'syz.0.1329': attribute type 10 has an invalid length.
[  150.074348][T10795] netlink: 'syz.0.1329': attribute type 10 has an invalid length.
[  150.169920][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  150.198017][T10810] netlink: 'syz.2.1331': attribute type 13 has an invalid length.
[  150.202388][T10810] netlink: 'syz.2.1331': attribute type 17 has an invalid length.
[  150.217561][T10807] bond52 (unregistering): Released all slaves
[  150.218177][T10811] netlink: 'syz.0.1333': attribute type 10 has an invalid length.
[  150.258224][T10808] bond52 (unregistering): Released all slaves
[  150.283988][T10810] tipc: Resetting bearer <eth:gre0>
[  150.316971][T10810] 8021q: adding VLAN 0 to HW filter on device team0
[  150.332986][T10810] !: left promiscuous mode
[  150.339520][T10810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.350502][ T5885] lo speed is unknown, defaulting to 1000
[  150.352673][ T5885] syz2: Port: 1 Link ACTIVE
[  150.361023][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  150.369193][T10815] wg1 speed is unknown, defaulting to 1000
[  150.378343][T10815] lo speed is unknown, defaulting to 1000
[  150.422930][T10820] tunl0: Caught tx_queue_len zero misconfig
[  150.494066][T10822] bridge11: port 1(veth0_to_bond) entered blocking state
[  150.497212][T10822] bridge11: port 1(veth0_to_bond) entered disabled state
[  150.500351][T10822] veth0_to_bond: entered allmulticast mode
[  150.507504][T10822] veth0_to_bond: entered promiscuous mode
[  150.540298][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  150.746645][T10833] IPv6: sit1: Disabled Multicast RS
[  150.749741][T10833] sit1: entered allmulticast mode
[  150.770685][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  150.881357][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  151.325670][T10865] netlink: 'syz.1.1351': attribute type 1 has an invalid length.
[  151.404272][T10871] netlink: 'syz.1.1353': attribute type 1 has an invalid length.
[  151.419613][T10871] 8021q: adding VLAN 0 to HW filter on device bond53
[  151.445577][T10871] 8021q: adding VLAN 0 to HW filter on device batadv6
[  151.453322][T10871] bond53: (slave batadv6): making interface the new active one
[  151.457808][T10871] bond53: (slave batadv6): Enslaving as an active interface with an up link
[  151.468813][T10874] __nla_validate_parse: 16 callbacks suppressed
[  151.468825][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'.
[  151.507382][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1355'.
[  151.517673][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1355'.
[  151.564542][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'.
[  151.575909][T10881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1357'.
[  151.596323][T10883] tun0: tun_chr_ioctl cmd 1074025675
[  151.598574][T10883] tun0: persist enabled
[  151.600848][T10883] tun0: tun_chr_ioctl cmd 1074025675
[  151.603248][T10883] tun0: persist disabled
[  151.638101][T10881] wg1 speed is unknown, defaulting to 1000
[  151.651361][T10881] lo speed is unknown, defaulting to 1000
[  151.676254][T10885] netlink: 'syz.1.1357': attribute type 10 has an invalid length.
[  151.727187][T10885] netlink: 'syz.1.1357': attribute type 10 has an invalid length.
[  151.731986][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1357'.
[  151.748204][T10885] batadv0: entered promiscuous mode
[  152.023608][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'.
[  152.027298][T10895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1362'.
[  152.052270][T10899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1363'.
[  152.063348][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'.
[  152.152114][T10904] netlink: 'syz.0.1366': attribute type 1 has an invalid length.
[  152.159568][T10901] wg1 speed is unknown, defaulting to 1000
[  152.175986][T10904] bond50: entered promiscuous mode
[  152.178151][T10904] 8021q: adding VLAN 0 to HW filter on device bond50
[  152.184175][T10901] lo speed is unknown, defaulting to 1000
[  152.342534][T10906] tipc: Resetting bearer <eth:gre0>
[  152.378774][T10906] batadv0: left promiscuous mode
[  152.381081][T10906] batadv0: left allmulticast mode
[  152.386949][T10906] macvlan0: left allmulticast mode
[  152.396746][T10906] geneve3: left promiscuous mode
[  152.400906][T10906] veth8: left promiscuous mode
[  152.403262][T10906] veth8: left allmulticast mode
[  152.406087][T10906] geneve5: left promiscuous mode
[  152.408310][T10906] geneve5: left allmulticast mode
[  152.412749][T10906] bond17: left promiscuous mode
[  152.416468][T10906] bond25: left promiscuous mode
[  152.419216][T10906] bond28: left promiscuous mode
[  152.421986][T10906] macsec0: left promiscuous mode
[  152.424161][T10906] macsec0: left allmulticast mode
[  152.427633][T10906] vlan4: left promiscuous mode
[  152.429690][T10906] bond36: left promiscuous mode
[  152.432484][T10906] vlan4: left allmulticast mode
[  152.434594][T10906] bond36: left allmulticast mode
[  152.437022][T10906] bond37: left promiscuous mode
[  152.445460][T10906] bond41: left promiscuous mode
[  152.469282][ T5885] lo speed is unknown, defaulting to 1000
[  152.475461][T10917] syzkaller0: entered promiscuous mode
[  152.477910][ T5885] syz2: Port: 1 Link DOWN
[  152.479742][T10917] syzkaller0: entered allmulticast mode
[  152.532631][T10919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.542336][T10919] syzkaller0: entered promiscuous mode
[  152.545831][T10919] syzkaller0: entered allmulticast mode
[  152.560977][T10920] tipc: Resetting bearer <eth:syzkaller0>
[  152.607601][T10919] tipc: Resetting bearer <eth:syzkaller0>
[  152.619723][T10919] tipc: Disabling bearer <eth:syzkaller0>
[  152.848919][T10924] team0: Port device dummy0 added
[  152.856055][T10924] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  152.864306][T10924] team0: Failed to send options change via netlink (err -105)
[  152.867701][T10924] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  152.872140][T10924] team0: Port device dummy0 removed
[  153.167016][T10937] macvlan3: entered allmulticast mode
[  153.169806][T10937] syz_tun: entered promiscuous mode
[  153.177981][T10937] syz_tun: entered allmulticast mode
[  153.185791][T10937] team0: Port device macvlan3 added
[  153.259563][T10946] macvlan1: Caught tx_queue_len zero misconfig
[  153.304346][T10944] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  153.321233][T10950] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  153.425398][T10965] 8021q: adding VLAN 0 to HW filter on device bond54
[  153.449706][T10967] 8021q: adding VLAN 0 to HW filter on device bond51
[  153.463714][T10965] bond54: (slave ip6gretap3): making interface the new active one
[  153.466988][T10965] bond54: (slave ip6gretap3): Enslaving as an active interface with an up link
[  153.471123][T10967] bond0: (slave erspan0): Releasing active interface
[  153.501812][T10967] bond51: (slave erspan0): making interface the new active one
[  153.506020][T10967] bond51: (slave erspan0): Enslaving as an active interface with an up link
[  153.611301][T10965] veth17: entered promiscuous mode
[  153.811875][T10989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.818531][T10989] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  153.828194][T10989] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  153.838221][T10989] tipc: Resetting bearer <eth:syzkaller0>
[  153.911128][T10989] batadv1: left allmulticast mode
[  153.913268][T10989] batadv1: left promiscuous mode
[  153.926047][T10989] bridge0: port 1(batadv1) entered disabled state
[  154.035649][T10989] bond2: (slave bridge0): Removing an active aggregator
[  154.039516][T10989] bond2: (slave bridge0): Releasing backup interface
[  154.281023][T11008] wg1 speed is unknown, defaulting to 1000
[  154.287634][T11008] lo speed is unknown, defaulting to 1000
[  154.475942][T11025] wg1 speed is unknown, defaulting to 1000
[  154.486282][T11025] lo speed is unknown, defaulting to 1000
[  154.730946][ T6642] net_ratelimit: 26 callbacks suppressed
[  154.730960][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  154.790504][T11048] 8021q: adding VLAN 0 to HW filter on device bond52
[  154.811141][T11048] bond52: (slave erspan0): making interface the new active one
[  154.814430][T11048] bond52: (slave erspan0): Enslaving as an active interface with an up link
[  154.855038][T11052] bond53: entered promiscuous mode
[  154.856348][    T9] tipc: Node number set to 2723479968
[  154.857229][T11052] 8021q: adding VLAN 0 to HW filter on device bond53
[  154.872172][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  154.949803][T11062] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  154.953244][T11062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.967154][T11059] 8021q: adding VLAN 0 to HW filter on device bond54
[  154.980068][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  155.005074][T11059] vlan5: entered promiscuous mode
[  155.007328][T11059] bond54: entered promiscuous mode
[  155.015297][T11059] vlan5: entered allmulticast mode
[  155.017489][T11059] bond54: entered allmulticast mode
[  155.084884][T11069] validate_nla: 15 callbacks suppressed
[  155.084897][T11069] netlink: 'syz.1.1413': attribute type 1 has an invalid length.
[  155.090975][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  155.123574][T11069] bond56: (slave bridge15): making interface the new active one
[  155.128933][T11069] bond56: (slave bridge15): Enslaving as an active interface with an up link
[  155.161623][T11077] vlan0: entered allmulticast mode
[  155.202216][T11081] netlink: 'syz.1.1416': attribute type 1 has an invalid length.
[  155.233462][T11081] bond57: entered promiscuous mode
[  155.235497][T11081] 8021q: adding VLAN 0 to HW filter on device bond57
[  155.240786][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  155.274913][T11085] bond0 (unregistering): Released all slaves
[  155.359997][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  155.469997][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  155.581022][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  155.976270][T11096] netlink: 'syz.2.1420': attribute type 9 has an invalid length.
[  156.197522][T11102] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode
[  156.311432][T11109] netlink: 'syz.0.1424': attribute type 1 has an invalid length.
[  156.336966][T11109] bond0: entered promiscuous mode
[  156.339641][T11109] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.444830][T11116] netlink: 'syz.2.1428': attribute type 1 has an invalid length.
[  156.464313][T11117] bond55 (unregistering): Released all slaves
[  156.496431][T11116] bond55: entered promiscuous mode
[  156.498522][T11116] 8021q: adding VLAN 0 to HW filter on device bond55
[  156.506303][T11120] __nla_validate_parse: 13 callbacks suppressed
[  156.506311][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.513179][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.517677][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.522843][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.527300][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.535797][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.540644][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.545267][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.555447][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  156.570147][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1430'.
[  156.777880][T11145] wg1 speed is unknown, defaulting to 1000
[  156.783623][T11145] lo speed is unknown, defaulting to 1000
[  157.420442][T11128] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  157.574445][T11167] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  157.577679][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.0.1441 Not tainted syzkaller #0 PREEMPT(full) 
[  157.577694][T11167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.577702][T11167] Call Trace:
[  157.577708][T11167]  <TASK>
[  157.577711][T11167]  dump_stack_lvl+0x189/0x250
[  157.577736][T11167]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.577750][T11167]  ? __pfx__printk+0x10/0x10
[  157.577769][T11167]  ? kernfs_path_from_node+0x2f/0x290
[  157.577781][T11167]  ? kernfs_path_from_node+0x250/0x290
[  157.577791][T11167]  ? kernfs_path_from_node+0x2f/0x290
[  157.577805][T11167]  sysfs_warn_dup+0x8e/0xa0
[  157.577818][T11167]  sysfs_do_create_link_sd+0xc0/0x110
[  157.577832][T11167]  device_add_class_symlinks+0x1cf/0x240
[  157.577847][T11167]  device_add+0x475/0xb50
[  157.577863][T11167]  wiphy_register+0x1ba6/0x28d0
[  157.577884][T11167]  ? __pfx_wiphy_register+0x10/0x10
[  157.577891][T11167]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  157.577904][T11167]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  157.577916][T11167]  ieee80211_register_hw+0x3484/0x4100
[  157.577931][T11167]  ? ieee80211_register_hw+0x1401/0x4100
[  157.577944][T11167]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  157.577955][T11167]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.577966][T11167]  ? __hrtimer_setup+0x187/0x210
[  157.577974][T11167]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  157.577986][T11167]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  157.578007][T11167]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  157.578016][T11167]  ? trace_kmalloc+0x1f/0xd0
[  157.578024][T11167]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  157.578034][T11167]  ? kstrndup+0xbf/0x160
[  157.578046][T11167]  hwsim_new_radio_nl+0xea4/0x1b10
[  157.578056][T11167]  ? __pfx___nla_validate_parse+0x10/0x10
[  157.578076][T11167]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.578099][T11167]  ? __nla_parse+0x40/0x60
[  157.578111][T11167]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  157.578128][T11167]  genl_family_rcv_msg_doit+0x215/0x300
[  157.578147][T11167]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  157.578165][T11167]  ? bpf_lsm_capable+0x9/0x20
[  157.578173][T11167]  ? security_capable+0x7e/0x2e0
[  157.578186][T11167]  genl_rcv_msg+0x60e/0x790
[  157.578197][T11167]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.578205][T11167]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  157.578220][T11167]  netlink_rcv_skb+0x208/0x470
[  157.578226][T11167]  ? __lock_acquire+0xab9/0xd20
[  157.578236][T11167]  ? __pfx_genl_rcv_msg+0x10/0x10
[  157.578245][T11167]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  157.578259][T11167]  ? down_read+0x1ad/0x2e0
[  157.578268][T11167]  genl_rcv+0x28/0x40
[  157.578276][T11167]  netlink_unicast+0x82f/0x9e0
[  157.578289][T11167]  ? __pfx_netlink_unicast+0x10/0x10
[  157.578300][T11167]  ? netlink_sendmsg+0x642/0xb30
[  157.578306][T11167]  ? skb_put+0x11b/0x210
[  157.578341][T11167]  netlink_sendmsg+0x805/0xb30
[  157.578352][T11167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.578361][T11167]  ? aa_sock_msg_perm+0xf1/0x1d0
[  157.578372][T11167]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  157.578384][T11167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.578396][T11167]  __sock_sendmsg+0x21c/0x270
[  157.578414][T11167]  ____sys_sendmsg+0x505/0x830
[  157.578432][T11167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  157.578453][T11167]  ? import_iovec+0x74/0xa0
[  157.578467][T11167]  ___sys_sendmsg+0x21f/0x2a0
[  157.578476][T11167]  ? __pfx____sys_sendmsg+0x10/0x10
[  157.578506][T11167]  ? __fget_files+0x2a/0x420
[  157.578515][T11167]  ? __fget_files+0x3a0/0x420
[  157.578533][T11167]  __x64_sys_sendmsg+0x19b/0x260
[  157.578548][T11167]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  157.578573][T11167]  ? do_syscall_64+0xbe/0x3b0
[  157.578589][T11167]  do_syscall_64+0xfa/0x3b0
[  157.578601][T11167]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.578611][T11167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.578622][T11167]  ? exc_page_fault+0x9f/0xf0
[  157.578647][T11167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.578658][T11167] RIP: 0033:0x7f72ff38eba9
[  157.578667][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.578674][T11167] RSP: 002b:00007f7300207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.578683][T11167] RAX: ffffffffffffffda RBX: 00007f72ff5d5fa0 RCX: 00007f72ff38eba9
[  157.578707][T11167] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  157.578712][T11167] RBP: 00007f72ff411e19 R08: 0000000000000000 R09: 0000000000000000
[  157.578716][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.578725][T11167] R13: 00007f72ff5d6038 R14: 00007f72ff5d5fa0 R15: 00007ffc2a3ade88
[  157.578739][T11167]  </TASK>
[  157.807840][T11177] netlink: 'syz.0.1445': attribute type 1 has an invalid length.
[  157.819571][T11177] bond52: entered promiscuous mode
[  157.823849][T11177] 8021q: adding VLAN 0 to HW filter on device bond52
[  157.844621][T11180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  158.081525][T11200] netlink: 'syz.0.1453': attribute type 1 has an invalid length.
[  158.108655][T11200] 8021q: adding VLAN 0 to HW filter on device bond53
[  158.127762][T11200] bond51: (slave erspan0): Releasing active interface
[  158.134713][T11200] bond53: (slave erspan0): making interface the new active one
[  158.138356][T11200] bond53: (slave erspan0): Enslaving as an active interface with an up link
[  158.377235][ T6642] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.380263][ T6642] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.383069][ T6642] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.386005][ T6642] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.494506][T11231] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  158.593945][T11245] netlink: 'syz.2.1466': attribute type 10 has an invalid length.
[  158.624721][T11247] netlink: 'syz.2.1468': attribute type 1 has an invalid length.
[  158.640731][T11247] 8021q: adding VLAN 0 to HW filter on device bond57
[  158.654023][T11247] veth17: entered promiscuous mode
[  158.657667][T11247] bond57: (slave veth17): Enslaving as an active interface with a down link
[  158.663503][T11247] erspan0: entered allmulticast mode
[  158.667499][T11247] bond52: (slave erspan0): Releasing active interface
[  158.670227][ T5850] Bluetooth: hci0: command 0x0c20 tx timeout
[  158.681796][T11247] bond57: (slave erspan0): making interface the new active one
[  158.701004][T11247] erspan0: entered promiscuous mode
[  158.710729][T11247] bond57: (slave erspan0): Enslaving as an active interface with an up link
[  159.013235][T11271] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  159.147311][T11286] netlink: 'syz.1.1473': attribute type 13 has an invalid length.
[  159.173991][T11286] erspan0: left allmulticast mode
[  159.218926][T11286] ip6gretap0: entered promiscuous mode
[  159.242606][T11286] 8021q: adding VLAN 0 to HW filter on device team0
[  159.282913][T11276] wg1 speed is unknown, defaulting to 1000
[  159.288827][T11276] lo speed is unknown, defaulting to 1000
[  159.316940][T11293] sctp: [Deprecated]: syz.2.1476 (pid 11293) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.316940][T11293] Use struct sctp_sack_info instead
[  159.340964][T11293] unsupported nlmsg_type 40
[  159.548722][T11305] bridge0: port 1(batadv3) entered blocking state
[  159.553414][T11305] bridge0: port 1(batadv3) entered disabled state
[  159.555908][T11305] batadv3: entered allmulticast mode
[  159.559172][T11305] batadv3: entered promiscuous mode
[  159.651948][T11308] 8021q: adding VLAN 0 to HW filter on device bond58
[  159.830596][   T12] net_ratelimit: 43 callbacks suppressed
[  159.830607][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  159.970024][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  160.030118][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.034246][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.038095][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.041699][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.045787][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.049950][ T5680] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  160.050521][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.053061][ T5680] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  160.080325][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  160.190039][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  160.521560][T11321] validate_nla: 1 callbacks suppressed
[  160.521569][T11321] netlink: 'syz.1.1484': attribute type 1 has an invalid length.
[  160.537611][T11321] 8021q: adding VLAN 0 to HW filter on device bond59
[  160.552723][T11321] vlan9: entered promiscuous mode
[  160.554532][T11321] bond59: entered promiscuous mode
[  160.556585][T11321] vlan9: entered allmulticast mode
[  160.558710][T11321] bond59: entered allmulticast mode
[  160.678227][T11328] netlink: 'syz.1.1487': attribute type 1 has an invalid length.
[  160.696803][T11328] 8021q: adding VLAN 0 to HW filter on device bond60
[  161.007751][T11365] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.014883][T11363] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.249185][T11384] atomic_op ffff888039b5e198 conn xmit_atomic 0000000000000000
[  161.253865][T11384] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  161.261161][T11384] bond57: (slave erspan0): Releasing active interface
[  161.264233][T11384] erspan0: left promiscuous mode
[  161.271487][T11384] veth0_to_bond: left allmulticast mode
[  161.274075][T11384] veth0_to_bond: left promiscuous mode
[  161.276738][T11384] bridge13: port 2(veth0_to_bond) entered disabled state
[  161.282545][T11384] veth13: left allmulticast mode
[  161.284801][T11384] veth13: left promiscuous mode
[  161.287149][T11384] bridge13: port 1(veth13) entered disabled state
[  161.293246][T11385] netlink: 'syz.0.1500': attribute type 13 has an invalid length.
[  161.296772][T11385] netlink: 'syz.0.1500': attribute type 17 has an invalid length.
[  161.302648][T11384] bond43: left allmulticast mode
[  161.305399][T11384] bridge16: port 1(bond43) entered disabled state
[  161.315145][T11384] bond45: (slave bridge17): Releasing active interface
[  161.320389][T11384] bond47: (slave veth15): Releasing active interface
[  161.323330][T11384] bond47: (slave veth15): the permanent HWaddr of slave - 5a:75:b9:83:92:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  161.332127][T11384] bond47: (slave gretap3): Releasing active interface
[  161.335000][T11384] gretap3: left promiscuous mode
[  161.343613][T11384] bond57: (slave veth17): Releasing active interface
[  161.350459][T11384] batadv3: left allmulticast mode
[  161.352596][T11384] batadv3: left promiscuous mode
[  161.354794][T11384] bridge0: port 1(batadv3) entered disabled state
[  161.375185][T11384] netlink: 'syz.2.1501': attribute type 10 has an invalid length.
[  161.481765][ T2255] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  161.494816][T11384] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  161.525752][T11387] wg1 speed is unknown, defaulting to 1000
[  161.531219][T11387] lo speed is unknown, defaulting to 1000
[  161.564039][T11392] vlan6: entered promiscuous mode
[  161.566211][T11392] hsr_slave_1: entered promiscuous mode
[  161.568279][T11392] vlan6: entered allmulticast mode
[  161.584814][T11391] __nla_validate_parse: 35 callbacks suppressed
[  161.584827][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'.
[  161.637908][T11396] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  161.679735][T11397] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  161.687400][T11397] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  161.754412][T11396] bond54: (slave bridge0): Enslaving as an active interface with a down link
[  161.815878][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1506'.
[  161.973332][T11426] netlink: 'syz.2.1511': attribute type 10 has an invalid length.
[  161.983328][T11424] netlink: 'syz.0.1509': attribute type 1 has an invalid length.
[  162.045409][T11426] team0: Port device 0! added
[  162.050483][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  162.054374][T11424] workqueue: Failed to create a rescuer kthread for wq "bond55": -EINTR
[  162.091218][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1512'.
[  162.134914][T11437] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1513'.
[  162.140591][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'.
[  162.155191][T11437] bond54: (slave bridge0): Releasing active interface
[  162.213847][T11445] netlink: 'syz.1.1515': attribute type 10 has an invalid length.
[  162.234416][T11445] team0: Port device dummy0 added
[  162.239317][T11445] netlink: 'syz.1.1515': attribute type 10 has an invalid length.
[  162.263438][T11445] team0: Port device dummy0 removed
[  162.381771][T11460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1519'.
[  162.386821][T11455] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1518'.
[  162.445349][T11465] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1520'.
[  162.485336][T11468] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1522'.
[  162.522182][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'.
[  163.777352][T11493] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  163.826557][T11495] 8021q: adding VLAN 0 to HW filter on device bond61
[  163.846053][T11495] geneve5: entered promiscuous mode
[  163.849053][T11495] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  163.855713][T11495] bond61: (slave macvlan0): Enslaving as a backup interface with an up link
[  163.870023][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  163.964347][T11501] 8021q: adding VLAN 0 to HW filter on device bond59
[  163.968759][T11501] bridge0: port 1(bond59) entered blocking state
[  163.975476][T11501] bridge0: port 1(bond59) entered disabled state
[  163.977666][T11501] bond59: entered allmulticast mode
[  163.982358][T11501] bond59: entered promiscuous mode
[  164.930150][ T6642] net_ratelimit: 45 callbacks suppressed
[  164.930166][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  164.950129][ T6642] bond61: (slave macvlan0): failed to get link speed/duplex
[  165.040493][ T6112] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  165.070376][ T6112] bond61: (slave macvlan0): failed to get link speed/duplex
[  165.150456][   T12] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  165.190752][   T12] bond61: (slave macvlan0): failed to get link speed/duplex
[  165.306708][ T5860] bond61: (slave macvlan0): failed to get link speed/duplex
[  165.310434][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  165.420438][ T5860] bond61: (slave macvlan0): failed to get link speed/duplex
[  165.440824][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  165.454579][T11548] block nbd0: shutting down sockets
[  165.584637][T11574] validate_nla: 1 callbacks suppressed
[  165.584653][T11574] netlink: 'syz.1.1548': attribute type 1 has an invalid length.
[  165.606077][T11569] netlink: 'syz.0.1550': attribute type 10 has an invalid length.
[  165.622865][T11574] veth19: entered promiscuous mode
[  165.864834][T11596] netlink: 'syz.1.1559': attribute type 30 has an invalid length.
[  165.981428][T11601] syzkaller0: entered promiscuous mode
[  165.994906][T11601] syzkaller0: entered allmulticast mode
[  167.370573][T11625] 8021q: adding VLAN 0 to HW filter on device bond15
[  167.387064][T11625] bond15: (slave macvlan5): Enslaving as a backup interface with a down link
[  167.416534][T11627] bridge17: entered promiscuous mode
[  167.418751][T11627] bridge17: entered allmulticast mode
[  167.478254][T11618] __nla_validate_parse: 11 callbacks suppressed
[  167.478268][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'.
[  167.486304][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1564'.
[  167.508749][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'.
[  167.534462][T11636] 8021q: adding VLAN 0 to HW filter on device bond60
[  167.542469][T11636] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1568'.
[  167.555985][T11636] macvlan6: entered promiscuous mode
[  167.558566][T11636] macvlan6: entered allmulticast mode
[  167.563939][T11636] bond60: entered promiscuous mode
[  167.566068][T11636] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  167.571635][T11636] bond60: left promiscuous mode
[  167.737227][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'.
[  167.743659][T11652] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1574'.
[  167.780844][T11655] bridge17: port 1(veth19) entered blocking state
[  167.783876][T11655] bridge17: port 1(veth19) entered disabled state
[  167.790926][T11655] veth19: entered allmulticast mode
[  167.796002][T11655] veth19: entered promiscuous mode
[  167.813464][T11655] bridge17: port 2(veth0_to_bond) entered blocking state
[  167.820846][T11655] bridge17: port 2(veth0_to_bond) entered disabled state
[  167.823902][T11655] veth0_to_bond: entered allmulticast mode
[  167.832431][T11655] veth0_to_bond: entered promiscuous mode
[  168.061637][T11681] netlink: 'syz.2.1583': attribute type 12 has an invalid length.
[  168.118113][T11673] wg1 speed is unknown, defaulting to 1000
[  168.123069][T11673] lo speed is unknown, defaulting to 1000
[  168.128167][T11683] netlink: 'syz.0.1584': attribute type 1 has an invalid length.
[  168.133561][T11683] workqueue: Failed to create a rescuer kthread for wq "bond55": -EINTR
[  168.275232][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'.
[  168.485347][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'.
[  168.519223][T11712] netlink: 'syz.1.1592': attribute type 1 has an invalid length.
[  168.544175][T11712] bond65: (slave geneve7): making interface the new active one
[  168.547960][T11712] bond65: (slave geneve7): Enslaving as an active interface with an up link
[  168.552646][ T5860] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  168.556181][ T5860] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  168.560716][ T5860] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  168.560869][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'.
[  168.563585][ T5860] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  168.574207][T11712] 8021q: adding VLAN 0 to HW filter on device bond65
[  168.578690][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1592'.
[  169.116444][T11743] netlink: 'syz.0.1597': attribute type 7 has an invalid length.
[  169.157679][T11743] 8021q: adding VLAN 0 to HW filter on device bond55
[  169.228923][T11743] bond55 (unregistering): Released all slaves
[  169.356763][T11754] netlink: 'syz.2.1599': attribute type 39 has an invalid length.
[  169.579100][T11802] netlink: 'syz.2.1602': attribute type 1 has an invalid length.
[  169.595714][T11806] netlink: 'syz.0.1603': attribute type 11 has an invalid length.
[  169.629247][T11806] 8021q: adding VLAN 0 to HW filter on device bond17
[  169.637302][T11808] bond17: option mode: unable to set because the bond device is up
[  169.700726][T11808] bond53: (slave erspan0): Releasing active interface
[  169.713166][T11808] veth0_to_bond: left allmulticast mode
[  169.715846][T11808] veth0_to_bond: left promiscuous mode
[  169.717994][T11808] bridge11: port 1(veth0_to_bond) entered disabled state
[  169.970366][ T6112] net_ratelimit: 74 callbacks suppressed
[  169.970384][ T6112] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  170.021014][ T6112] bond61: (slave macvlan0): failed to get link speed/duplex
[  170.080461][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  170.130774][ T6112] bond61: (slave macvlan0): failed to get link speed/duplex
[  170.190098][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  170.240306][ T6112] bond61: (slave macvlan0): failed to get link speed/duplex
[  170.300309][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  170.350755][ T5860] bond61: (slave macvlan0): failed to get link speed/duplex
[  170.410255][ T6112] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  170.449364][T11852] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  170.468573][T11852] bond55: entered promiscuous mode
[  170.470756][T11852] bond55: entered allmulticast mode
[  170.473035][T11852] 8021q: adding VLAN 0 to HW filter on device bond55
[  170.480386][   T13] bond61: (slave macvlan0): failed to get link speed/duplex
[  170.627371][T11861] tc_dump_action: action bad kind
[  170.655934][T11861] netlink: 'syz.0.1621': attribute type 4 has an invalid length.
[  170.659219][T11861] netlink: 'syz.0.1621': attribute type 4 has an invalid length.
[  170.671787][T11861] netlink: 'syz.0.1621': attribute type 4 has an invalid length.
[  170.815911][T11873] 8021q: adding VLAN 0 to HW filter on device bond56
[  170.819292][T11873] bridge0: port 1(bond56) entered blocking state
[  170.823206][T11873] bridge0: port 1(bond56) entered disabled state
[  170.826174][T11873] bond56: entered allmulticast mode
[  170.833203][T11873] bridge0: port 1(bond56) entered blocking state
[  170.835970][T11873] bridge0: port 1(bond56) entered forwarding state
[  170.844145][T11876] bond0: Device is already in use.
[  170.936357][T11894] netlink: 'syz.0.1629': attribute type 2 has an invalid length.
[  171.003832][T11897] netlink: 'syz.1.1627': attribute type 13 has an invalid length.
[  171.398788][T10292] bridge0: port 1(bond56) entered disabled state
[  172.044334][T11926] netlink: 'syz.1.1638': attribute type 1 has an invalid length.
[  172.046116][T11924] team0: Port device 0! removed
[  172.058200][T11924] bond59: left allmulticast mode
[  172.060610][T11924] bond59: left promiscuous mode
[  172.063583][T11924] bridge0: port 1(bond59) entered disabled state
[  172.072263][T11924] bond15: (slave macvlan5): Releasing backup interface
[  172.082989][T11924] netlink: 'syz.2.1637': attribute type 10 has an invalid length.
[  172.098419][T11926] 8021q: adding VLAN 0 to HW filter on device bond66
[  172.463026][T11950] team0: entered promiscuous mode
[  172.465049][T11950] batadv2: entered promiscuous mode
[  172.467664][T11950] debugfs: 'hsr0' already exists in 'hsr'
[  172.480797][T11950] Cannot create hsr debugfs directory
[  172.483303][T11950] hsr0: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  172.487438][T11950] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  172.492180][T11950] 8021q: adding VLAN 0 to HW filter on device hsr0
[  172.882571][T11989] __nla_validate_parse: 8 callbacks suppressed
[  172.882583][T11989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1648'.
[  172.980899][T11993] netlink: 'syz.1.1650': attribute type 2 has an invalid length.
[  173.337781][T12032] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1654'.
[  173.350909][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'.
[  173.354352][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1654'.
[  173.538623][T12038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'.
[  173.568160][T12038] bond68 (unregistering): Released all slaves
[  173.730180][T12048] wg1 speed is unknown, defaulting to 1000
[  173.733126][T12048] lo speed is unknown, defaulting to 1000
[  173.840881][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1660'.
[  174.130723][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'.
[  174.177869][T12085] netlink: 'syz.2.1672': attribute type 1 has an invalid length.
[  174.184713][T12086] netlink: 'syz.2.1672': attribute type 1 has an invalid length.
[  174.277123][T12094] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  174.311956][T12097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1676'.
[  174.371648][T12092] wg1 speed is unknown, defaulting to 1000
[  174.375021][T12092] lo speed is unknown, defaulting to 1000
[  174.431747][T12096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1674'.
[  174.478910][T12100] team0: Unable to change to the same mode the team is in
[  174.654887][T12103] wg1 speed is unknown, defaulting to 1000
[  174.658685][T12103] lo speed is unknown, defaulting to 1000
[  175.030416][   T13] net_ratelimit: 80 callbacks suppressed
[  175.030426][   T13] bond61: (slave macvlan0): failed to get link speed/duplex
[  175.037693][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  175.052679][ T5680] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.066420][ T5680] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.071090][ T5680] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.079244][ T5680] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.145138][ T5680] bond61: (slave macvlan0): failed to get link speed/duplex
[  175.204526][T12117] 8021q: adding VLAN 0 to HW filter on device bond68
[  175.226934][T12117] bond61: (slave macvlan3): Error -98 calling set_mac_address
[  175.250714][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  175.279491][T12119] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  175.291366][ T6642] bond61: (slave macvlan0): failed to get link speed/duplex
[  175.361136][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  175.383122][T12129] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  175.410261][   T12] bond61: (slave macvlan0): failed to get link speed/duplex
[  175.470092][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  175.490922][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'.
[  175.552063][T12140] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.772613][T12162] validate_nla: 7 callbacks suppressed
[  175.772627][T12162] netlink: 'syz.1.1695': attribute type 10 has an invalid length.
[  175.786747][T12162] dummy0: entered promiscuous mode
[  175.798247][T12162] team0: Port device dummy0 added
[  175.810493][T12162] netlink: 'syz.1.1695': attribute type 10 has an invalid length.
[  175.815414][T12162] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  175.829603][T12162] dummy0: left promiscuous mode
[  175.832460][T12162] team0: Failed to send options change via netlink (err -105)
[  175.836180][T12162] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  175.841270][T12162] team0: Port device dummy0 removed
[  175.906157][T12170] 8021q: adding VLAN 0 to HW filter on device bond69
[  175.925463][T12170] macvlan3: entered promiscuous mode
[  175.927314][T12170] macvlan3: entered allmulticast mode
[  175.929699][T12170] bond69: entered promiscuous mode
[  175.933860][T12170] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  175.938200][T12170] bond69: left promiscuous mode
[  175.959614][T12173] bridge22: the hash_elasticity option has been deprecated and is always 16
[  175.964962][T12173] bridge22: entered allmulticast mode
[  176.065225][T12181] pim6reg1: entered promiscuous mode
[  176.067579][T12181] pim6reg1: entered allmulticast mode
[  176.243464][T12184] netlink: 'syz.0.1703': attribute type 1 has an invalid length.
[  176.268551][T12184] 8021q: adding VLAN 0 to HW filter on device bond57
[  176.272738][T12187] netlink: 'syz.2.1704': attribute type 30 has an invalid length.
[  176.413236][T12200] wg1 speed is unknown, defaulting to 1000
[  176.418159][T12200] lo speed is unknown, defaulting to 1000
[  176.449072][T12195] tipc: Can't bind to reserved service type 0
[  176.639801][T12213] netlink: 'syz.0.1710': attribute type 1 has an invalid length.
[  176.668242][T12213] 8021q: adding VLAN 0 to HW filter on device bond58
[  177.208841][T12239] netlink: 'syz.1.1716': attribute type 1 has an invalid length.
[  177.244317][T12239] bond71: (slave bridge19): making interface the new active one
[  177.248474][T12239] bond71: (slave bridge19): Enslaving as an active interface with an up link
[  177.267521][T12243] veth0_to_team: entered promiscuous mode
[  177.464904][T12260] wg1 speed is unknown, defaulting to 1000
[  177.472352][T12260] lo speed is unknown, defaulting to 1000
[  177.503653][T12264] netlink: 'syz.0.1725': attribute type 5 has an invalid length.
[  177.686655][T12270] bond15: option mode: unable to set because the bond device is up
[  177.702549][T12270] bond15: (slave macvlan6): Enslaving as a backup interface with a down link
[  177.716559][T12270] bond15: (slave macvlan6): Releasing backup interface
[  178.059327][T12285] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  178.073426][T12286] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  178.078500][T12283] __nla_validate_parse: 12 callbacks suppressed
[  178.078509][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1733'.
[  178.165635][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1734'.
[  178.165635][T12285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1734'.
[  178.166825][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'.
[  178.181637][T12285] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1734'.
[  178.185014][T12285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1734'.
[  178.217960][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'.
[  178.271382][T12300] bridge20: port 1(veth21) entered blocking state
[  178.273770][T12300] bridge20: port 1(veth21) entered disabled state
[  178.274562][T12302] netlink: 'syz.2.1737': attribute type 13 has an invalid length.
[  178.276019][T12300] veth21: entered allmulticast mode
[  178.279465][T12302] netlink: 'syz.2.1737': attribute type 17 has an invalid length.
[  178.284747][T12300] veth21: entered promiscuous mode
[  178.293420][T12300] veth0_to_bond: left allmulticast mode
[  178.306481][T12300] veth0_to_bond: left promiscuous mode
[  178.308553][T12300] bridge17: port 2(veth0_to_bond) entered disabled state
[  178.318207][T12300] bridge20: port 2(veth0_to_bond) entered blocking state
[  178.321262][T12300] bridge20: port 2(veth0_to_bond) entered disabled state
[  178.324202][T12300] veth0_to_bond: entered allmulticast mode
[  178.328926][T12300] veth0_to_bond: entered promiscuous mode
[  178.339594][T12302] tipc: Resetting bearer <eth:gre0>
[  178.342942][T12302] tipc: Resetting bearer <eth:gre0>
[  178.345629][T12302] erspan0: left allmulticast mode
[  178.350956][T12302] tipc: Resetting bearer <ib:ip6gre0>
[  178.353291][T12302] tipc: Resetting bearer <ib:ip6gre0>
[  178.357240][T12302] 8021q: adding VLAN 0 to HW filter on device team0
[  178.383719][T11729] lo speed is unknown, defaulting to 1000
[  178.386191][T11729] syz2: Port: 1 Link ACTIVE
[  178.553476][T12323] netlink: 'syz.1.1741': attribute type 1 has an invalid length.
[  178.572336][T12323] 8021q: adding VLAN 0 to HW filter on device bond73
[  178.631784][T12328] erspan0: entered allmulticast mode
[  178.804508][T12338] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.846432][T12338] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.030749][T12338] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.041130][T12342] tipc: Enabled bearer <udp:syz2>, priority 10
[  179.123843][T12338] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.158090][T12348] wg1 speed is unknown, defaulting to 1000
[  179.176128][T12348] lo speed is unknown, defaulting to 1000
[  179.299066][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.331769][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.358198][ T5860] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.407788][ T5860] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.469523][T12358] syz.0.1751 uses old SIOCAX25GETINFO
[  179.499084][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'.
[  179.599003][T12369] can: request_module (can-proto-4) failed.
[  179.767256][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'.
[  179.779524][T12382] bond0: entered promiscuous mode
[  179.788215][T12382] bond0: left promiscuous mode
[  179.862670][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'.
[  179.909266][T12388] wg1 speed is unknown, defaulting to 1000
[  179.927341][T12384] 8021q: adding VLAN 0 to HW filter on device bond64
[  180.010240][T12384] bond64 (unregistering): Released all slaves
[  180.024129][T12388] lo speed is unknown, defaulting to 1000
[  180.121254][ T6642] net_ratelimit: 75 callbacks suppressed
[  180.121269][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  180.125945][ T6642] bond61: (slave macvlan0): failed to get link speed/duplex
[  180.160324][T11731] tipc: Node number set to 1559403842
[  180.232229][ T6112] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  180.261561][   T12] bond61: (slave macvlan0): failed to get link speed/duplex
[  180.307530][T12409] 8021q: adding VLAN 0 to HW filter on device bond64
[  180.334499][T12409] bond64: (slave veth21): Enslaving as an active interface with a down link
[  180.359049][ T6112] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  180.381143][   T12] bond61: (slave macvlan0): failed to get link speed/duplex
[  180.424699][T12409] wg1 speed is unknown, defaulting to 1000
[  180.428772][T12409] lo speed is unknown, defaulting to 1000
[  180.503248][ T6112] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  180.648386][T12419] 8021q: adding VLAN 0 to HW filter on device bond59
[  180.661900][ T6642] bond61: (slave macvlan0): failed to get link speed/duplex
[  180.676560][T12326] Bluetooth: hci0: command 0x0c20 tx timeout
[  180.679206][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  180.695339][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  180.822379][T12421] erspan0: left allmulticast mode
[  180.872618][T12421] .70: left allmulticast mode
[  180.874911][T12421] hsr_slave_0: left allmulticast mode
[  180.877439][T12421] hsr_slave_1: left allmulticast mode
[  180.887193][T12421] mac80211_hwsim hwsim20 wlan1: left allmulticast mode
[  180.903783][T12421] geneve5: left promiscuous mode
[  180.946913][T12421] ip6gretap0: left allmulticast mode
[  180.949248][T12421] macsec1: left allmulticast mode
[  180.997937][T12421] bond46: left promiscuous mode
[  181.000644][T12421] bond47: left promiscuous mode
[  181.009502][T12421] gretap2: left allmulticast mode
[  181.019399][T12421] gretap4: left promiscuous mode
[  181.029276][T12421] veth17: left promiscuous mode
[  181.034765][T12421] bond57: left promiscuous mode
[  181.039047][T12421] vlan9: left promiscuous mode
[  181.041244][T12421] bond59: left promiscuous mode
[  181.042962][T12421] vlan9: left allmulticast mode
[  181.044604][T12421] bond59: left allmulticast mode
[  181.076802][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.087825][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.094754][   T12] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.101560][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.105028][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.108481][   T12] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.117574][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.123183][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.126615][   T12] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.131225][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.134044][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.136869][   T12] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  181.150261][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  181.432450][T12449] validate_nla: 7 callbacks suppressed
[  181.432460][T12449] netlink: 'syz.1.1773': attribute type 14 has an invalid length.
[  181.444991][T12449] netlink: 'syz.1.1773': attribute type 39 has an invalid length.
[  181.659785][T12454] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.723732][T12454] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.814068][T12454] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.865493][T12454] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.931756][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.942230][ T6642] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.950430][ T6642] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.958972][ T6642] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.126125][T12465] syzkaller0: entered promiscuous mode
[  182.128287][T12465] syzkaller0: entered allmulticast mode
[  182.298203][T12476] tipc: Failed to remove unknown binding: 66,1,1/1559403842:2449822499/2449822501
[  182.302045][T12476] tipc: Failed to remove unknown binding: 66,1,1/1559403842:2449822499/2449822501
[  182.533890][T12484] netlink: 'syz.1.1783': attribute type 1 has an invalid length.
[  182.558722][T12484] bond74: (slave bridge22): making interface the new active one
[  182.562578][T12484] bond74: (slave bridge22): Enslaving as an active interface with an up link
[  182.659611][T12492] netlink: 'syz.1.1786': attribute type 12 has an invalid length.
[  183.082599][T12502] netlink: 'syz.1.1789': attribute type 10 has an invalid length.
[  183.271776][T12511] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  183.295017][T12511] bond65: entered promiscuous mode
[  183.297136][T12511] bond65: entered allmulticast mode
[  183.299250][T12511] 8021q: adding VLAN 0 to HW filter on device bond65
[  183.470787][T12524] __nla_validate_parse: 12 callbacks suppressed
[  183.470797][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'.
[  183.660229][T11731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  183.665058][T12532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.667955][T12532] IPv6: NLM_F_CREATE should be set when creating new route
[  183.670968][T12532] IPv6: NLM_F_CREATE should be set when creating new route
[  183.679671][T12532] netlink: 'syz.2.1799': attribute type 13 has an invalid length.
[  183.684793][T12532] tipc: Resetting bearer <eth:gre0>
[  183.703116][T12532] tipc: Resetting bearer <ib:ip6gre0>
[  183.969368][T12566] netlink: 'syz.0.1807': attribute type 1 has an invalid length.
[  184.005796][T12566] 8021q: adding VLAN 0 to HW filter on device bond61
[  184.006163][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1808'.
[  184.009019][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'.
[  184.019467][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'.
[  184.070582][T11731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  184.135884][T12584] vxcan1: entered allmulticast mode
[  184.196630][T12590] 8021q: adding VLAN 0 to HW filter on device team0
[  184.354929][T12605] netlink: 'syz.1.1815': attribute type 1 has an invalid length.
[  184.424167][T12609] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1815'.
[  184.427210][T12609] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1815'.
[  184.653232][T12617] tipc: Resetting bearer <eth:gre0>
[  184.657119][T12617] tipc: Resetting bearer <ib:ip6gre0>
[  184.977426][T12631] netlink: 'syz.2.1821': attribute type 7 has an invalid length.
[  184.978639][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  184.985677][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1821'.
[  184.985870][T12634] delete_channel: no stack
[  184.988986][T12630] netlink: 'syz.2.1821': attribute type 7 has an invalid length.
[  184.989387][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  184.997051][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  185.015477][T12634] bond62: entered promiscuous mode
[  185.017639][T12634] 8021q: adding VLAN 0 to HW filter on device bond62
[  185.040387][T12634] 8021q: adding VLAN 0 to HW filter on device bond62
[  185.048018][T12634] bond62: (slave vcan0): The slave device specified does not support setting the MAC address
[  185.057027][T12634] bond62: (slave vcan0): Error -95 calling set_mac_address
[  185.200551][ T6642] net_ratelimit: 38 callbacks suppressed
[  185.200566][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  185.337558][T12658] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004
[  185.345585][T12658] : renamed from hsr0
[  185.350592][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  185.407793][T12669] bond17: option mode: unable to set because the bond device is up
[  185.422100][T12671] dummy0: entered promiscuous mode
[  185.424839][T12671] team0: Port device dummy0 added
[  185.449723][T12669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  185.502257][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  185.559349][T12684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  185.561859][T12684] IPv6: NLM_F_CREATE should be set when creating new route
[  185.564630][T12684] IPv6: NLM_F_CREATE should be set when creating new route
[  185.610568][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  185.724122][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  185.769234][T12715] openvswitch: netlink: Message has 8 unknown bytes.
[  185.772413][T12710] 8021q: adding VLAN 0 to HW filter on device batadv7
[  185.773487][T12710] batadv7: entered promiscuous mode
[  185.778011][T12710] team0: Failed to send port change of device batadv7 via netlink (err -105)
[  185.787899][T12710] team0: Failed to send options change via netlink (err -105)
[  185.793445][T12710] team0: Port device batadv7 added
[  185.830169][T12437] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  186.032362][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  186.043763][T12731] hsr_slave_0: left promiscuous mode
[  186.109419][T12730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.174324][T12437] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  186.342669][T12754] siw: device registration error -23
[  186.437357][T12764] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  186.485101][T12778] validate_nla: 2 callbacks suppressed
[  186.485110][T12778] netlink: 'syz.0.1863': attribute type 3 has an invalid length.
[  186.496347][T12778] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  187.157945][T12818] netlink: 'syz.2.1876': attribute type 13 has an invalid length.
[  187.162754][T12818] netlink: 'syz.2.1876': attribute type 17 has an invalid length.
[  187.166456][T12818] tipc: Resetting bearer <eth:gre0>
[  187.187174][T12818] tipc: Resetting bearer <ib:ip6gre0>
[  187.217420][T12818] wg1 speed is unknown, defaulting to 1000
[  187.220562][T12818] lo speed is unknown, defaulting to 1000
[  187.789704][T12821] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.793374][T12821] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.927761][T12828] 8021q: adding VLAN 0 to HW filter on device bond63
[  188.082189][T12844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.179373][T12860] netlink: 'syz.0.1886': attribute type 1 has an invalid length.
[  188.248431][T12864] veth0_to_team: entered promiscuous mode
[  188.449193][T12872] syzkaller1: entered promiscuous mode
[  188.452507][T12872] syzkaller1: entered allmulticast mode
[  188.686858][T12877] netlink: 'syz.1.1893': attribute type 1 has an invalid length.
[  188.712488][T12877] 8021q: adding VLAN 0 to HW filter on device bond76
[  188.726077][T12877] bond76: (slave erspan0): making interface the new active one
[  188.730183][T12877] bond76: (slave erspan0): Enslaving as an active interface with an up link
[  189.016683][T12893] vlan0: entered promiscuous mode
[  189.067580][T12897] tipc: Resetting bearer <eth:gre0>
[  189.073645][T12897] tipc: Resetting bearer <ib:ip6gre0>
[  189.087604][T12897] bond64: (slave veth21): Releasing active interface
[  189.224489][T12916] netlink: 'syz.2.1903': attribute type 10 has an invalid length.
[  189.269635][T12920] __nla_validate_parse: 21 callbacks suppressed
[  189.269763][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'.
[  189.276810][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'.
[  189.304133][T12920] wg1 speed is unknown, defaulting to 1000
[  189.308083][T12920] lo speed is unknown, defaulting to 1000
[  189.428003][T12931] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  189.448510][T12933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1906'.
[  189.468026][T12931] 8021q: adding VLAN 0 to HW filter on device bond67
[  189.478643][T12931] erspan0: entered allmulticast mode
[  189.531647][T12946] netlink: 'syz.0.1910': attribute type 1 has an invalid length.
[  189.559469][T12946] 8021q: adding VLAN 0 to HW filter on device bond64
[  189.568974][T12946] ipvlan2: entered allmulticast mode
[  189.571559][T12946] bond64: entered allmulticast mode
[  189.579378][T12949] netlink: 'syz.2.1912': attribute type 13 has an invalid length.
[  189.581020][T12946] bond64: (slave gretap6): making interface the new active one
[  189.585119][T12946] gretap6: entered allmulticast mode
[  189.586350][T12949] netlink: 'syz.2.1912': attribute type 17 has an invalid length.
[  189.587886][T12946] bond64: (slave gretap6): Enslaving as an active interface with an up link
[  189.607026][T12949] tipc: Resetting bearer <eth:gre0>
[  189.609016][T12949] erspan0: left allmulticast mode
[  189.611916][T12949] tipc: Resetting bearer <ib:ip6gre0>
[  189.614353][T12949] 8021q: adding VLAN 0 to HW filter on device team0
[  189.683229][T12943] wg1 speed is unknown, defaulting to 1000
[  189.686289][T12943] lo speed is unknown, defaulting to 1000
[  189.695717][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'.
[  189.700956][T12949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1912'.
[  189.758184][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'.
[  189.767532][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'.
[  189.815060][T12967] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1917'.
[  190.280315][ T6642] net_ratelimit: 39 callbacks suppressed
[  190.280327][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  190.383078][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  190.390851][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  190.500878][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  190.612928][T13004] wg1 speed is unknown, defaulting to 1000
[  190.615785][T13004] lo speed is unknown, defaulting to 1000
[  190.618619][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  190.730199][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  190.844693][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  190.877142][T13017] 8021q: adding VLAN 0 to HW filter on device bond68
[  190.880454][T13017] bridge0: port 1(bond68) entered blocking state
[  190.882610][T13017] bridge0: port 1(bond68) entered disabled state
[  190.886295][T13017] bond68: entered allmulticast mode
[  190.889370][T13017] bond68: entered promiscuous mode
[  190.924240][T13021] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1930'.
[  190.928870][T13018] 8021q: adding VLAN 0 to HW filter on device bond69
[  190.934333][T13018] bridge0: port 2(bond69) entered blocking state
[  190.937308][T13018] bridge0: port 2(bond69) entered disabled state
[  190.941968][T13018] bond69: entered allmulticast mode
[  190.945738][T13018] bond69: entered promiscuous mode
[  191.030190][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  191.078758][T13032] batadv5: left allmulticast mode
[  191.082166][T13032] batadv5: left promiscuous mode
[  191.088418][T13032] bridge0: port 4(batadv5) entered disabled state
[  191.093441][T13032] bond18: left allmulticast mode
[  191.095393][T13032] bond18: left promiscuous mode
[  191.097475][T13032] bridge0: port 3(bond18) entered disabled state
[  191.106329][T13032] batadv1: left allmulticast mode
[  191.108408][T13032] batadv1: left promiscuous mode
[  191.118254][T13032] bridge0: port 2(batadv1) entered disabled state
[  191.129478][T13032] bond9: left allmulticast mode
[  191.131741][T13032] bond9: left promiscuous mode
[  191.133498][T13032] bridge0: port 1(bond9) entered disabled state
[  191.158637][T13032] vlan3 (unregistering): left allmulticast mode
[  191.160771][T13032] bridge0 (unregistering): left allmulticast mode
[  191.162989][T13032] vlan3 (unregistering): left promiscuous mode
[  191.165031][T13032] bridge0 (unregistering): left promiscuous mode
[  191.167187][T13032] bridge4: port 1(vlan3) entered disabled state
[  191.276308][T13039] bond70: (slave vxcan1): The slave device specified does not support setting the MAC address
[  191.283221][T13039] bond70: (slave vxcan1): Error -95 calling set_mac_address
[  191.298028][T13043] macvlan7: entered promiscuous mode
[  191.300415][T13043] macvlan7: entered allmulticast mode
[  191.302940][T13043] bond70: entered promiscuous mode
[  191.305034][T13043] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  191.310369][T13043] bond70: left promiscuous mode
[  191.330305][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  191.436292][T13055] wg1 speed is unknown, defaulting to 1000
[  191.439166][T13055] lo speed is unknown, defaulting to 1000
[  191.441190][T12437] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  191.550506][ T5860] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  191.591372][T13081] validate_nla: 3 callbacks suppressed
[  191.591381][T13081] netlink: 'syz.1.1946': attribute type 1 has an invalid length.
[  191.618987][T13087] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  191.745925][T13107] netlink: 'syz.1.1952': attribute type 29 has an invalid length.
[  191.754165][T13107] netlink: 'syz.1.1952': attribute type 29 has an invalid length.
[  191.769614][T13110] netlink: 'syz.0.1953': attribute type 1 has an invalid length.
[  191.787808][T13110] 8021q: adding VLAN 0 to HW filter on device bond65
[  191.815416][T13107] 8021q: adding VLAN 0 to HW filter on device bond78
[  191.832489][T13118] netlink: 'syz.0.1954': attribute type 1 has an invalid length.
[  191.847032][T13118] bond66: entered promiscuous mode
[  191.849049][T13118] 8021q: adding VLAN 0 to HW filter on device bond66
[  191.875214][T13118] 8021q: adding VLAN 0 to HW filter on device bond67
[  191.882649][T13118] bond66: (slave bond67): making interface the new active one
[  191.885412][T13118] bond67: entered promiscuous mode
[  191.888318][T13118] bond66: (slave bond67): Enslaving as an active interface with an up link
[  191.895400][T13123] netlink: 'syz.1.1952': attribute type 29 has an invalid length.
[  191.934723][T13129] netlink: 'syz.1.1955': attribute type 1 has an invalid length.
[  191.953397][T13129] 8021q: adding VLAN 0 to HW filter on device bond79
[  191.965058][T13129] erspan0: entered allmulticast mode
[  191.967449][T13129] bond76: (slave erspan0): Releasing active interface
[  191.979111][T13129] bond79: (slave erspan0): making interface the new active one
[  191.982453][T13129] bond79: (slave erspan0): Enslaving as an active interface with an up link
[  192.045307][T13138] 8021q: adding VLAN 0 to HW filter on device bond80
[  192.049170][T13138] bond80: entered promiscuous mode
[  192.054694][T13138] team0: Port device bond80 added
[  192.095092][T13143] 8021q: adding VLAN 0 to HW filter on device batadv8
[  192.099713][T13143] batadv8: entered promiscuous mode
[  192.105202][T13143] team0: Port device batadv8 added
[  192.384380][T13183] netlink: 'syz.0.1966': attribute type 1 has an invalid length.
[  192.423532][T13183] 8021q: adding VLAN 0 to HW filter on device bond68
[  192.524627][T13193] veth0: entered promiscuous mode
[  192.533524][T13189] netlink: 'syz.1.1968': attribute type 10 has an invalid length.
[  192.543135][T13193] veth0 (unregistering): left promiscuous mode
[  192.571602][T13189] team0: Port device dummy0 removed
[  192.705244][T13214] bond81: entered promiscuous mode
[  192.707269][T13214] bond81: entered allmulticast mode
[  192.709648][T13214] 8021q: adding VLAN 0 to HW filter on device bond81
[  192.781391][T13214] bond81 (unregistering): Released all slaves
[  192.885943][T13218] netlink: 'syz.1.1978': attribute type 10 has an invalid length.
[  193.170644][T13248] veth0: entered promiscuous mode
[  193.175152][T13248] veth0 (unregistering): left promiscuous mode
[  193.189612][T13248] bond33: (slave veth1): Releasing active interface
[  193.194396][T13248] vlan7 (unregistering): left allmulticast mode
[  193.196586][T13248] veth1 (unregistering): left allmulticast mode
[  193.198776][T13248] vlan7 (unregistering): left promiscuous mode
[  193.204828][T13248] veth1 (unregistering): left promiscuous mode
[  193.207097][T13248] bridge11: port 3(vlan7) entered disabled state
[  193.273749][T13250] 8021q: adding VLAN 0 to HW filter on device bond69
[  193.301151][T13253] dummy0: left promiscuous mode
[  193.306444][T13253] dummy0: entered promiscuous mode
[  193.309071][T13253] team0: Port device dummy0 added
[  193.316631][T13253] dummy0: left promiscuous mode
[  193.319685][T13253] team0: Port device dummy0 removed
[  193.608551][T13277] pim6reg: entered allmulticast mode
[  193.616360][T13277] pim6reg: left allmulticast mode
[  193.653656][T13279] 8021q: adding VLAN 0 to HW filter on device bond72
[  193.717371][T13282] 8021q: adding VLAN 0 to HW filter on device bond73
[  193.725475][T13282] bridge0: port 3(bond73) entered blocking state
[  193.732644][T13282] bridge0: port 3(bond73) entered disabled state
[  193.735257][T13282] bond73: entered allmulticast mode
[  193.738319][T13282] bond73: entered promiscuous mode
[  193.763961][T13285] delete_channel: no stack
[  193.811529][T13287] bond0: entered promiscuous mode
[  193.813546][T13287] geneve5: entered promiscuous mode
[  193.815938][T13287] bond0: left promiscuous mode
[  193.817645][T13287] geneve5: left promiscuous mode
[  193.833885][T13288] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  193.862722][T13289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.475478][T13313] wg1 speed is unknown, defaulting to 1000
[  194.478488][T13313] lo speed is unknown, defaulting to 1000
[  194.507417][T13314] __nla_validate_parse: 29 callbacks suppressed
[  194.507426][T13314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2007'.
[  195.083090][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'.
[  195.112559][T13349] 8021q: adding VLAN 0 to HW filter on device bond75
[  195.130685][T13349] macvlan7: entered promiscuous mode
[  195.133477][T13349] macvlan7: entered allmulticast mode
[  195.136943][T13349] bond75: entered promiscuous mode
[  195.140075][T13349] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  195.145851][T13349] bond75: left promiscuous mode
[  195.273772][T13358] wg1 speed is unknown, defaulting to 1000
[  195.276439][T13358] lo speed is unknown, defaulting to 1000
[  195.297049][T13357] wg1 speed is unknown, defaulting to 1000
[  195.299296][T13354] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2017'.
[  195.307356][T13357] lo speed is unknown, defaulting to 1000
[  195.409352][T13365] net_ratelimit: 30 callbacks suppressed
[  195.409361][T13365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.540127][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  195.650144][T12437] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  195.767145][T13368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2020'.
[  195.775908][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  195.828436][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'.
[  195.832030][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'.
[  195.870075][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  195.890002][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  196.006174][T13391] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2028'.
[  196.014023][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  196.119978][T12437] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  196.230152][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  196.324967][T13403] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2032'.
[  196.365562][T13403] bond76: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  196.376594][T13403] 8021q: adding VLAN 0 to HW filter on device bond76
[  196.381340][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  196.383224][   T13] bond76: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  196.443474][T13419] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  196.447015][T13419] CPU: 1 UID: 0 PID: 13419 Comm: syz.2.2035 Not tainted syzkaller #0 PREEMPT(full) 
[  196.447031][T13419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.447038][T13419] Call Trace:
[  196.447044][T13419]  <TASK>
[  196.447049][T13419]  dump_stack_lvl+0x189/0x250
[  196.447071][T13419]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.447085][T13419]  ? __pfx__printk+0x10/0x10
[  196.447106][T13419]  ? kernfs_path_from_node+0x2f/0x290
[  196.447120][T13419]  ? kernfs_path_from_node+0x250/0x290
[  196.447131][T13419]  ? kernfs_path_from_node+0x2f/0x290
[  196.447157][T13419]  sysfs_warn_dup+0x8e/0xa0
[  196.447170][T13419]  sysfs_do_create_link_sd+0xc0/0x110
[  196.447185][T13419]  device_add_class_symlinks+0x1cf/0x240
[  196.447202][T13419]  device_add+0x475/0xb50
[  196.447218][T13419]  wiphy_register+0x1ba6/0x28d0
[  196.447245][T13419]  ? __pfx_wiphy_register+0x10/0x10
[  196.447257][T13419]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  196.447279][T13419]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  196.447298][T13419]  ieee80211_register_hw+0x3484/0x4100
[  196.447326][T13419]  ? ieee80211_register_hw+0x1401/0x4100
[  196.447349][T13419]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  196.447367][T13419]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  196.447385][T13419]  ? __hrtimer_setup+0x187/0x210
[  196.447396][T13419]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  196.447416][T13419]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  196.447456][T13419]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  196.447471][T13419]  ? trace_kmalloc+0x1f/0xd0
[  196.447484][T13419]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  196.447499][T13419]  ? kstrndup+0xbf/0x160
[  196.447520][T13419]  hwsim_new_radio_nl+0xea4/0x1b10
[  196.447538][T13419]  ? __pfx___nla_validate_parse+0x10/0x10
[  196.447565][T13419]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  196.447590][T13419]  ? __nla_parse+0x40/0x60
[  196.447604][T13419]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  196.447627][T13419]  genl_family_rcv_msg_doit+0x215/0x300
[  196.447648][T13419]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  196.447674][T13419]  ? bpf_lsm_capable+0x9/0x20
[  196.447690][T13419]  ? security_capable+0x7e/0x2e0
[  196.447738][T13419]  genl_rcv_msg+0x60e/0x790
[  196.447760][T13419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  196.447774][T13419]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  196.447802][T13419]  netlink_rcv_skb+0x208/0x470
[  196.447813][T13419]  ? __lock_acquire+0xab9/0xd20
[  196.447831][T13419]  ? __pfx_genl_rcv_msg+0x10/0x10
[  196.447848][T13419]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  196.447876][T13419]  ? down_read+0x1ad/0x2e0
[  196.447894][T13419]  genl_rcv+0x28/0x40
[  196.447908][T13419]  netlink_unicast+0x82f/0x9e0
[  196.447933][T13419]  ? __pfx_netlink_unicast+0x10/0x10
[  196.447952][T13419]  ? netlink_sendmsg+0x642/0xb30
[  196.447963][T13419]  ? skb_put+0x11b/0x210
[  196.447979][T13419]  netlink_sendmsg+0x805/0xb30
[  196.447999][T13419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.448015][T13419]  ? aa_sock_msg_perm+0xf1/0x1d0
[  196.448029][T13419]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  196.448041][T13419]  ? __pfx_netlink_sendmsg+0x10/0x10
[  196.448055][T13419]  __sock_sendmsg+0x21c/0x270
[  196.448076][T13419]  ____sys_sendmsg+0x505/0x830
[  196.448095][T13419]  ? __pfx_____sys_sendmsg+0x10/0x10
[  196.448117][T13419]  ? import_iovec+0x74/0xa0
[  196.448134][T13419]  ___sys_sendmsg+0x21f/0x2a0
[  196.448157][T13419]  ? __pfx____sys_sendmsg+0x10/0x10
[  196.448201][T13419]  ? __fget_files+0x2a/0x420
[  196.448212][T13419]  ? __fget_files+0x3a0/0x420
[  196.448230][T13419]  __x64_sys_sendmsg+0x19b/0x260
[  196.448248][T13419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  196.448271][T13419]  ? rcu_is_watching+0x15/0xb0
[  196.448287][T13419]  ? do_syscall_64+0xbe/0x3b0
[  196.448305][T13419]  do_syscall_64+0xfa/0x3b0
[  196.448317][T13419]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.448329][T13419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.448341][T13419]  ? exc_page_fault+0x9f/0xf0
[  196.448355][T13419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.448366][T13419] RIP: 0033:0x7f2cf718eba9
[  196.448378][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.448387][T13419] RSP: 002b:00007f2cf803d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  196.448400][T13419] RAX: ffffffffffffffda RBX: 00007f2cf73d5fa0 RCX: 00007f2cf718eba9
[  196.448408][T13419] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  196.448415][T13419] RBP: 00007f2cf7211e19 R08: 0000000000000000 R09: 0000000000000000
[  196.448423][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.448430][T13419] R13: 00007f2cf73d6038 R14: 00007f2cf73d5fa0 R15: 00007ffdf85514c8
[  196.448451][T13419]  </TASK>
[  196.718166][T13428] validate_nla: 9 callbacks suppressed
[  196.718180][T13428] netlink: 'syz.2.2037': attribute type 1 has an invalid length.
[  196.823650][T13437] netlink: 'syz.1.2040': attribute type 13 has an invalid length.
[  196.827817][T13437] netlink: 'syz.1.2040': attribute type 17 has an invalid length.
[  196.849412][T13437] erspan0: left allmulticast mode
[  196.858049][T13437] ip6gretap0: left promiscuous mode
[  196.925669][T13446] bond61: (slave macvlan0): Removing an active aggregator
[  196.929310][T13446] bond61: (slave macvlan0): Releasing backup interface
[  197.031739][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2044'.
[  197.031743][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2044'.
[  197.071420][T13454] netlink: 'syz.0.2045': attribute type 1 has an invalid length.
[  197.086924][T13454] 8021q: adding VLAN 0 to HW filter on device bond71
[  197.098424][T13454] erspan0: entered allmulticast mode
[  197.308627][T13460] 8021q: adding VLAN 0 to HW filter on device bond72
[  197.314904][T13460] bridge0: port 2(bond72) entered blocking state
[  197.317388][T13460] bridge0: port 2(bond72) entered disabled state
[  197.323982][T13460] bond72: entered allmulticast mode
[  197.327074][T13460] bond72: entered promiscuous mode
[  197.328999][T13460] bond56: entered promiscuous mode
[  197.334209][T13460] bridge0: port 2(bond72) entered blocking state
[  197.337109][T13460] bridge0: port 2(bond72) entered forwarding state
[  197.358097][T11779] bridge0: port 2(bond72) entered disabled state
[  198.143836][T13496] netlink: 'syz.2.2056': attribute type 13 has an invalid length.
[  198.148533][T13496] netlink: 'syz.2.2056': attribute type 17 has an invalid length.
[  198.152890][T13496] tipc: Resetting bearer <eth:gre0>
[  198.155345][T13496] tipc: Resetting bearer <ib:ip6gre0>
[  198.241139][T13509] netlink: 'syz.0.2061': attribute type 30 has an invalid length.
[  198.396520][T13514] netlink: 'syz.0.2062': attribute type 1 has an invalid length.
[  198.399811][T13514] netlink: 'syz.0.2062': attribute type 6 has an invalid length.
[  198.405430][T13514] netlink: 'syz.0.2062': attribute type 3 has an invalid length.
[  198.451314][T13520] 8021q: adding VLAN 0 to HW filter on device bond73
[  198.464986][T13520] bond73: (slave veth15): Enslaving as an active interface with a down link
[  198.475869][T13520] macvlan5: entered promiscuous mode
[  198.477708][T13520] macvlan5: entered allmulticast mode
[  198.480304][T13520] bond73: entered promiscuous mode
[  198.482589][T13520] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  198.485338][T13520] bond73: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  198.491798][T13520] bond73: left promiscuous mode
[  198.569701][T13523] erspan0: left allmulticast mode
[  198.867924][T13539] wg1 speed is unknown, defaulting to 1000
[  198.874373][T13539] lo speed is unknown, defaulting to 1000
[  198.983001][T13543] wg1 speed is unknown, defaulting to 1000
[  198.994914][T13543] lo speed is unknown, defaulting to 1000
[  199.698024][T13575] __nla_validate_parse: 18 callbacks suppressed
[  199.698035][T13575] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2077'.
[  199.935175][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'.
[  199.953003][T13585] syz_tun (unregistering): left allmulticast mode
[  199.964485][T13585] team0: Port device macvlan3 removed
[  200.152510][T13588] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20003
[  200.462230][T13597] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  200.500319][ T5680] net_ratelimit: 36 callbacks suppressed
[  200.500334][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  200.538771][T13604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'.
[  200.670810][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  200.700139][T13610] nbd1: detected capacity change from 0 to 63
[  200.721683][T13610] bond78: entered promiscuous mode
[  200.723532][T13610] bond78: entered allmulticast mode
[  200.725610][T13610] 8021q: adding VLAN 0 to HW filter on device bond78
[  200.732946][   T56] block nbd1: Receive control failed (result -32)
[  200.795002][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  200.855280][T13617] vxcan3: entered allmulticast mode
[  200.900866][ T6642] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  200.983364][T13634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2094'.
[  201.011163][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  201.020774][T13634] wg1 speed is unknown, defaulting to 1000
[  201.023561][T13634] lo speed is unknown, defaulting to 1000
[  201.062860][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'.
[  201.180610][   T13] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  201.275166][T13649] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2098'.
[  201.314650][T13646] 8021q: adding VLAN 0 to HW filter on device bond82
[  201.333954][T13646] bond79: (slave erspan0): Releasing active interface
[  201.352993][T13646] bond82: (slave erspan0): making interface the new active one
[  201.356417][T13646] bond82: (slave erspan0): Enslaving as an active interface with an up link
[  201.406813][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'.
[  201.411817][ T5680] bond32: (slave ip6gretap5): failed to get link speed/duplex
[  201.422037][T13660] team0: Port device geneve0 removed
[  201.425541][T13660] team0: Port device bond4 removed
[  201.428523][T13660] bond5: (slave gretap2): Releasing active interface
[  201.434391][T13660] bond7: (slave ip6gretap2): Releasing active interface
[  201.437250][T13660] bond7: (slave ip6gretap2): the permanent HWaddr of slave - a6:f9:f4:b0:b8:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  201.446249][T13660] bond7: (slave veth5): Releasing active interface
[  201.450202][T13660] team0: Port device batadv2 removed
[  201.452978][T13660] bond11: (slave veth9): Releasing active interface
[  201.455182][T13660] bond11: (slave veth9): the permanent HWaddr of slave - 76:78:d1:a5:81:98 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  201.470816][T13660] bond11: (slave gretap4): Releasing active interface
[  201.477431][T13660] bond18: (slave bridge5): Releasing active interface
[  201.491219][T13660] bond20: (slave wireguard0): Releasing backup interface
[  201.495278][T13660] wireguard0: left promiscuous mode
[  201.498475][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'.
[  201.505803][T13660] team0: Port device bond23 removed
[  201.509326][T13660] veth11: left allmulticast mode
[  201.511791][T13660] veth11: left promiscuous mode
[  201.514206][T13660] bridge8: port 1(veth11) entered disabled state
[  201.519531][T13660] vlan6: left promiscuous mode
[  201.523137][T13660] veth1: left promiscuous mode
[  201.525692][T13660] bridge8: port 3(vlan6) entered disabled state
[  201.534002][T13660] bond32: (slave ip6gretap5): Removing an active aggregator
[  201.539741][T13660] bond32: (slave ip6gretap5): Releasing backup interface
[  201.543857][T13660] bond32: (slave ip6gretap5): the permanent HWaddr of slave - d6:95:56:35:f4:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  201.558389][T13660] bond32: (slave veth13): Releasing backup interface
[  201.567047][T13660] bond33: (slave wireguard1): Releasing backup interface
[  201.571822][T13660] wireguard1: left promiscuous mode
[  201.578385][T13660] bond37: (slave gretap5): Releasing active interface
[  201.585130][T13660] bond38: (slave bridge9): Releasing active interface
[  201.593220][T13660] bond40: (slave wireguard2): Releasing backup interface
[  201.595717][T13660] wireguard2: left promiscuous mode
[  201.597878][T13660] bond40: (slave wireguard3): making interface the new active one
[  201.602545][T13660] wireguard3: entered promiscuous mode
[  201.608362][T13660] bond40: (slave wireguard3): Releasing backup interface
[  201.611821][T11729] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  201.617982][T13660] wireguard3: left promiscuous mode
[  201.625264][T13660] bond47: (slave wireguard4): Releasing backup interface
[  201.627870][T13660] wireguard4: left promiscuous mode
[  201.637183][T13660] bond56: left allmulticast mode
[  201.639128][T13660] bond56: left promiscuous mode
[  201.641578][T13660] bridge0: port 1(bond56) entered disabled state
[  201.645032][T13660] bond72: left promiscuous mode
[  201.652529][T13660] bond64: (slave gretap6): Releasing active interface
[  201.655620][T13660] gretap6: left allmulticast mode
[  201.664230][T13660] bond66: (slave bond67): Releasing backup interface
[  201.667196][T13660] bond67: left promiscuous mode
[  201.676933][T13660] bond72: left allmulticast mode
[  201.679209][T13660] bridge0: port 2(bond72) entered disabled state
[  201.687131][T13660] bond73: (slave veth15): Releasing active interface
[  201.702460][T13657] bond73: left allmulticast mode
[  201.707899][T13657] bond73: left promiscuous mode
[  201.712691][T13657] bridge0: port 3(bond73) entered disabled state
[  201.717840][T13657] bond69: left allmulticast mode
[  201.720713][T13657] bond69: left promiscuous mode
[  201.722649][T13657] bridge0: port 2(bond69) entered disabled state
[  201.726108][T13657] bond68: left allmulticast mode
[  201.728183][T13657] bond68: left promiscuous mode
[  201.731224][T13657] bridge0: port 1(bond68) entered disabled state
[  202.032351][T11728] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  202.084522][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2105'.
[  202.734501][T13710] sctp: [Deprecated]: syz.2.2114 (pid 13710) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.734501][T13710] Use struct sctp_sack_info instead
[  202.966317][T13732] validate_nla: 5 callbacks suppressed
[  202.966331][T13732] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  202.993722][T13732] 8021q: adding VLAN 0 to HW filter on device bond17
[  202.997094][T13732] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  203.004187][T13732] bond17: (slave vcan0): Error -95 calling set_mac_address
[  203.045053][T13736] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  203.055634][T13736] bond17: (slave vcan0): Error -95 calling set_mac_address
[  203.104314][T13732] 8021q: adding VLAN 0 to HW filter on device bond17
[  203.117166][T13732] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2121'.
[  203.219373][T13756] syzkaller1: entered promiscuous mode
[  203.225992][T13756] syzkaller1: entered allmulticast mode
[  203.328110][T13760] wg1 speed is unknown, defaulting to 1000
[  203.331913][T13760] lo speed is unknown, defaulting to 1000
[  204.267632][T13781] netlink: 'syz.1.2133': attribute type 13 has an invalid length.
[  204.271624][T13781] netlink: 'syz.1.2133': attribute type 17 has an invalid length.
[  204.291627][T13781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.353008][T13781] wg1 speed is unknown, defaulting to 1000
[  204.359768][T13781] lo speed is unknown, defaulting to 1000
[  204.739445][T13807] __nla_validate_parse: 8 callbacks suppressed
[  204.739459][T13807] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2141'.
[  204.764834][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'.
[  204.773300][T13807] netlink: 'syz.2.2141': attribute type 1 has an invalid length.
[  204.828109][T13810] netlink: 'syz.0.2142': attribute type 1 has an invalid length.
[  204.836242][T13810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2142'.
[  204.859298][T13815] netlink: 'syz.2.2143': attribute type 83 has an invalid length.
[  204.889415][T13815] netlink: 'syz.2.2143': attribute type 10 has an invalid length.
[  204.899456][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'.
[  204.907067][T13815] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2143'.
[  204.912498][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'.
[  204.915893][T13815] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2143'.
[  205.146297][T13827] netlink: 'syz.0.2148': attribute type 1 has an invalid length.
[  205.218760][T13831] netlink: 'syz.1.2149': attribute type 10 has an invalid length.
[  205.256650][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2150'.
[  205.261075][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'.
[  205.428929][T13836] bond0 (unregistering): Released all slaves
[  205.582832][T13856] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2156'.
[  205.654069][T13862] netlink: 'syz.1.2157': attribute type 5 has an invalid length.
[  205.668371][T13861] wg1 speed is unknown, defaulting to 1000
[  205.671234][T13861] lo speed is unknown, defaulting to 1000
[  205.818834][T13870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.018714][T13885] debugfs: 'netdev:nicvf0' already exists in 'phy6'
[  206.053097][T13891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.056634][T13891] syzkaller0: entered promiscuous mode
[  206.059084][T13891] syzkaller0: entered allmulticast mode
[  206.076931][T13891] tipc: Resetting bearer <eth:syzkaller0>
[  206.086407][T13890] tipc: Resetting bearer <eth:syzkaller0>
[  206.115220][T13890] tipc: Disabling bearer <eth:syzkaller0>
[  206.132155][T13893] pimreg: entered allmulticast mode
[  206.474347][T13924] syzkaller1: entered promiscuous mode
[  206.476673][T13924] syzkaller1: entered allmulticast mode
[  207.039504][T13930] 8021q: adding VLAN 0 to HW filter on device bond74
[  207.384073][T13947] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.509504][T13955] bond79: (slave vxcan3): The slave device specified does not support setting the MAC address
[  207.515595][T13955] bond79: (slave vxcan3): Error -95 calling set_mac_address
[  207.663400][T13953] wg1 speed is unknown, defaulting to 1000
[  207.667464][T13953] lo speed is unknown, defaulting to 1000
[  208.003261][T13970] wg1 speed is unknown, defaulting to 1000
[  208.025469][T13970] lo speed is unknown, defaulting to 1000
[  208.093118][T13976] wg1 speed is unknown, defaulting to 1000
[  208.121345][T13976] lo speed is unknown, defaulting to 1000
[  208.431582][T13997] validate_nla: 7 callbacks suppressed
[  208.431591][T13997] netlink: 'syz.2.2195': attribute type 1 has an invalid length.
[  208.550769][T14005] netlink: 'syz.2.2196': attribute type 13 has an invalid length.
[  208.553310][T14005] netlink: 'syz.2.2196': attribute type 17 has an invalid length.
[  208.558450][T14005] tipc: Resetting bearer <eth:gre0>
[  208.565168][T14005] tipc: Resetting bearer <ib:ip6gre0>
[  208.578383][T14005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.864041][T14020] netlink: 'syz.0.2201': attribute type 10 has an invalid length.
[  208.928391][T14022] bridge0: port 1(veth1) entered blocking state
[  208.933024][T14022] bridge0: port 1(veth1) entered disabled state
[  208.935427][T14022] veth1: entered allmulticast mode
[  208.938808][T14022] veth1: entered promiscuous mode
[  208.984704][T14027] netlink: 'syz.2.2204': attribute type 1 has an invalid length.
[  209.108609][T14035] netlink: 'syz.2.2205': attribute type 1 has an invalid length.
[  209.158064][T14035] 8021q: adding VLAN 0 to HW filter on device bond82
[  209.685952][T14061] netlink: 'syz.1.2212': attribute type 1 has an invalid length.
[  209.721364][T14061] 8021q: adding VLAN 0 to HW filter on device bond83
[  209.727734][T14061] veth0: entered promiscuous mode
[  209.729534][T14061] veth0: entered allmulticast mode
[  209.737410][T14061] veth1: entered promiscuous mode
[  209.774318][T14064] wg1 speed is unknown, defaulting to 1000
[  209.777129][T14064] lo speed is unknown, defaulting to 1000
[  209.818282][T14064] netlink: 'syz.1.2213': attribute type 10 has an invalid length.
[  209.822043][T14064] netlink: 'syz.1.2213': attribute type 10 has an invalid length.
[  209.825635][T14064] __nla_validate_parse: 32 callbacks suppressed
[  209.825642][T14064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2213'.
[  209.832443][T14064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2213'.
[  209.851477][T14067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.872894][ T5877] lo speed is unknown, defaulting to 1000
[  209.875230][ T5877] syz2: Port: 1 Link DOWN
[  209.878617][T14067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.009582][T14074] netlink: 'syz.2.2216': attribute type 1 has an invalid length.
[  210.054829][T14074] 8021q: adding VLAN 0 to HW filter on device bond83
[  210.072152][T14080] 8021q: adding VLAN 0 to HW filter on device bond75
[  210.075588][T14077] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  210.111907][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'.
[  210.115995][T14074] veth23: entered promiscuous mode
[  210.119635][T14074] bond83: (slave veth23): Enslaving as an active interface with a down link
[  210.128436][T14083] team0: Device ipip1 is up. Set it down before adding it as a team port
[  210.144373][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2218'.
[  210.149454][T14074] erspan0: entered allmulticast mode
[  210.155029][T14074] bond83: (slave erspan0): making interface the new active one
[  210.158320][T14074] erspan0: entered promiscuous mode
[  210.163805][T14074] bond83: (slave erspan0): Enslaving as an active interface with an up link
[  210.218646][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'.
[  210.223581][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'.
[  210.275975][T14083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.284433][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'.
[  210.288034][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'.
[  210.308094][T14083] xfrm0: entered promiscuous mode
[  210.310900][T14083] xfrm0: entered allmulticast mode
[  210.361689][T14083] wg1 speed is unknown, defaulting to 1000
[  210.368949][T14083] lo speed is unknown, defaulting to 1000
[  210.505360][T14095] sctp: [Deprecated]: syz.0.2224 (pid 14095) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.505360][T14095] Use struct sctp_sack_info instead
[  210.604353][T14099] ip6gretap0: entered promiscuous mode
[  210.606611][T14099] macsec0: entered promiscuous mode
[  210.608889][T14099] macsec0: entered allmulticast mode
[  210.611560][T14099] ip6gretap0: entered allmulticast mode
[  210.712135][T14102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'.
[  211.125393][T14118] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2231'.
[  211.137631][T14119] gretap0: entered promiscuous mode
[  211.252560][T14126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  211.525418][T14140] bond15: option mode: unable to set because the bond device is up
[  211.545183][T14140] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  211.551128][T14140] bond15: (slave macvlan2): Enslaving as a backup interface with a down link
[  211.557084][T14140] tipc: Resetting bearer <eth:gre0>
[  211.567678][T14140] bond83: (slave erspan0): Releasing active interface
[  211.574433][T14140] erspan0: left promiscuous mode
[  211.580392][T14140] tipc: Resetting bearer <ib:ip6gre0>
[  211.586986][T14140] bond76: (slave ip6gretap2): Removing an active aggregator
[  211.593156][T14140] bond76: (slave ip6gretap2): Releasing backup interface
[  211.599123][T14140] veth1: left allmulticast mode
[  211.601414][T14140] veth1: left promiscuous mode
[  211.603499][T14140] bridge0: port 1(veth1) entered disabled state
[  211.608026][T14140] bond83: (slave veth23): Releasing active interface
[  211.615740][T14140] bond15: (slave macvlan2): Releasing backup interface
[  211.845409][T14157] sctp: [Deprecated]: syz.2.2242 (pid 14157) Use of int in max_burst socket option deprecated.
[  211.845409][T14157] Use struct sctp_assoc_value instead
[  212.291944][T14200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  212.342093][T14207] dvmrp8: entered allmulticast mode
[  212.372912][T14207] wg1 speed is unknown, defaulting to 1000
[  212.376269][T14207] lo speed is unknown, defaulting to 1000
[  212.498977][T14210] bond84: (slave vxcan3): The slave device specified does not support setting the MAC address
[  212.505716][T14210] bond84: (slave vxcan3): Error -95 calling set_mac_address
[  212.554405][T14219] macvlan5: entered promiscuous mode
[  212.566616][T14219] macvlan5: entered allmulticast mode
[  212.572804][T14219] bond84: (slave macvlan5): Error -98 calling set_mac_address
[  212.668710][T14208] veth0_to_team: left promiscuous mode
[  212.672173][T14208] xfrm0: left promiscuous mode
[  212.673886][T14208] xfrm0: left allmulticast mode
[  212.679500][T14208] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  212.685957][T14205] dvmrp8: left allmulticast mode
[  212.822290][T14232] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode
[  212.826748][T14232] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode
[  213.603032][T14241] validate_nla: 7 callbacks suppressed
[  213.603044][T14241] netlink: 'syz.2.2265': attribute type 1 has an invalid length.
[  213.608275][T14239] netlink: 'syz.0.2264': attribute type 1 has an invalid length.
[  213.626659][T14241] 8021q: adding VLAN 0 to HW filter on device bond85
[  213.687963][T14244] netlink: 'syz.1.2266': attribute type 1 has an invalid length.
[  213.742299][T14244] 8021q: adding VLAN 0 to HW filter on device bond85
[  213.783517][T14244] veth23: entered promiscuous mode
[  213.788653][T14244] bond85: (slave veth23): Enslaving as a backup interface with a down link
[  213.825800][T14251] bond82: (slave erspan0): Releasing active interface
[  213.838215][T14251] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  214.057374][T14270] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  214.080371][T14270] netlink: 'syz.0.2272': attribute type 1 has an invalid length.
[  214.086100][T14271] netlink: 'syz.0.2272': attribute type 1 has an invalid length.
[  214.106160][T14275] bridge26: port 1(wlan0) entered blocking state
[  214.108744][T14275] bridge26: port 1(wlan0) entered disabled state
[  214.113376][T14275] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  214.117005][T14275] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  214.144128][T14271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  214.146766][T14271] IPv6: NLM_F_CREATE should be set when creating new route
[  214.149310][T14271] IPv6: NLM_F_CREATE should be set when creating new route
[  214.167669][T14271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  214.304211][T14297] IPv6: sit5: Disabled Multicast RS
[  214.307275][T14297] sit5: entered allmulticast mode
[  214.463418][T14311] netlink: 'syz.0.2283': attribute type 13 has an invalid length.
[  214.471178][T14311] netlink: 'syz.0.2283': attribute type 17 has an invalid length.
[  214.517789][T14311] 8021q: adding VLAN 0 to HW filter on device team0
[  214.525537][T14311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.618810][T14324] netlink: 'syz.2.2287': attribute type 1 has an invalid length.
[  214.641515][T14324] bond87: entered promiscuous mode
[  214.643611][T14324] 8021q: adding VLAN 0 to HW filter on device bond87
[  214.727378][T14337] wg1 speed is unknown, defaulting to 1000
[  214.745773][T14337] lo speed is unknown, defaulting to 1000
[  215.327257][T14360] __nla_validate_parse: 53 callbacks suppressed
[  215.327266][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'.
[  215.665895][T14371] netlink: 5136 bytes leftover after parsing attributes in process `syz.2.2302'.
[  215.679942][T14371] openvswitch: netlink: Flow key attr not present in new flow.
[  215.717259][T14373] openvswitch: netlink: IPv4 tunnel dst address is zero
[  215.784594][T14375] wg1 speed is unknown, defaulting to 1000
[  215.814948][T14375] lo speed is unknown, defaulting to 1000
[  215.846597][T14377] netlink: 'syz.0.2303': attribute type 9 has an invalid length.
[  215.887542][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'.
[  215.930776][T14382] netlink: 'syz.1.2306': attribute type 13 has an invalid length.
[  216.079636][T14392] wg1 speed is unknown, defaulting to 1000
[  216.084126][T14392] lo speed is unknown, defaulting to 1000
[  216.326632][T14411] siw: device registration error -23
[  216.347166][T14410] 8021q: adding VLAN 0 to HW filter on device bond78
[  216.353355][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'.
[  216.385666][T14410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2311'.
[  216.472678][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'.
[  216.472686][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'.
[  216.476731][T14414] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116)
[  216.493875][T14415] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116)
[  216.936296][T14440] dvmrp8: entered allmulticast mode
[  216.966281][T14440] wg1 speed is unknown, defaulting to 1000
[  216.970727][T14440] lo speed is unknown, defaulting to 1000
[  217.032544][T14439] dvmrp8: left allmulticast mode
[  217.186223][T14444] wg1 speed is unknown, defaulting to 1000
[  217.192515][T14444] lo speed is unknown, defaulting to 1000
[  217.258501][T14448] wg1 speed is unknown, defaulting to 1000
[  217.273887][T14448] lo speed is unknown, defaulting to 1000
[  217.494129][T14453] 8021q: adding VLAN 0 to HW filter on device bond88
[  217.504979][T14453] bond88: (slave erspan0): making interface the new active one
[  217.509528][T14453] bond88: (slave erspan0): Enslaving as an active interface with an up link
[  217.878250][T14469] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.2327'.
[  218.036751][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'.
[  218.057275][T14474] vxcan4: entered promiscuous mode
[  218.059115][T14474] vxcan4: entered allmulticast mode
[  218.232646][T14483] 8021q: adding VLAN 0 to HW filter on device bond86
[  218.251604][T14483] bond86: (slave veth25): Enslaving as an active interface with a down link
[  218.360914][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'.
[  218.364542][T14488] lo: Caught tx_queue_len zero misconfig
[  218.763629][T14505] sctp: [Deprecated]: syz.2.2340 (pid 14505) Use of struct sctp_assoc_value in delayed_ack socket option.
[  218.763629][T14505] Use struct sctp_sack_info instead
[  218.931177][T14511] validate_nla: 7 callbacks suppressed
[  218.931191][T14511] netlink: 'syz.0.2342': attribute type 14 has an invalid length.
[  219.083425][T14513] wg1 speed is unknown, defaulting to 1000
[  219.086320][T14513] lo speed is unknown, defaulting to 1000
[  219.247961][T14525] netlink: 'syz.0.2345': attribute type 13 has an invalid length.
[  219.313150][T11729] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  219.406813][T14530] netlink: 'syz.0.2346': attribute type 1 has an invalid length.
[  219.435993][T14530] bond79: (slave geneve5): making interface the new active one
[  219.438909][T14530] bond79: (slave geneve5): Enslaving as an active interface with an up link
[  219.442153][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  219.445019][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  219.447944][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  219.451208][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  219.456993][T14530] 8021q: adding VLAN 0 to HW filter on device bond79
[  219.558028][T14533] netlink: 'syz.0.2347': attribute type 1 has an invalid length.
[  219.608977][T14533] bond80: (slave bridge16): making interface the new active one
[  219.616404][T14533] bond80: (slave bridge16): Enslaving as an active interface with an up link
[  219.663369][T14543] netlink: 'syz.0.2350': attribute type 1 has an invalid length.
[  219.685789][T14543] bond81: entered promiscuous mode
[  219.690040][T14543] bond81: entered allmulticast mode
[  219.692516][T14543] 8021q: adding VLAN 0 to HW filter on device bond81
[  219.713945][T14543] bridge17: entered promiscuous mode
[  219.716394][T14543] bridge17: entered allmulticast mode
[  219.719450][T14543] bond81: (slave bridge17): Enslaving as a backup interface with an up link
[  219.766206][T14553] netlink: 'syz.0.2352': attribute type 1 has an invalid length.
[  219.790594][ T5680] bond81: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  219.830872][T11729] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  219.882248][T14560] netlink: 'syz.0.2354': attribute type 1 has an invalid length.
[  219.896220][T14560] 8021q: adding VLAN 0 to HW filter on device bond82
[  219.900953][ T6642] bond81: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  220.099205][T14580] netlink: 'syz.0.2360': attribute type 10 has an invalid length.
[  220.107906][T14580] team0: Port device geneve0 added
[  220.111279][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  220.114410][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  220.117692][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  220.125450][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  220.132182][T14583] netlink: 'syz.2.2359': attribute type 3 has an invalid length.
[  220.135627][T14583] netlink: 'syz.2.2359': attribute type 3 has an invalid length.
[  220.461605][T14599] dvmrp1: entered allmulticast mode
[  220.464839][T14599] pimreg: left allmulticast mode
[  220.467098][T14599] dvmrp1: left allmulticast mode
[  220.977282][T14634] tipc: Resetting bearer <eth:gre0>
[  220.988227][T14634] bond88: (slave erspan0): Releasing active interface
[  221.002857][T14634] tipc: Resetting bearer <ib:ip6gre0>
[  221.043833][T14634] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  221.078408][T14644] __nla_validate_parse: 13 callbacks suppressed
[  221.078418][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'.
[  221.278963][T14655] 8021q: adding VLAN 0 to HW filter on device bond90
[  221.459784][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'.
[  221.463530][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2374'.
[  221.463691][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2374'.
[  221.583986][T14678] workqueue: Failed to create a rescuer kthread for wq "bond83": -EINTR
[  221.739237][T14690] 8021q: adding VLAN 0 to HW filter on device bond91
[  221.746720][T14690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2378'.
[  221.773912][T14695] wg1 speed is unknown, defaulting to 1000
[  221.780415][T14695] lo speed is unknown, defaulting to 1000
[  221.801458][T14701] k*: entered promiscuous mode
[  221.807444][T14701] tipc: Resetting bearer <eth:gre0>
[  221.809276][T14701] tipc: Resetting bearer <eth:gre0>
[  221.812536][T14701] erspan0: left allmulticast mode
[  221.816805][T14701] tipc: Resetting bearer <ib:ip6gre0>
[  221.819219][T14701] tipc: Resetting bearer <ib:ip6gre0>
[  221.823308][T14701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.843498][T11729] lo speed is unknown, defaulting to 1000
[  221.845517][T11729] syz2: Port: 1 Link ACTIVE
[  221.967669][T14706] tipc: Resetting bearer <eth:gre0>
[  221.989208][T14706] tipc: Resetting bearer <ib:ip6gre0>
[  222.008284][T14706] veth0_to_team: left promiscuous mode
[  222.018645][T14706] bond53: left promiscuous mode
[  222.025295][T14706] vlan5: left promiscuous mode
[  222.027453][T14706] bond54: left promiscuous mode
[  222.029632][T14706] vlan5: left allmulticast mode
[  222.033156][T14706] bond54: left allmulticast mode
[  222.035741][T14706] bond55: left promiscuous mode
[  222.047095][T14706] veth17: left promiscuous mode
[  222.059632][T14706] bridge22: left allmulticast mode
[  222.065967][T14706] bond65: left promiscuous mode
[  222.068003][T14706] bond65: left allmulticast mode
[  222.084275][T14706] bond78: left promiscuous mode
[  222.086001][T14706] bond78: left allmulticast mode
[  222.107651][T14706] veth23: left promiscuous mode
[  222.118115][T14706] bond87: left promiscuous mode
[  222.139751][T11729] lo speed is unknown, defaulting to 1000
[  222.145976][ T6112] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.150035][T11729] syz2: Port: 1 Link DOWN
[  222.153809][ T6112] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.158813][ T6112] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.163863][ T6112] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.647658][T14727] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  222.670704][T14723] 8021q: adding VLAN 0 to HW filter on device bond92
[  222.676398][T14723] erspan0: entered allmulticast mode
[  222.682843][T14723] bond92: (slave erspan0): making interface the new active one
[  222.685839][T14723] bond92: (slave erspan0): Enslaving as an active interface with an up link
[  222.706156][T14725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2387'.
[  222.758984][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'.
[  222.834377][T14738] wg1 speed is unknown, defaulting to 1000
[  222.838467][T14738] lo speed is unknown, defaulting to 1000
[  222.868807][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2391'.
[  222.934551][T14738] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  223.471308][T14727] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  223.474764][T14727] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  223.481891][T14727] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  223.484536][T14727] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  223.490047][T14727] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  223.492600][T14727] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  223.504177][T14727] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  223.509198][T14727] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  223.513571][T14727] CPU: 1 UID: 0 PID: 14727 Comm: syz.1.2386 Not tainted syzkaller #0 PREEMPT(full) 
[  223.517474][T14727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.521779][T14727] RIP: 0010:klist_remove+0x14a/0x340
[  223.523984][T14727] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 69 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 69 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  223.531761][T14727] RSP: 0018:ffffc900028af800 EFLAGS: 00010202
[  223.533765][T14727] RAX: 000000000000000b RBX: ffff888108768000 RCX: 0000000000000000
[  223.536366][T14727] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  223.539540][T14727] RBP: ffffc900028af900 R08: ffffffff8f8a09a3 R09: 1ffffffff1f14134
[  223.542852][T14727] R10: dffffc0000000000 R11: fffffbfff1f14135 R12: 0000000000000000
[  223.546210][T14727] R13: 1ffff11005d3ce8c R14: ffff88802e9e7460 R15: dffffc0000000000
[  223.549485][T14727] FS:  00007f69b21c16c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  223.553175][T14727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  223.555975][T14727] CR2: 000000110c3edf16 CR3: 0000000107be2000 CR4: 00000000000006f0
[  223.559308][T14727] Call Trace:
[  223.560784][T14727]  <TASK>
[  223.562059][T14727]  ? __pfx_klist_remove+0x10/0x10
[  223.564270][T14727]  ? __pfx_kobject_move+0x10/0x10
[  223.566496][T14727]  ? do_raw_spin_unlock+0x4d/0x240
[  223.568673][T14727]  ? get_device_parent+0x366/0x3a0
[  223.570881][T14727]  device_move+0x193/0x700
[  223.572774][T14727]  hci_conn_del_sysfs+0xb8/0x170
[  223.574905][T14727]  hci_conn_del+0xc33/0x11b0
[  223.576893][T14727]  hci_conn_hash_flush+0x191/0x230
[  223.579011][T14727]  hci_dev_close_sync+0xaef/0x1330
[  223.581254][T14727]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  223.583699][T14727]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  223.586202][T14727]  hci_dev_do_close+0x2f/0x90
[  223.588162][T14727]  hci_rfkill_set_block+0x21d/0x2e0
[  223.590360][T14727]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  223.592545][T14727]  rfkill_set_block+0x1d2/0x440
[  223.594318][T14727]  rfkill_fop_write+0x44b/0x570
[  223.596432][T14727]  ? __pfx_rfkill_fop_write+0x10/0x10
[  223.598741][T14727]  ? security_kernfs_init_security+0x240/0x290
[  223.601274][T14727]  ? rw_verify_area+0x255/0x4d0
[  223.603341][T14727]  ? __lock_acquire+0xab9/0xd20
[  223.605349][T14727]  ? __pfx_rfkill_fop_write+0x10/0x10
[  223.607571][T14727]  vfs_write+0x27e/0xb30
[  223.609466][T14727]  ? __pfx_vfs_write+0x10/0x10
[  223.611470][T14727]  ? __fget_files+0x2a/0x420
[  223.613466][T14727]  ? __fget_files+0x2a/0x420
[  223.615700][T14727]  ? __fget_files+0x3a0/0x420
[  223.617736][T14727]  ? __fget_files+0x2a/0x420
[  223.619765][T14727]  ksys_write+0x145/0x250
[  223.621710][T14727]  ? __pfx_ksys_write+0x10/0x10
[  223.623884][T14727]  ? do_syscall_64+0xbe/0x3b0
[  223.625951][T14727]  do_syscall_64+0xfa/0x3b0
[  223.627937][T14727]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.630158][T14727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.632774][T14727]  ? exc_page_fault+0x9f/0xf0
[  223.634876][T14727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.637436][T14727] RIP: 0033:0x7f69b138eba9
[  223.639426][T14727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.647660][T14727] RSP: 002b:00007f69b21c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  223.651315][T14727] RAX: ffffffffffffffda RBX: 00007f69b15d5fa0 RCX: 00007f69b138eba9
[  223.654738][T14727] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 000000000000000e
[  223.658204][T14727] RBP: 00007f69b1411e19 R08: 0000000000000000 R09: 0000000000000000
[  223.661642][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.664983][T14727] R13: 00007f69b15d6038 R14: 00007f69b15d5fa0 R15: 00007ffd1d4539f8
[  223.668316][T14727]  </TASK>
[  223.669638][T14727] Modules linked in:
[  223.672547][T14727] ---[ end trace 0000000000000000 ]---
[  223.680075][T14727] RIP: 0010:klist_remove+0x14a/0x340
[  223.682493][T14727] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 69 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 69 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  223.690772][T14727] RSP: 0018:ffffc900028af800 EFLAGS: 00010202
[  223.693500][T14727] RAX: 000000000000000b RBX: ffff888108768000 RCX: 0000000000000000
[  223.696740][T14727] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  223.703123][T14727] RBP: ffffc900028af900 R08: ffffffff8f8a09a3 R09: 1ffffffff1f14134
[  223.706443][T14727] R10: dffffc0000000000 R11: fffffbfff1f14135 R12: 0000000000000000
[  223.709748][T14727] R13: 1ffff11005d3ce8c R14: ffff88802e9e7460 R15: dffffc0000000000
[  223.713743][T14727] FS:  00007f69b21c16c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  223.717384][T14727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  223.720525][T14727] CR2: 000000110c3edf16 CR3: 0000000107be2000 CR4: 00000000000006f0
[  223.724013][T14727] Kernel panic - not syncing: Fatal exception
[  223.727250][T14727] Kernel Offset: disabled
[  223.729099][T14727] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:23:53  Registers:
info registers vcpu 0

CPU#0
RAX=da146906d6adc000 RBX=ffffffff819683f8 RCX=da146906d6adc000 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683f8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd7512be440 CR3=000000010fb60000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2cf7212e53
XMM06=0000000000000000 00007f2cf7212e4d XMM07=0000000000000000 00007f2cf7212e61
XMM08=0000000000000000 00007f2cf7212ee7 XMM09=0000000000000000 00007f2cf7212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000006206 RDI=0000000000006207 RBP=00000000000003f8 RSP=ffffc900028af030
R8 =ffff8880212b8237 R9 =1ffff11004257046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01916 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f69b21c16c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3edf16 CR3=0000000107be2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 80fe003cc80f0097
XMM02=0601000000000000 0000000000000002 XMM03=ffaa000000000000 0000000000000080
XMM04=00007f2cf7f0d100 00007f2cf73a7460 XMM05=00007f2cf73a7478 00007f2cf73a74c0
XMM06=00007f2cf73a74b8 00007f2cf73a74b0 XMM07=00007f2cf73a74a8 00007f2cf73a74a0
XMM08=0000000000000000 00007f2cf7212ee7 XMM09=0000000000000000 00007f2cf7212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
