last executing test programs:

3.769100698s ago: executing program 2 (id=1338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2a, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (rerun: 64)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab7"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$pppl2tp(r2, 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r5 = socket(0x10, 0x803, 0x0) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}}) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000207010100000000000000000500000a0c0003400000000073139b57e9bb2b779399f47793692ee9e44622e7da0c80d84b4365024d041d45615efb88f0d608377fb6a10cefd5316066c39787d9ae6390b00052c9da2ee32a79be21645b3b699f7e1d95a7314877748d6fac7c482c5b2283f48b335dcc88a54d1a870a59886826d31bfa1a9d30c653ff6524bc185b4414fdda69ebe6f78af8f0f64671aba5bb9bef6f08883a4fdea8716de92e8a0fae3f2d852d86"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

3.636295784s ago: executing program 2 (id=1341):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000080)=0x9, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0x20}}, 0x40090)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0)

3.564932671s ago: executing program 2 (id=1344):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060e1fd0003082f00fe88a43de1a400000000000500007d01ff0200000000000000000000000000010000883e"], 0xfdef)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x2802}, 0x20000044)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f00000001c0)=0xfffffffffffffda3)
mmap(&(0x7f0000a5d000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="7bce4ea1648e330ff19031c9f8fb35181fafdafce81b5ca4fe7f15ceaff49c3b130deaf60cc45980ce96e52b8ba287df9d", @ANYBLOB="01002bbd7000fcdbdf254c0000000c00a70040000000000000001c00a900c3dc9cb3c5d9d6480422f18c5d0931b2116b446f6b47cf560e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8000)

3.323829684s ago: executing program 2 (id=1346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x10002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

2.386824501s ago: executing program 2 (id=1357):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r2], 0x21c}}, 0x0)
r4 = getpid()
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r6, 0x72b}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
write$cgroup_pid(r2, &(0x7f00000006c0)=r4, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.736363494s ago: executing program 2 (id=1369):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x9, 0x9e, 0xfbfc, 0xee, 0x8, 0x6, 0xa0c, 0xd}, 0x0, 0x0, &(0x7f00000003c0), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2cc", 0xce)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}})
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x15, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000009000000080000000200002100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a080001"], 0xc8}}, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000180)=""/220, 0x4a, 0xdc, 0x1}, 0x20)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r7, &(0x7f0000000940), 0x10)
close(0x3)
listen(r7, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="000000000000002f040000002600000095000000000000004549faf0af1a9ae74744241ec99cf4f194894ba653e01157ddff07303ecf7a6078e5dc1713b0adb644ef9c24c184dd444d552f0e7e82fcab7926841235d9ffd88047c8739ee7a0893773bc29a156463fe8a544f9436baebbb195770da45821170f2f836c7c58172157408bdcafec"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0))
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000190000020100000000002300fc02000000000000000000000000000000000000000000000000000900000000000000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="0000000000000000fdffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac1414bb000000000000000000000000000000006c00000000000000fc00000000000000000000000000000100000000000000000000000000000000000020000c0008000800080001040000"], 0x108}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0xc010)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)

1.140350763s ago: executing program 0 (id=1380):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00')
unshare(0x6a040000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000001000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x40000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="090d2000000000f0ff000700000007000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0)
r4 = socket(0x8, 0x3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
getpeername$l2tp6(r4, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xf, 0x8}, {0x9, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040010)

876.913802ms ago: executing program 1 (id=1383):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="180010f20b14040026bd7000fbdbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000000101040000000000000000020000001800018014000180080001000000000008000200ac141400240002800c0002800500010000000000140001"], 0x50}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000400)=0x1, 0x4)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', <r2=>0x0, 0x700, 0x80, 0x4, 0x2, {{0x36, 0x4, 0x3, 0x3b, 0xd8, 0x68, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x35, [@remote, @rand_addr=0x64010100, @local, @private=0xa010100]}, @cipso={0x86, 0x33, 0x1, [{0x4, 0x2}, {0x5, 0x6, "f3998806"}, {0x7, 0xd, "9714f5d8a99af72e6d36b4"}, {0x1, 0x7, "7275281fd5"}, {0x2, 0x3, "80"}, {0x6, 0xe, "5a76ca0974ded08d5d299745"}]}, @timestamp_addr={0x44, 0x2c, 0xdc, 0x1, 0xa, [{@broadcast, 0x8}, {@loopback, 0x8}, {@broadcast, 0x5}, {@local, 0x8}, {@rand_addr=0x64010100, 0x7f}]}, @cipso={0x86, 0x2c, 0x1, [{0x5, 0x5, "25defb"}, {0x2, 0x8, "17c87f230711"}, {0x0, 0x9, "a3c4ccb8e51b27"}, {0x0, 0x3, '.'}, {0x2, 0x7, "15bbae828a"}, {0x1, 0x6, "1cadf3d2"}]}, @ssrr={0x89, 0x1f, 0x3c, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@delqdisc={0x84, 0x25, 0x800, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0x2}, {0x9, 0x4}, {0x1, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x4, "1e5e80feb47ca704333250815c03c07e"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffff80}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x84}}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x4, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048811}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback, 0x1d, 0x0, 0x8000, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000440)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

806.440237ms ago: executing program 1 (id=1384):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000500)="b9ff03076844268cb89e34f088a847e029000000050000210021ac1414d643", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000d0076"], 0x34}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xfffffde6, 0x0, 0xffffffffffffffff, 0xffffffffffffff38}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000007d009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000540)=0x3, 0x4)
r4 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000002c0)=0x6, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f2, 0x100, 0x70bd28, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x480c0}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x10, 0xffffffffffffffff, 0x8871b000)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r6, 0x29, 0x3e, &(0x7f0000001180)="814eb78e", 0x4)
setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f0000000200)=0x5, 0x4)
bind$packet(r4, &(0x7f0000000300), 0x14)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc)
sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)}, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x1a449000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0), &(0x7f0000000580)=0xc)
unshare(0x6a040000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="f38e5280e1c0ab140000001000010000000000000000000000000a68000000160a02010000000000000000030000010c00054000000000000000080c00054000000000000000040900010073797a31000000000900010073797a30000000000c00054000000000000000010c00054000000000054000000000000000041400000011000100"/144], 0x90}}, 0x4000)

706.385071ms ago: executing program 0 (id=1385):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0)

701.790442ms ago: executing program 0 (id=1386):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}], 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24000844}, 0x24008010)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x5c}}, 0x20040804)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x84)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
recvmmsg(r8, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x10042, 0x0)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000440)=0x2, 0x4)
getsockopt$inet6_tcp_int(r7, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000100)=0x4)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000810400"/20, @ANYRES32=0x0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000800000005000a"], 0x44}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3bf}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x0, 0xfffffbfe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}})
getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000040)={@local, @private}, &(0x7f00000000c0)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

537.156938ms ago: executing program 0 (id=1387):
syz_emit_ethernet(0x2b0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)

536.412244ms ago: executing program 0 (id=1388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x53, &(0x7f00000000c0)=0x1000, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x24048090}, 0x24000800)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a0101"], 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, &(0x7f0000000180))
write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e8100220086dd6d0040000008110000000004000000140700000000000000ff02000000000003000000000000014f1c1b590003097800"], 0x42)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x3, 0x0, 0xff, 0x0, 0x8, 0xffff}, 0x20)
recvmmsg(r2, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}, 0x82}], 0x1, 0x100, 0x0)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="58fd0002", @ANYRES16=r8, @ANYBLOB="010026bd7000fddbdf250200000008003900000000000500380001000000060028000400000008000300", @ANYRES32=0x0, @ANYBLOB="0a000900ffffffffffff000005002d000200000005002e000000000008000b0003000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x50)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f00000005c0)={0x1, 0x2, 0x1000, 0xec, &(0x7f0000000780)="bb5363fddfe609ca036ba4133367728e227b40f0d069e4a2690f99a196b8215c70033b9ff1a4fba17567b55dad02d5d4d8ff137b80f42ed7cc61f46a4a40e788cfd72787574db49806b4f5ba0d8bfa81a93e9dee239b3d2812806ecb03723a7d747fad34b1e3783afd4fce8f613a6e67e10b24d92ca966e38449d35a32bde5c95915ca0ce3d9f64cad1a951bcbc8044e2c0534506ea2c13d977b139728d0689114b9d1490fd411b396a7c70f66b8cb550ced55592eb72eda8f2faef8a50e7de9d3d19566348699750fba51704a03ae0e36d94c5449d6068b6cef62113c417fd59f7d461c04753ef2f427a703", 0xac, 0x0, &(0x7f0000000880)="b0b86669d25bc5725784e1016033dc9e035f015e2035136bc0f6a310e8f3762f4a0e16fdb1556aa09f7a5aedf2a05fbac94f4e8ea78acf39a64dae332ee329f26ec1c110cb28bf641175299b58d26a4e6058153d2a98008583af008903214f9e2a4c8a4a046a38164f78e47f4a957c22fb408fc787b01fa2ff025c228007fcdd86c41df78ee0afa3413ac7203f9cc2b038e7e2c7b87e15813c5d4bc3bce6790b31212689ae2d60b3249059f2"})
ioctl(r7, 0x8b2c, &(0x7f0000000040))
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x48000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)

316.561786ms ago: executing program 0 (id=1389):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40) (async)
syz_genetlink_get_family_id$l2tp(0x0, r0) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0xfffffffc) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c00028008000300ffffffff080002007f000001060008000300000079a4ab82f1a6de10f71175da5decdd275e1ec8db13d1eeb83d80ab16fbe1b7ddae47dafa968161558e63f554fc46ec2b6ad1f2e76a793859de8e00df2efebe7bfefd492fc7414c44df7a405e7306cbbfd8dd6ce3467ccaf1c573"], 0x48}}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

316.0878ms ago: executing program 1 (id=1390):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000003011d71189a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)

255.723127ms ago: executing program 1 (id=1391):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8b}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}}, 0x20010000)
socket$alg(0x26, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x3)
ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000080)={0x3d, 0x3})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x396}], 0x1}}], 0x1, 0x40)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000580)={{'\x00', 0x1}, {}, 0x2f, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)="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", 0x13c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b0})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="919f31e60f56df74b694d3cc94ed8834859e582836", 0x15}, {&(0x7f0000000400)="4c1d5e", 0x3}, {&(0x7f0000000880)="05320bd521013374aee1b80e190737", 0xf}], 0x1}], 0x1, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000007f0ea57f1cd09f3a38e1fde624ace900", @ANYRES32=0x0, @ANYBLOB="360300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0)

78.491621ms ago: executing program 1 (id=1392):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400fdff000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001400350065727370616e3000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="5f0efc8be5b20e92672734af1615fbdd930304d0883e055e83e1fbe4e907781713655c7ada6b8975ecae38cf47a89bff8d3f72a0"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

0s ago: executing program 1 (id=1393):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000000061b9459b68100dbf05177b2490a5408bdf271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}, {&(0x7f0000000b00)=';', 0x1}], 0x2, 0x0, 0x0, 0x84}, 0x20000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000)
close(r5)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b40)={'wpan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=@newtclass={0x24, 0x28, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0x7}, {0x0, 0x7}, {0xa}}}, 0x24}}, 0x4008020)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r8, 0x940, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x20040880)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r2)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002abd7000fcdbdf000800000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x804}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x5c}}, 0x4091)
socket$inet6(0xa, 0x2, 0x0)
r13 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r13, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0)
r14 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x8001}, @CTA_PROTOINFO={0x60, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x5c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xcfc}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfff}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xf7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff9}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20008091)
setsockopt$sock_attach_bpf(r13, 0x6, 0x25, &(0x7f0000000040), 0x4)

kernel console output (not intermixed with test programs):

evice) (uninitialized): option min_links: invalid value (18446744073709551612)
[   77.296070][ T6863] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   77.349396][ T6868] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[   77.572599][ T6880] 8021q: adding VLAN 0 to HW filter on device bond7
[   77.679031][ T6883] bond13: entered promiscuous mode
[   77.681500][ T6883] 8021q: adding VLAN 0 to HW filter on device bond13
[   77.686178][ T6880] erspan0: entered allmulticast mode
[   77.697916][ T6880] bond7: (slave erspan0): making interface the new active one
[   77.702770][ T6880] bond7: (slave erspan0): Enslaving as an active interface with an up link
[   77.739427][ T6888] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   77.885791][   T10] tipc: Node number set to 2886997039
[   77.921272][ T6901] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0028:0000:0000:7d01 with DS=0xe
[   78.175763][ T6923] tipc: Started in network mode
[   78.177498][ T6923] tipc: Node identity f6926013c307, cluster identity 4711
[   78.180279][ T6923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.183382][ T6923] syzkaller0: entered promiscuous mode
[   78.185739][ T6923] syzkaller0: entered allmulticast mode
[   78.214043][ T6923] tipc: Resetting bearer <eth:syzkaller0>
[   78.237838][ T6920] tipc: Resetting bearer <eth:syzkaller0>
[   78.251199][ T6920] tipc: Disabling bearer <eth:syzkaller0>
[   78.288463][ T6925] bond14: entered promiscuous mode
[   78.294037][ T6925] 8021q: adding VLAN 0 to HW filter on device bond14
[   78.305886][ T6931] 8021q: adding VLAN 0 to HW filter on device bond14
[   78.308324][ T6931] bond14: (slave wireguard2): The slave device specified does not support setting the MAC address
[   78.312199][ T6931] bond14: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[   78.317934][ T6931] bond14: (slave wireguard2): making interface the new active one
[   78.321403][ T6931] wireguard2: entered promiscuous mode
[   78.325148][ T6931] bond14: (slave wireguard2): Enslaving as an active interface with an up link
[   78.332823][ T6927] vlan3: entered promiscuous mode
[   78.350399][ T6927] macvtap0: entered promiscuous mode
[   78.377013][ T6934] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0040:0000:0000:7d01 with DS=0xe
[   78.383993][ T6936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.386747][ T6936] IPv6: NLM_F_CREATE should be set when creating new route
[   78.389300][ T6936] IPv6: NLM_F_CREATE should be set when creating new route
[   78.628324][ T6947] 8021q: adding VLAN 0 to HW filter on device bond6
[   78.631369][ T6947] bridge0: port 2(bond6) entered blocking state
[   78.633540][ T6947] bridge0: port 2(bond6) entered disabled state
[   78.636784][ T6947] bond6: entered allmulticast mode
[   78.640907][ T6947] bond6: entered promiscuous mode
[   78.643450][ T6947] bridge0: port 2(bond6) entered blocking state
[   78.646551][ T6947] bridge0: port 2(bond6) entered forwarding state
[   78.690876][ T6955] block nbd0: not configured, cannot reconfigure
[   78.920735][ T2993] bridge0: port 2(bond6) entered disabled state
[   79.009579][ T6981] validate_nla: 11 callbacks suppressed
[   79.009591][ T6981] netlink: 'syz.2.317': attribute type 10 has an invalid length.
[   79.029377][ T6981] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   79.037014][ T6981] netlink: 'syz.2.317': attribute type 21 has an invalid length.
[   79.040545][ T6981] netlink: 'syz.2.317': attribute type 6 has an invalid length.
[   79.049690][ T6981] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.054916][ T6981] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   79.177874][ T6990] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[   79.197554][ T6990] bond7: entered promiscuous mode
[   79.205429][ T6990] 8021q: adding VLAN 0 to HW filter on device bond7
[   79.259480][ T6993] __nla_validate_parse: 22 callbacks suppressed
[   79.259494][ T6993] netlink: 256 bytes leftover after parsing attributes in process `syz.1.320'.
[   79.322841][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   79.329611][ T6998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.321'.
[   79.486850][   T33] audit: type=1800 audit(1757938090.917:2): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.320" name="memory.events" dev="tmpfs" ino=665 res=0 errno=0
[   79.603343][ T7018] netlink: 168 bytes leftover after parsing attributes in process `syz.1.325'.
[   79.652233][ T7025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.328'.
[   79.656343][ T7024] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   79.711729][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.330'.
[   79.718393][ T7032] block nbd0: not configured, cannot reconfigure
[   79.765374][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'.
[   79.791630][ T7036] vlan0: entered allmulticast mode
[   79.796220][ T7036] bridge0: entered allmulticast mode
[   79.799635][ T7036] bridge6: port 1(vlan0) entered blocking state
[   79.802581][ T7036] bridge6: port 1(vlan0) entered disabled state
[   79.810498][ T7036] vlan0: entered promiscuous mode
[   79.813588][ T7036] bridge0: entered promiscuous mode
[   79.981986][ T7051] netlink: 240 bytes leftover after parsing attributes in process `syz.1.337'.
[   80.487389][ T7070] netlink: 'syz.2.339': attribute type 1 has an invalid length.
[   80.529280][ T7073] netlink: 'syz.1.340': attribute type 10 has an invalid length.
[   80.542959][ T7070] 8021q: adding VLAN 0 to HW filter on device bond8
[   80.565789][ T7073] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   80.588310][ T7074] bond8: (slave ip6gretap1): making interface the new active one
[   80.593404][ T7074] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[   80.637916][ T7070] veth1: entered promiscuous mode
[   80.654094][ T7073] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   80.657350][ T7073] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   80.694809][ T7076] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   80.713939][ T7076] 8021q: adding VLAN 0 to HW filter on device bond15
[   80.756035][ T7076] bond12: (slave erspan0): Releasing active interface
[   80.771661][ T7076] bond15: (slave erspan0): making interface the new active one
[   80.775941][ T7076] bond15: (slave erspan0): Enslaving as an active interface with an up link
[   80.964864][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'.
[   80.972143][ T7092] netlink: 'syz.2.345': attribute type 12 has an invalid length.
[   80.989794][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'.
[   80.993599][ T7092] netlink: 'syz.2.345': attribute type 12 has an invalid length.
[   81.000639][ T7021] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.024155][ T7021] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.028690][ T7021] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.032420][ T7021] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.047596][ T7093] netlink: 'syz.1.346': attribute type 1 has an invalid length.
[   81.179742][ T7093] 8021q: adding VLAN 0 to HW filter on device bond16
[   81.212773][ T7097] bond16: (slave geneve3): making interface the new active one
[   81.227759][ T7097] bond16: (slave geneve3): Enslaving as an active interface with an up link
[   81.316456][ T7097] syz.1.346 (7097) used greatest stack depth: 18664 bytes left
[   81.622719][ T7133] bpq0: entered allmulticast mode
[   81.632284][ T7126] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   82.012073][ T7158] 8021q: adding VLAN 0 to HW filter on device bond10
[   82.027287][ T7158] bond7: (slave erspan0): Releasing active interface
[   82.038526][ T7158] bond10: (slave erspan0): making interface the new active one
[   82.042152][ T7158] bond10: (slave erspan0): Enslaving as an active interface with an up link
[   82.287908][ T7176] erspan0: left allmulticast mode
[   82.319117][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.322494][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.338313][ T7176] team_slave_0: left promiscuous mode
[   82.340822][ T7176] team_slave_1: left promiscuous mode
[   82.409704][ T7176] batadv_slave_0: left promiscuous mode
[   82.415926][ T7176] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.478609][ T7176] bond3: left promiscuous mode
[   82.480401][ T7176] bond4: left promiscuous mode
[   82.506312][ T5712] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.509339][ T5712] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.512493][ T5712] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.515937][ T5712] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.518979][ T5712] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.521827][ T5712] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.525497][ T5712] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.528439][ T5712] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.583292][ T7191] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   82.590844][ T7191] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   82.963584][ T7208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.973430][ T7208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.979999][ T7208] bond0 (unregistering): (slave bond1): Releasing backup interface
[   82.999398][ T7208] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   83.010877][ T7208] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   83.016842][ T7208] bond0 (unregistering): Released all slaves
[   83.102700][ T7225] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   83.241091][ T7236] 8021q: adding VLAN 0 to HW filter on device bond8
[   83.249004][ T7236] bond3: (slave erspan0): Releasing active interface
[   83.255715][ T7236] bond8: (slave erspan0): making interface the new active one
[   83.261000][ T7236] bond8: (slave erspan0): Enslaving as an active interface with an up link
[   83.293296][ T7243] batman_adv: batadv0: Interface deactivated: vxlan0
[   83.296127][ T7243] batman_adv: batadv0: Removing interface: vxlan0
[   83.463792][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.741546][ T7252] dummy0: entered promiscuous mode
[   83.750966][ T7252] bond0: (slave dummy0): Releasing backup interface
[   83.755911][ T7252] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   83.763325][ T7252] bridge0: port 1(dummy0) entered blocking state
[   83.767029][ T7252] bridge0: port 1(dummy0) entered disabled state
[   83.769304][ T7252] dummy0: entered allmulticast mode
[   83.888089][ T7260] team0: Port device team_slave_0 removed
[   83.991859][ T7274] tc_dump_action: action bad kind
[   84.029500][ T7277] sctp: [Deprecated]: syz.2.399 (pid 7277) Use of int in max_burst socket option deprecated.
[   84.029500][ T7277] Use struct sctp_assoc_value instead
[   84.057177][ T7279] validate_nla: 13 callbacks suppressed
[   84.057186][ T7279] netlink: 'syz.1.398': attribute type 15 has an invalid length.
[   84.101060][ T7282] netlink: 'syz.2.400': attribute type 1 has an invalid length.
[   84.136864][ T7274] netlink: 'syz.1.398': attribute type 4 has an invalid length.
[   84.142210][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.149662][ T7282] erspan0: entered allmulticast mode
[   84.152969][ T7282] bond10: (slave erspan0): Releasing active interface
[   84.161894][ T7282] bond0: (slave erspan0): making interface the new active one
[   84.166742][ T7282] bond0: (slave erspan0): Enslaving as an active interface with an up link
[   84.216228][ T7286] netlink: 'syz.1.401': attribute type 10 has an invalid length.
[   84.221759][ T7286] bridge0: port 1(dummy0) entered blocking state
[   84.225266][ T7286] bridge0: port 1(dummy0) entered forwarding state
[   84.266290][ T7288] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   84.269716][ T7288] __nla_validate_parse: 21 callbacks suppressed
[   84.269728][ T7288] netlink: 224 bytes leftover after parsing attributes in process `syz.2.402'.
[   84.288246][ T7288] netlink: 48 bytes leftover after parsing attributes in process `syz.2.402'.
[   84.292600][ T7288] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   84.493418][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz.1.406'.
[   84.501871][ T7306] netlink: 43 bytes leftover after parsing attributes in process `syz.1.406'.
[   84.518585][ T7306] netlink: 'syz.1.406': attribute type 5 has an invalid length.
[   84.528787][ T7306] netlink: 43 bytes leftover after parsing attributes in process `syz.1.406'.
[   84.970736][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'.
[   84.975546][ T7340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.414'.
[   85.075112][ T7363] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   85.126799][ T7362] gtp0: entered promiscuous mode
[   85.129013][ T7362] gtp0: entered allmulticast mode
[   85.233258][ T7374] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[   85.252468][ T7374] netlink: 364 bytes leftover after parsing attributes in process `syz.2.423'.
[   85.262740][ T7374] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   85.371807][ T7377] netlink: 'syz.2.424': attribute type 1 has an invalid length.
[   85.443325][ T7377] 8021q: adding VLAN 0 to HW filter on device bond11
[   85.527181][ T7377] vlan3: entered promiscuous mode
[   85.530484][ T7377] bond11: entered promiscuous mode
[   85.532231][ T7377] vlan3: entered allmulticast mode
[   85.541096][ T7377] bond11: entered allmulticast mode
[   85.545945][ T7377] openvswitch: netlink: IPv4 tunnel dst address is zero
[   85.922591][ T7399] netlink: 'syz.2.430': attribute type 1 has an invalid length.
[   85.951303][ T7399] 8021q: adding VLAN 0 to HW filter on device bond12
[   85.959682][ T7399] bond0: (slave erspan0): Releasing active interface
[   85.966558][ T7402] netlink: 'syz.1.431': attribute type 1 has an invalid length.
[   85.968962][ T7399] bond12: (slave erspan0): making interface the new active one
[   85.973430][ T7399] bond12: (slave erspan0): Enslaving as an active interface with an up link
[   85.976760][ T7402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.176455][ T5848] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   86.208900][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'.
[   86.217330][ T7417] veth1_to_hsr: mtu less than device minimum
[   86.321017][ T7426] erspan0: left allmulticast mode
[   86.321371][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'.
[   86.361795][ T7426] 8021q: adding VLAN 0 to HW filter on device team0
[   86.368745][ T7426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.687811][ T7459] bond18: (slave geneve4): making interface the new active one
[   86.690842][ T7459] bond18: (slave geneve4): Enslaving as an active interface with an up link
[   86.695002][ T5907] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   86.698858][ T5907] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   86.702633][ T5907] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   86.710858][ T7459] 8021q: adding VLAN 0 to HW filter on device bond18
[   86.714176][ T5907] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   87.054574][ T5848] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.068516][ T7472] erspan0: left allmulticast mode
[   87.095804][ T7472] bridge0: left promiscuous mode
[   87.100081][ T7472] 8021q: adding VLAN 0 to HW filter on device team0
[   87.108737][ T7472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.138102][ T7474] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0001:7d01 with DS=0xe
[   87.239147][ T7478] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   87.253098][ T7478] bond15: (slave erspan0): Releasing active interface
[   87.262790][ T7478] bond0: (slave team0): Releasing backup interface
[   87.269874][ T7478] dummy0: left allmulticast mode
[   87.272193][ T7478] dummy0: left promiscuous mode
[   87.277276][ T7478] bridge0: port 1(dummy0) entered disabled state
[   87.289632][ T7478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   87.304895][ T7478] tipc: Started in network mode
[   87.307084][ T7478] tipc: Node identity 080211000001, cluster identity 4711
[   87.310682][ T7478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.326812][ T7478] tipc: Resetting bearer <eth:syzkaller0>
[   87.505093][ T7489] 8021q: adding VLAN 0 to HW filter on device bond19
[   87.537463][ T7489] bond19: (slave gretap4): making interface the new active one
[   87.543588][ T7489] bond19: (slave gretap4): Enslaving as an active interface with an up link
[   87.587202][ T7500] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[   87.651501][ T7505] 8021q: adding VLAN 0 to HW filter on device bond20
[   87.661702][ T7506] bond20: (slave ip6gretap2): making interface the new active one
[   87.668084][ T7506] bond20: (slave ip6gretap2): Enslaving as an active interface with an up link
[   87.767066][ T7518] tc_dump_action: action bad kind
[   87.769256][ T7519] tc_dump_action: action bad kind
[   87.787357][ T7511] can: request_module (can-proto-3) failed.
[   87.869961][ T7531] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   87.966122][ T7536] 8021q: adding VLAN 0 to HW filter on device bond13
[   87.989831][ T7536] erspan0: entered allmulticast mode
[   87.995346][ T7536] bond12: (slave erspan0): Releasing active interface
[   88.001458][ T7536] bond13: (slave erspan0): making interface the new active one
[   88.006104][ T7536] bond13: (slave erspan0): Enslaving as an active interface with an up link
[   88.314545][    T9] tipc: Node number set to 134418688
[   88.929872][ T7605] bridge_slave_1: left allmulticast mode
[   88.938215][ T7605] bridge_slave_1: left promiscuous mode
[   88.942844][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.948326][ T7605] bridge_slave_0: left allmulticast mode
[   88.950790][ T7605] bridge_slave_0: left promiscuous mode
[   88.953432][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.168603][ T7613] validate_nla: 45 callbacks suppressed
[   89.168616][ T7613] netlink: 'syz.2.482': attribute type 1 has an invalid length.
[   89.191897][ T7613] 8021q: adding VLAN 0 to HW filter on device bond14
[   89.199141][ T7616] netlink: 'syz.0.480': attribute type 8 has an invalid length.
[   89.203009][ T7613] bond13: (slave erspan0): Releasing active interface
[   89.211577][ T7613] bond14: (slave erspan0): making interface the new active one
[   89.217326][ T7613] bond14: (slave erspan0): Enslaving as an active interface with an up link
[   89.270756][ T7618] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0304:7d01 with DS=0xe
[   89.284574][ T7610] nbd0: detected capacity change from 0 to 63
[   89.293100][ T7616] block nbd0: NBD_DISCONNECT
[   89.298291][ T7616] block nbd0: Disconnected due to user request.
[   89.302057][ T7616] block nbd0: shutting down sockets
[   89.303369][ T6509] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.315314][ T6509] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.328220][   T60] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[   89.332868][   T60] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.336203][   T60] Buffer I/O error on dev nbd0, logical block 2, async page read
[   89.339077][   T60] Buffer I/O error on dev nbd0, logical block 3, async page read
[   89.340845][ T7610] bond10: entered promiscuous mode
[   89.343584][ T6509] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.344416][ T7610] bond10: entered allmulticast mode
[   89.350141][ T7610] 8021q: adding VLAN 0 to HW filter on device bond10
[   89.352850][ T6509] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.358623][ T6509] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.362586][ T6509] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.370965][ T6509] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.384342][ T6509] Buffer I/O error on dev nbd0, logical block 2, async page read
[   89.397516][ T6509] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.401243][ T6509] Buffer I/O error on dev nbd0, logical block 3, async page read
[   89.411956][ T6509] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.422534][ T6509] Buffer I/O error on dev nbd0, logical block 0, async page read
[   89.428894][ T6509] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.432493][ T6509] Buffer I/O error on dev nbd0, logical block 1, async page read
[   89.437692][ T6509] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.441655][ T6509] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   89.441799][ T7631] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[   89.450535][ T6509] ldm_validate_partition_table(): Disk read failed.
[   89.456140][ T6509] Dev nbd0: unable to read RDB block 0
[   89.462108][ T6509]  nbd0: unable to read partition table
[   89.474726][ T6509] ldm_validate_partition_table(): Disk read failed.
[   89.479156][ T6509] Dev nbd0: unable to read RDB block 0
[   89.504391][ T6509]  nbd0: unable to read partition table
[   89.506433][ T7631] 8021q: adding VLAN 0 to HW filter on device bond11
[   89.540039][ T7636] bond11: (slave ip6gretap1): making interface the new active one
[   89.563249][ T7636] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link
[   89.574971][ T7640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.591946][ T7639] __nla_validate_parse: 20 callbacks suppressed
[   89.591960][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[   89.612141][ T7639] netlink: 248 bytes leftover after parsing attributes in process `syz.2.487'.
[   89.690667][ T7636] bond8: (slave erspan0): Releasing active interface
[   89.757542][ T7653] vlan3: entered promiscuous mode
[   89.759890][ T7653] vlan3: entered allmulticast mode
[   89.762032][ T7653] hsr_slave_1: entered allmulticast mode
[   89.800740][ T7653] netlink: 108 bytes leftover after parsing attributes in process `syz.0.491'.
[   89.808186][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'.
[   89.813094][ T7653] netlink: 108 bytes leftover after parsing attributes in process `syz.0.491'.
[   89.825660][ T7653] netlink: 84 bytes leftover after parsing attributes in process `syz.0.491'.
[   89.857388][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'.
[   89.862752][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'.
[   89.883362][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'.
[   89.906702][ T7660] netlink: 'syz.2.493': attribute type 10 has an invalid length.
[   90.114624][ T7671] netlink: 'syz.0.496': attribute type 2 has an invalid length.
[   90.128877][ T7671] : entered promiscuous mode
[   90.226893][ T7677] netlink: 'syz.2.498': attribute type 1 has an invalid length.
[   90.262689][ T7677] 8021q: adding VLAN 0 to HW filter on device bond15
[   90.318349][ T7677] bond15: (slave veth1): Enslaving as an active interface with a down link
[   90.366814][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv1
[   90.369850][ T7677] bond15: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   90.489508][ T7690] sit1: entered promiscuous mode
[   90.677721][ T7707] netlink: 'syz.2.502': attribute type 1 has an invalid length.
[   90.699839][ T7707] bond16: (slave geneve2): making interface the new active one
[   90.702791][ T7707] bond16: (slave geneve2): Enslaving as an active interface with an up link
[   90.711610][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   90.716871][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   90.717410][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'.
[   90.724874][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   90.732776][ T7707] 8021q: adding VLAN 0 to HW filter on device bond16
[   90.738594][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   90.950605][ T7729] netlink: 'syz.0.508': attribute type 10 has an invalid length.
[   91.021722][ T7736] netlink: 'syz.2.511': attribute type 1 has an invalid length.
[   91.067690][ T7736] bond17: entered promiscuous mode
[   91.070875][ T7736] 8021q: adding VLAN 0 to HW filter on device bond17
[   91.078343][ T7742] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   91.128709][ T7748] netlink: 'syz.2.514': attribute type 10 has an invalid length.
[   91.136298][ T7748] dummy0: entered promiscuous mode
[   91.140061][ T7748] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   91.152029][ T7750] (unnamed net_device) (uninitialized): option coupled_control: invalid value (24)
[   91.572553][ T7773] netlink: 'syz.2.522': attribute type 11 has an invalid length.
[   91.702471][ T7777] 8021q: adding VLAN 0 to HW filter on device bond12
[   91.803312][ T7787] syzkaller0: entered promiscuous mode
[   91.806432][ T7787] syzkaller0: entered allmulticast mode
[   91.822436][ T7791] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   91.934328][ T7797] bridge0: port 1(macsec0) entered blocking state
[   91.936997][ T7797] bridge0: port 1(macsec0) entered disabled state
[   91.953158][ T7797] macsec0: entered allmulticast mode
[   91.956305][ T7797] veth1_macvtap: entered allmulticast mode
[   91.960902][ T7797] macsec0: entered promiscuous mode
[   91.964596][ T7797] bridge0: port 1(macsec0) entered blocking state
[   91.966994][ T7797] bridge0: port 1(macsec0) entered forwarding state
[   92.044683][ T7800] bond13: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   92.062830][ T7796] 8021q: adding VLAN 0 to HW filter on device bond13
[   92.066204][ T5907] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.124853][ T7796] veth5: entered promiscuous mode
[   92.133181][ T7796] bond13: (slave veth5): Enslaving as a backup interface with a down link
[   92.158213][ T7796] syz_tun: left allmulticast mode
[   92.160571][ T7796] syz_tun: left promiscuous mode
[   92.163047][ T7796] bridge0: port 1(syz_tun) entered disabled state
[   92.174674][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   92.177391][ T5907] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.196022][ T7796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   92.287972][ T7821] delete_channel: no stack
[   92.310649][ T7821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.358916][ T7821] syzkaller0: entered promiscuous mode
[   92.361261][ T7821] syzkaller0: entered allmulticast mode
[   92.364684][ T7821] tipc: Resetting bearer <eth:syzkaller0>
[   92.579466][ T7820] tipc: Resetting bearer <eth:syzkaller0>
[   92.671075][   T33] audit: type=1800 audit(1757938104.117:3): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.540" name="memory.events" dev="tmpfs" ino=1060 res=0 errno=0
[   93.413887][ T5893] tipc: Node number set to 898981907
[   93.612114][ T7820] tipc: Disabling bearer <eth:syzkaller0>
[   93.619964][ T7844] mac80211_hwsim hwsim4 wlan1: Caught tx_queue_len zero misconfig
[   93.722887][ T7854] bpq0: left allmulticast mode
[   93.739319][ T7854] ip_vti0: Caught tx_queue_len zero misconfig
[   93.782079][ T7857] 8021q: adding VLAN 0 to HW filter on device bond21
[   93.967010][ T7870] veth6: entered promiscuous mode
[   94.001912][ T7871] bridge8: port 1(veth0_to_bond) entered blocking state
[   94.005225][ T7871] bridge8: port 1(veth0_to_bond) entered disabled state
[   94.008873][ T7871] veth0_to_bond: entered allmulticast mode
[   94.012801][ T7871] veth0_to_bond: entered promiscuous mode
[   94.049907][ T7878] batadv_slave_1: entered promiscuous mode
[   94.066586][ T7878] batadv_slave_1: left promiscuous mode
[   94.175302][ T7885] hsr_slave_1 (unregistering): left promiscuous mode
[   94.181301][ T7887] IPVS: Unknown mcast interface: vcan0
[   94.186985][ T7887] validate_nla: 6 callbacks suppressed
[   94.186997][ T7887] netlink: 'syz.2.556': attribute type 1 has an invalid length.
[   94.210003][ T7887] bond18: entered promiscuous mode
[   94.212692][ T7887] 8021q: adding VLAN 0 to HW filter on device bond18
[   94.243019][ T7887] 8021q: adding VLAN 0 to HW filter on device bond19
[   94.247329][ T7887] bond18: (slave bond19): making interface the new active one
[   94.250293][ T7887] bond19: entered promiscuous mode
[   94.252882][ T7887] bond18: (slave bond19): Enslaving as an active interface with an up link
[   94.279287][ T7891] 8021q: adding VLAN 0 to HW filter on device bond22
[   94.282015][ T7891] bridge0: port 2(bond22) entered blocking state
[   94.284552][ T7891] bridge0: port 2(bond22) entered disabled state
[   94.286727][ T7891] bond22: entered allmulticast mode
[   94.291754][ T7891] bond22: entered promiscuous mode
[   94.295114][ T7891] bridge0: port 2(bond22) entered blocking state
[   94.297568][ T7891] bridge0: port 2(bond22) entered forwarding state
[   94.355757][ T7891] netlink: 'syz.1.557': attribute type 1 has an invalid length.
[   94.419246][ T7899] netlink: 'syz.2.560': attribute type 1 has an invalid length.
[   94.581496][ T7910] netlink: 'syz.2.563': attribute type 2 has an invalid length.
[   94.595319][ T7910] erspan0: left allmulticast mode
[   94.626773][ T7910] dummy0: left promiscuous mode
[   94.646901][ T7910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.739275][ T7914] __nla_validate_parse: 16 callbacks suppressed
[   94.739284][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.563'.
[   94.789826][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.794982][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.799668][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.806671][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.810784][ T7925] erspan0: left allmulticast mode
[   94.816013][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.821534][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.826308][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.830914][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.836814][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.845583][ T7925] 8021q: adding VLAN 0 to HW filter on device team0
[   94.850342][ T7925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.862082][ T2993] bridge0: port 2(bond22) entered disabled state
[   94.979920][ T7933] netlink: 'syz.0.569': attribute type 3 has an invalid length.
[   95.099441][ T7944] netlink: 'syz.0.571': attribute type 10 has an invalid length.
[   95.159936][ T7948] pim6reg1: entered promiscuous mode
[   95.164021][ T7948] pim6reg1: entered allmulticast mode
[   95.243495][ T7951] pim6reg: entered allmulticast mode
[   95.256412][ T7951] pim6reg: left allmulticast mode
[   95.557507][ T7974] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   95.565072][ T7974] netlink: 'syz.0.580': attribute type 1 has an invalid length.
[   95.600848][ T7974] 8021q: adding VLAN 0 to HW filter on device bond14
[   95.616115][ T7974] bond14: (slave gretap1): making interface the new active one
[   95.623110][ T7974] bond14: (slave gretap1): Enslaving as an active interface with an up link
[   95.650700][ T7970] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   95.806546][   T24] IPVS: starting estimator thread 0...
[   95.882560][ T7986] 8021q: VLANs not supported on bond0
[   95.894608][ T7982] IPVS: using max 41 ests per chain, 98400 per kthread
[   96.016878][ T7995] netdevsim netdevsim1: Direct firmware load for .
[   96.016878][ T7995]  failed with error -2
[   96.023333][ T7995] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   96.023333][ T7995] 
[   96.230735][ T8000] netlink: 'syz.0.587': attribute type 10 has an invalid length.
[   96.337422][ T8003] netlink: 'syz.0.587': attribute type 10 has an invalid length.
[   96.640130][ T8018] vlan2: entered allmulticast mode
[   96.642060][ T8018] bridge0: entered allmulticast mode
[   96.644565][ T8018] bridge8: port 1(vlan2) entered blocking state
[   96.646946][ T8018] bridge8: port 1(vlan2) entered disabled state
[   96.650256][ T8018] vlan2: entered promiscuous mode
[   96.652067][ T8018] bridge0: entered promiscuous mode
[   96.662644][ T8018] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[   96.881022][ T8034] netlink: 'syz.0.596': attribute type 1 has an invalid length.
[   96.900401][ T8030] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20003
[   96.938472][ T8034] bond15: (slave bridge9): making interface the new active one
[   96.942150][ T8034] bond15: (slave bridge9): Enslaving as an active interface with an up link
[   97.017864][ T8038] bond0: (slave wlan1): Releasing backup interface
[   97.130558][ T8040] bridge0: port 1(bond16) entered blocking state
[   97.133556][ T8040] bridge0: port 1(bond16) entered disabled state
[   97.138496][ T8040] bond16: entered allmulticast mode
[   97.143084][ T8040] bond16: entered promiscuous mode
[   97.208050][ T8055] team_slave_1: Caught tx_queue_len zero misconfig
[   97.387061][ T8074] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   97.429156][ T8078] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   97.460967][ T8078] mac80211_hwsim hwsim9 wlan0: Caught tx_queue_len zero misconfig
[   97.489367][ T8082] IPVS: Unknown mcast interface: veth1_to_batadv
[   97.573245][ T8088] 8021q: adding VLAN 0 to HW filter on device bond23
[   97.762176][ T8102] vlan4: entered promiscuous mode
[   97.765459][ T8102] vlan4: entered allmulticast mode
[   97.767211][ T8102] hsr_slave_1: entered allmulticast mode
[   98.136346][ T8115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   98.157830][ T8126] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   98.163395][ T8124] tc_dump_action: action bad kind
[   98.210011][ T8115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   98.240623][ T8115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   98.285575][ T8115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   98.296831][ T8130] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   98.312509][ T8130] batman_adv: batadv0: Removing interface: virt_wifi0
[   98.360562][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   98.374647][ T7021] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   98.390412][ T7021] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   98.395444][ T7021] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   98.442464][ T8133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.447644][ T8133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   98.483003][ T8134] 8021q: adding VLAN 0 to HW filter on device batadv3
[   98.488672][ T8134] team0: Port device batadv3 added
[   98.518552][ T8133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.522192][ T8133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   98.600283][ T8133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.615022][ T8133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   98.689088][ T8133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.693429][ T8133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   98.792842][ T8135] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   98.797908][ T8135] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   98.808579][ T8135] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   98.812165][ T8135] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   98.821315][ T8135] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   98.825809][ T8135] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   98.837015][ T8135] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   98.851049][ T8135] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   98.924407][ T8144] 8021q: adding VLAN 0 to HW filter on device bond17
[   98.936517][ T8135] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.940465][ T8135] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.959126][ T8135] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.962721][ T8135] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.084210][   T33] audit: type=1800 audit(1757938110.517:4): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.627" name="cgroup.controllers" dev="tmpfs" ino=967 res=0 errno=0
[   99.209700][ T8174] validate_nla: 5 callbacks suppressed
[   99.209725][ T8174] netlink: 'syz.0.636': attribute type 1 has an invalid length.
[   99.250698][ T8174] 8021q: adding VLAN 0 to HW filter on device bond18
[   99.273903][ T8174] erspan0: entered allmulticast mode
[   99.287109][ T8174] bond18: (slave erspan0): making interface the new active one
[   99.291376][ T8174] bond18: (slave erspan0): Enslaving as an active interface with an up link
[   99.471978][ T8199] netlink: 'syz.1.641': attribute type 1 has an invalid length.
[   99.531481][ T8199] bond24: entered promiscuous mode
[   99.535142][ T8199] 8021q: adding VLAN 0 to HW filter on device bond24
[   99.547227][ T8187] macsec0: entered promiscuous mode
[   99.549256][ T8187] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[   99.551700][ T8187] macsec0: entered allmulticast mode
[   99.553547][ T8187] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[   99.573263][ T8203] 8021q: adding VLAN 0 to HW filter on device bond24
[   99.577036][ T8203] bond24: (slave wireguard3): The slave device specified does not support setting the MAC address
[   99.581505][ T8203] bond24: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[   99.591175][ T8203] bond24: (slave wireguard3): making interface the new active one
[   99.594843][ T8203] wireguard3: entered promiscuous mode
[   99.598340][ T8203] bond24: (slave wireguard3): Enslaving as an active interface with an up link
[   99.788993][ T8214] bridge10: port 1(veth7) entered blocking state
[   99.794596][ T8214] bridge10: port 1(veth7) entered disabled state
[   99.797532][ T8214] veth7: entered allmulticast mode
[   99.806635][ T8214] veth7: entered promiscuous mode
[   99.895957][ T8229] netlink: 'syz.2.647': attribute type 12 has an invalid length.
[   99.909017][ T8229] __nla_validate_parse: 39 callbacks suppressed
[   99.909026][ T8229] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.647'.
[   99.991169][ T8242] netlink: 'syz.2.650': attribute type 1 has an invalid length.
[  100.005720][ T8242] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  100.115983][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'.
[  100.184626][ T8255] bridge5: port 1(veth3) entered blocking state
[  100.186806][ T8255] bridge5: port 1(veth3) entered disabled state
[  100.188960][ T8255] veth3: entered allmulticast mode
[  100.193396][ T8255] veth3: entered promiscuous mode
[  100.218671][ T8262] veth0_to_bond: left allmulticast mode
[  100.220847][ T8262] veth0_to_bond: left promiscuous mode
[  100.223052][ T8262] bridge2: port 1(veth0_to_bond) entered disabled state
[  100.227321][ T8262] bridge5: port 2(veth0_to_bond) entered blocking state
[  100.229902][ T8262] bridge5: port 2(veth0_to_bond) entered disabled state
[  100.232579][ T8262] veth0_to_bond: entered allmulticast mode
[  100.246037][ T8262] veth0_to_bond: entered promiscuous mode
[  100.249893][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  100.261121][ T8255] vlan2: entered allmulticast mode
[  100.263367][ T8255] veth1: entered allmulticast mode
[  100.550928][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[  100.702171][ T8285] bridge0: port 1(macsec0) entered disabled state
[  100.743772][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  100.796455][ T8285] veth1_macvtap: left allmulticast mode
[  100.836365][ T8285] gretap1: left allmulticast mode
[  100.842891][ T8285] bridge2: left promiscuous mode
[  100.846550][ T8285] bridge2: left allmulticast mode
[  100.849402][ T8285] ipvlan3: left promiscuous mode
[  100.856514][ T8285] bond5: left promiscuous mode
[  100.858794][ T8285] geneve2: left promiscuous mode
[  100.867825][ T8285] xfrm1: left promiscuous mode
[  100.869826][ T8285] xfrm1: left allmulticast mode
[  100.873323][ T8285] bond8: left promiscuous mode
[  100.876830][ T8285] wireguard0: left promiscuous mode
[  100.895960][ T8285] bond10: left promiscuous mode
[  100.902539][ T8285] bond13: left promiscuous mode
[  100.908565][ T8285] bond14: left promiscuous mode
[  100.911848][ T8285] wireguard2: left promiscuous mode
[  100.924349][ T8285] tipc: Resetting bearer <eth:syzkaller0>
[  100.931133][ T8285] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  100.934112][ T8285] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  100.995614][ T8285] veth6: left promiscuous mode
[  101.005051][ T8285] bond24: left promiscuous mode
[  101.006664][ T8285] wireguard3: left promiscuous mode
[  101.030701][ T5907] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  101.035679][ T5907] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.038518][ T5907] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  101.041617][ T5907] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.049487][ T5907] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  101.053356][ T5907] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.058130][ T5907] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  101.061839][ T5907] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  101.268942][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[  101.510720][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.522226][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.543611][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'.
[  101.668132][ T8333] netlink: 'syz.2.668': attribute type 10 has an invalid length.
[  101.676692][ T8333] team0: Port device dummy0 added
[  102.117712][ T8363] bond0: (slave vlan1): Opening slave failed
[  102.386472][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[  102.395895][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[  102.635857][ T8378] netlink: 'syz.1.676': attribute type 16 has an invalid length.
[  102.643107][ T8378] netlink: 'syz.1.676': attribute type 17 has an invalid length.
[  102.653163][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'.
[  102.732082][ T8381] netlink: 'syz.0.678': attribute type 1 has an invalid length.
[  102.738501][ T8381] netlink: 224 bytes leftover after parsing attributes in process `syz.0.678'.
[  103.353187][ T8408] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  103.356497][ T8408] netlink: 'syz.2.684': attribute type 2 has an invalid length.
[  103.450277][ T8410] 8021q: adding VLAN 0 to HW filter on device bond25
[  103.482555][ T8415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.603047][ T8421] bond20: entered promiscuous mode
[  103.607794][ T8421] 8021q: adding VLAN 0 to HW filter on device bond20
[  103.675198][ T8421] 8021q: adding VLAN 0 to HW filter on device bond21
[  103.680666][ T8421] bond20: (slave bond21): making interface the new active one
[  103.687870][ T8421] bond21: entered promiscuous mode
[  103.690982][ T8421] bond20: (slave bond21): Enslaving as an active interface with an up link
[  103.767345][ T8433] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  104.051734][ T8450] syzkaller0: create flow: hash 1864069901 index 1
[  104.095665][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  104.099091][ T8449] syzkaller0: delete flow: hash 1864069901 index 1
[  105.069702][ T8457] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  105.071835][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  105.078545][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  105.081387][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  105.165922][ T8472] validate_nla: 6 callbacks suppressed
[  105.165931][ T8472] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[  105.187997][ T8472] 8021q: adding VLAN 0 to HW filter on device bond22
[  105.243430][ T8472] bond22: (slave ip6erspan0): making interface the new active one
[  105.282342][ T8472] bond22: (slave ip6erspan0): Enslaving as an active interface with an up link
[  105.288611][ T8481] __nla_validate_parse: 43 callbacks suppressed
[  105.288621][ T8481] netlink: 108 bytes leftover after parsing attributes in process `syz.1.701'.
[  105.310334][ T8481] netlink: 108 bytes leftover after parsing attributes in process `syz.1.701'.
[  105.313244][ T8481] netlink: 84 bytes leftover after parsing attributes in process `syz.1.701'.
[  105.368559][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'.
[  105.429876][ T8497] netlink: 'syz.2.704': attribute type 13 has an invalid length.
[  105.432627][ T8497] netlink: 'syz.2.704': attribute type 17 has an invalid length.
[  105.458744][ T8497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.466847][ T8504] netlink: 'syz.1.707': attribute type 10 has an invalid length.
[  105.470711][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.707'.
[  105.480102][ T8504] dummy0: entered promiscuous mode
[  105.483575][ T8504] bridge0: port 3(dummy0) entered blocking state
[  105.486751][ T8504] bridge0: port 3(dummy0) entered disabled state
[  105.489918][ T8504] dummy0: entered allmulticast mode
[  105.498164][ T8501] 8021q: VLANs not supported on bond0
[  105.573078][ T8508] tipc: New replicast peer: 0.0.0.0
[  105.576029][ T8508] tipc: Enabled bearer <udp:syz2>, priority 10
[  105.628362][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.710'.
[  105.648379][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.710'.
[  105.654624][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.710'.
[  105.679887][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'.
[  105.737177][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'.
[  106.092271][ T8557] bond4: option mode: unable to set because the bond device is up
[  106.113092][ T8557] bond18: (slave erspan0): Releasing active interface
[  106.125697][ T8557] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.158872][ T8555] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  106.238691][ T8567] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  106.510837][ T8583] vlan0 (unregistering): left allmulticast mode
[  106.513598][ T8583] bridge0: left allmulticast mode
[  106.536176][ T8583] vlan0 (unregistering): left promiscuous mode
[  106.538777][ T8583] bridge0: left promiscuous mode
[  106.541915][ T8583] bridge6: port 1(vlan0) entered disabled state
[  106.571067][ T8586] 8021q: adding VLAN 0 to HW filter on device bond23
[  106.575166][ T8586] team0: Port device bond23 added
[  106.642105][ T8592] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0004:0300:0000:0000:7d01 with DS=0xe
[  106.757535][ T8607] netlink: 'syz.0.734': attribute type 1 has an invalid length.
[  106.791114][ T8607] 8021q: adding VLAN 0 to HW filter on device bond19
[  106.800277][ T8607] bond19: (slave erspan0): making interface the new active one
[  106.814243][ T8607] bond19: (slave erspan0): Enslaving as an active interface with an up link
[  106.935304][ T8623] netlink: 'syz.0.737': attribute type 1 has an invalid length.
[  106.961699][ T8623] 8021q: adding VLAN 0 to HW filter on device bond20
[  107.046224][ T8628] netlink: 'syz.2.739': attribute type 1 has an invalid length.
[  107.060430][ T8628] 8021q: adding VLAN 0 to HW filter on device bond24
[  107.078443][ T8628] bond24: (slave veth5): Enslaving as an active interface with a down link
[  107.086150][ T8629] gretap2: entered promiscuous mode
[  107.090702][ T8629] bond24: (slave gretap2): making interface the new active one
[  107.096332][ T8629] bond24: (slave gretap2): Enslaving as an active interface with an up link
[  107.105033][ T8632] ip6_tunnel: non-ECT from fe88:a43d:e1a4:00e8:0300:0000:0000:7d01 with DS=0xe
[  107.129714][ T8636] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[  107.159035][ T8636] 8021q: adding VLAN 0 to HW filter on device bond25
[  107.339850][ T8641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.529909][ T8660] syzkaller0: entered promiscuous mode
[  107.532105][ T8660] syzkaller0: entered allmulticast mode
[  107.600273][ T8673] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  107.641821][ T8679] tc_dump_action: action bad kind
[  107.729966][ T8689] pim6reg: entered allmulticast mode
[  107.738432][ T8689] pim6reg: left allmulticast mode
[  132.735837][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.863337][ T8723] __nla_validate_parse: 14 callbacks suppressed
[  132.863347][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'.
[  132.868082][ T8722] netlink: 'syz.1.763': attribute type 1 has an invalid length.
[  132.895427][ T8722] 8021q: adding VLAN 0 to HW filter on device bond27
[  132.898425][ T8726] : renamed from ip6_vti0 (while UP)
[  132.913709][ T8726] Bluetooth: MGMT ver 1.23
[  132.919065][ T8726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.764'.
[  133.035372][ T8741] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0600:0000:0000:7d01 with DS=0xe
[  133.147929][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'.
[  133.165133][ T8754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'.
[  133.220625][ T8758] netlink: 'syz.1.770': attribute type 13 has an invalid length.
[  133.307629][ T8763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.773'.
[  133.442077][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.500930][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'.
[  133.622784][ T8780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.746940][ T8786] netlink: 'syz.2.777': attribute type 10 has an invalid length.
[  133.750970][ T8785] netlink: 'syz.2.777': attribute type 10 has an invalid length.
[  133.764830][ T8785] team0: Port device dummy0 removed
[  133.872820][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'.
[  133.882428][ T8803] netlink: 'syz.2.781': attribute type 1 has an invalid length.
[  133.886809][ T8801] vlan0: entered allmulticast mode
[  133.889119][ T8801] bridge0: entered allmulticast mode
[  133.891778][ T8803] netlink: 244 bytes leftover after parsing attributes in process `syz.2.781'.
[  133.958704][ T8801] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  134.013894][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  134.091546][ T8813] tunl0: Caught tx_queue_len zero misconfig
[  134.122853][ T8813] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  134.292048][ T8832] netlink: 'syz.2.791': attribute type 1 has an invalid length.
[  134.311999][ T8836] netlink: 'syz.1.788': attribute type 10 has an invalid length.
[  134.332539][ T8836] dummy0: left allmulticast mode
[  134.337294][ T8836] dummy0: left promiscuous mode
[  134.339143][ T8836] bridge0: port 3(dummy0) entered disabled state
[  134.345429][ T8836] team0: Port device dummy0 added
[  134.348336][ T8836] netlink: 'syz.1.788': attribute type 10 has an invalid length.
[  134.361441][ T8832] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  134.373398][ T8832] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  134.410081][ T8836] team0: Port device dummy0 removed
[  134.416153][ T8836] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  134.470655][ T8847] netlink: 'syz.1.792': attribute type 13 has an invalid length.
[  134.474392][ T8847] netlink: 'syz.1.792': attribute type 17 has an invalid length.
[  134.538873][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.543234][ T8847] 8021q: adding VLAN 0 to HW filter on device team0
[  134.548249][ T8847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.740351][ T8861] IPv6: sit2: Disabled Multicast RS
[  134.793356][ T8863] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:2800:0000:0000:7d01 with DS=0xe
[  134.886344][ T8865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.798'.
[  134.982292][ T8870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'.
[  135.142301][ T8876] macvtap0: entered promiscuous mode
[  135.147293][ T8876] macvtap0: entered allmulticast mode
[  135.150278][ T8876] bond0: entered allmulticast mode
[  135.152563][ T8876] bond0: entered promiscuous mode
[  135.155670][ T8876] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  135.158932][ T8876] team0: Device macvtap0 failed to register rx_handler
[  135.162511][ T8876] bond0: left allmulticast mode
[  135.165911][ T8876] bond0: left promiscuous mode
[  135.282292][ T8878] 8021q: adding VLAN 0 to HW filter on device bond28
[  135.300895][ T8878] veth7: entered promiscuous mode
[  135.307752][ T8878] bond28: (slave veth7): Enslaving as an active interface with an up link
[  135.453343][ T8885] tipc: Can't bind to reserved service type 2
[  135.758597][ T8916] k*: entered promiscuous mode
[  135.768572][ T8919] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0002:d800:0000:0000:7d01 with DS=0xe
[  135.791282][ T8912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.860541][ T8927] 8021q: adding VLAN 0 to HW filter on device bond22
[  135.863056][ T8927] bridge0: port 3(bond22) entered blocking state
[  135.872591][ T8927] bridge0: port 3(bond22) entered disabled state
[  135.875959][ T8927] bond22: entered allmulticast mode
[  135.878844][ T8927] bond22: entered promiscuous mode
[  135.880891][ T8927] bridge0: port 3(bond22) entered blocking state
[  135.883082][ T8927] bridge0: port 3(bond22) entered forwarding state
[  135.900844][   T26] bridge0: port 3(bond22) entered disabled state
[  136.107480][ T8947] ieee802154 phy1 wpan1: encryption failed: -22
[  136.315459][ T8980] bond0: entered promiscuous mode
[  136.333307][ T8980] bond0: left promiscuous mode
[  136.789417][ T9022] syzkaller1: entered promiscuous mode
[  136.791410][ T9022] syzkaller1: entered allmulticast mode
[  136.881847][ T9036] xfrm2: entered promiscuous mode
[  136.886822][ T9036] xfrm2: entered allmulticast mode
[  137.313866][ T5893] IPVS: starting estimator thread 0...
[  137.388111][ T9100] 8021q: adding VLAN 0 to HW filter on device bond30
[  137.391240][ T9100] bridge7: port 1(bond30) entered blocking state
[  137.394922][ T9100] bridge7: port 1(bond30) entered disabled state
[  137.397458][ T9100] bond30: entered allmulticast mode
[  137.400848][ T9100] bridge7: port 1(bond30) entered blocking state
[  137.403086][ T9100] bridge7: port 1(bond30) entered forwarding state
[  137.403793][ T9098] IPVS: using max 82 ests per chain, 196800 per kthread
[  137.679823][ T9135] veth0_to_team: entered promiscuous mode
[  137.731603][ T9140] tls_set_device_offload_rx: netdev not found
[  138.082988][ T9151] __nla_validate_parse: 22 callbacks suppressed
[  138.083001][ T9151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.850'.
[  138.113476][ T1091] bridge7: port 1(bond30) entered disabled state
[  138.191212][ T9156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.851'.
[  138.524447][ T9173] validate_nla: 10 callbacks suppressed
[  138.524460][ T9173] netlink: 'syz.2.858': attribute type 10 has an invalid length.
[  138.524569][ T9172] netlink: 'syz.2.858': attribute type 10 has an invalid length.
[  138.528725][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'.
[  138.542963][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.859'.
[  138.583044][ T9175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.859'.
[  138.583053][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.859'.
[  138.601770][ T9182] netlink: 56 bytes leftover after parsing attributes in process `syz.1.860'.
[  138.602326][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'.
[  138.605655][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'.
[  138.620703][ T9184] netlink: 96 bytes leftover after parsing attributes in process `syz.1.860'.
[  138.632910][ T9179] pimreg: entered allmulticast mode
[  138.662033][ T9184] vlan0: entered allmulticast mode
[  138.664559][ T9184] gretap0: entered allmulticast mode
[  138.697063][ T9189] pim6reg: entered allmulticast mode
[  138.704310][ T9190] pim6reg: left allmulticast mode
[  138.728767][ T9188] syz.0.862: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  138.737836][ T9188] CPU: 0 UID: 0 PID: 9188 Comm: syz.0.862 Not tainted syzkaller #0 PREEMPT(full) 
[  138.737848][ T9188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.737852][ T9188] Call Trace:
[  138.737856][ T9188]  <TASK>
[  138.737859][ T9188]  dump_stack_lvl+0x189/0x250
[  138.737873][ T9188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.737881][ T9188]  ? __pfx__printk+0x10/0x10
[  138.737890][ T9188]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  138.737899][ T9188]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  138.737907][ T9188]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  138.737916][ T9188]  warn_alloc+0x214/0x310
[  138.737928][ T9188]  ? __pfx_warn_alloc+0x10/0x10
[  138.737941][ T9188]  ? __get_vm_area_node+0x28f/0x300
[  138.737950][ T9188]  ? xskq_create+0xbf/0x170
[  138.737959][ T9188]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  138.737979][ T9188]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  138.737990][ T9188]  ? __kasan_kmalloc+0x93/0xb0
[  138.738000][ T9188]  vmalloc_user_noprof+0xad/0xf0
[  138.738010][ T9188]  ? xskq_create+0xbf/0x170
[  138.738016][ T9188]  xskq_create+0xbf/0x170
[  138.738024][ T9188]  xsk_init_queue+0xb0/0x110
[  138.738031][ T9188]  xsk_setsockopt+0x57b/0x8d0
[  138.738042][ T9188]  ? __pfx_xsk_setsockopt+0x10/0x10
[  138.738052][ T9188]  ? __pfx_aa_sk_perm+0x10/0x10
[  138.738063][ T9188]  ? __fget_files+0x2a/0x420
[  138.738068][ T9188]  ? aa_sock_opt_perm+0xff/0x1b0
[  138.738076][ T9188]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  138.738083][ T9188]  ? __pfx_xsk_setsockopt+0x10/0x10
[  138.738094][ T9188]  do_sock_setsockopt+0x17c/0x1b0
[  138.738104][ T9188]  __x64_sys_setsockopt+0x13f/0x1b0
[  138.738114][ T9188]  do_syscall_64+0xfa/0x3b0
[  138.738121][ T9188]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.738128][ T9188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.738134][ T9188]  ? exc_page_fault+0x9f/0xf0
[  138.738142][ T9188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.738176][ T9188] RIP: 0033:0x7f9df238eba9
[  138.738188][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.738196][ T9188] RSP: 002b:00007f9df3132038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  138.738207][ T9188] RAX: ffffffffffffffda RBX: 00007f9df25d5fa0 RCX: 00007f9df238eba9
[  138.738214][ T9188] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  138.738220][ T9188] RBP: 00007f9df2411e19 R08: 0000000000000004 R09: 0000000000000000
[  138.738225][ T9188] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  138.738232][ T9188] R13: 00007f9df25d6038 R14: 00007f9df25d5fa0 R15: 00007ffe2df924b8
[  138.738251][ T9188]  </TASK>
[  138.738255][ T9188] Mem-Info:
[  138.851646][ T9188] active_anon:12197 inactive_anon:0 isolated_anon:0
[  138.851646][ T9188]  active_file:1390 inactive_file:38272 isolated_file:0
[  138.851646][ T9188]  unevictable:1768 dirty:104 writeback:0
[  138.851646][ T9188]  slab_reclaimable:10263 slab_unreclaimable:74971
[  138.851646][ T9188]  mapped:19328 shmem:2435 pagetables:1170
[  138.851646][ T9188]  sec_pagetables:0 bounce:0
[  138.851646][ T9188]  kernel_misc_reclaimable:0
[  138.851646][ T9188]  free:259018 free_pcp:25512 free_cma:0
[  138.869369][ T9188] Node 0 active_anon:38072kB inactive_anon:0kB active_file:1924kB inactive_file:39732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35292kB dirty:232kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5616kB pagetables:2556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  138.881632][ T9188] Node 1 active_anon:10716kB inactive_anon:0kB active_file:3636kB inactive_file:113356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42020kB dirty:184kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9272kB pagetables:1920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  138.894067][ T9188] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  138.904824][ T9188] lowmem_reserve[]: 0 811 811 811 811
[  138.907057][ T9188] Node 0 DMA32 free:279360kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38072kB inactive_anon:0kB active_file:1924kB inactive_file:39732kB unevictable:3536kB writepending:232kB present:1556484kB managed:830876kB mlocked:0kB bounce:0kB free_pcp:37640kB local_pcp:16952kB free_cma:0kB
[  138.918114][ T9188] lowmem_reserve[]: 0 0 0 0 0
[  138.919759][ T9188] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  138.930783][ T9188] lowmem_reserve[]: 0 0 854 854 854
[  138.932989][ T9188] Node 1 Normal free:282860kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10716kB inactive_anon:0kB active_file:3636kB inactive_file:113356kB unevictable:3536kB writepending:184kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:64684kB local_pcp:19012kB free_cma:0kB
[  138.946810][ T9188] lowmem_reserve[]: 0 0 0 0 0
[  138.949041][ T9188] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  138.954618][ T9188] Node 0 DMA32: 216*4kB (UM) 150*8kB (UME) 325*16kB (UME) 113*32kB (UME) 53*64kB (UME) 21*128kB (UM) 9*256kB (UME) 4*512kB (UME) 2*1024kB (M) 3*2048kB (UME) 61*4096kB (UM) = 279360kB
[  138.962125][ T9188] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  138.969068][ T9188] Node 1 Normal: 659*4kB (UM) 1066*8kB (UME) 635*16kB (UME) 201*32kB (UME) 255*64kB (UM) 125*128kB (UM) 96*256kB (UME) 13*512kB (UM) 49*1024kB (UME) 17*2048kB (UME) 26*4096kB (UM) = 282796kB
[  138.977202][ T9188] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.981124][ T9188] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.985293][ T9188] 42097 total pagecache pages
[  138.987411][ T9188] 0 pages in swap cache
[  138.989168][ T9188] Free swap  = 124996kB
[  138.990932][ T9188] Total swap = 124996kB
[  138.992683][ T9188] 786301 pages RAM
[  138.994422][ T9188] 0 pages HighMem/MovableOnly
[  138.996265][ T9188] 241350 pages reserved
[  138.998139][ T9188] 0 pages cma reserved
[  139.098987][ T9207] netlink: 'syz.1.864': attribute type 10 has an invalid length.
[  139.120984][ T9207] bond0: (slave dummy0): Releasing backup interface
[  139.130066][ T9207] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  139.140364][ T9207] team0: Failed to send options change via netlink (err -105)
[  139.151463][ T9207] team0: Port device dummy0 added
[  139.162411][ T9210] netlink: 'syz.1.864': attribute type 10 has an invalid length.
[  139.178805][ T9210] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  139.189907][ T9210] team0: Failed to send options change via netlink (err -105)
[  139.192676][ T9210] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  139.205520][ T9210] team0: Port device dummy0 removed
[  139.228350][ T9210] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  139.281048][ T9220] xt_policy: too many policy elements
[  139.299175][ T9220] ip6tnl0: Caught tx_queue_len zero misconfig
[  139.470450][ T9226] veth9: entered promiscuous mode
[  139.791980][ T9263] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  139.928660][ T9278] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0100:0000:7d01 with DS=0xe
[  139.930786][ T9280] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  140.066954][ T9294] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  140.096373][ T9294] bond24: entered promiscuous mode
[  140.098182][ T9294] bond24: entered allmulticast mode
[  140.100868][ T9294] 8021q: adding VLAN 0 to HW filter on device bond24
[  140.305271][ T9307] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  140.327315][ T9318] netlink: 'syz.2.885': attribute type 1 has an invalid length.
[  140.361105][ T9318] bond31: entered promiscuous mode
[  140.363582][ T9318] 8021q: adding VLAN 0 to HW filter on device bond31
[  140.408856][ T9318] 8021q: adding VLAN 0 to HW filter on device bond31
[  140.411394][ T9318] bond31: (slave wireguard0): The slave device specified does not support setting the MAC address
[  140.436889][ T9318] bond31: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  140.443239][ T9331] netlink: 'syz.0.888': attribute type 1 has an invalid length.
[  140.448905][ T9329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  140.451447][ T9329] IPv6: NLM_F_CREATE should be set when creating new route
[  140.454109][ T9329] IPv6: NLM_F_CREATE should be set when creating new route
[  140.459033][ T9318] bond31: (slave wireguard0): making interface the new active one
[  140.462702][ T9329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  140.467744][ T9318] wireguard0: entered promiscuous mode
[  140.470870][ T9318] bond31: (slave wireguard0): Enslaving as an active interface with an up link
[  140.517924][ T9331] 8021q: adding VLAN 0 to HW filter on device bond25
[  140.544286][ T9340] macsec1: entered promiscuous mode
[  140.546209][ T9340] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  140.548744][ T9340] macsec1: entered allmulticast mode
[  140.633354][ T9346] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  140.826964][ T9364] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0300:0000:7d01 with DS=0xe
[  141.035993][ T9354] infiniband syz2: set active
[  141.038568][ T9354] infiniband syz2: added bond0
[  141.067211][ T9354] RDS/IB: syz2: added
[  141.074596][ T9354] smc: adding ib device syz2 with port count 1
[  141.080557][ T9354] smc:    ib device syz2 port 1 has no pnetid
[  141.328624][ T9401] netlink: 'syz.1.902': attribute type 1 has an invalid length.
[  141.376424][ T9401] 8021q: adding VLAN 0 to HW filter on device bond29
[  142.370013][ T9460] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0003:0400:0000:7d01 with DS=0xe
[  142.512556][ T9464] netlink: 'syz.0.915': attribute type 1 has an invalid length.
[  142.530864][ T9464] 8021q: adding VLAN 0 to HW filter on device bond26
[  142.540022][ T9464] ipvlan1: entered allmulticast mode
[  142.541861][ T9464] bond26: entered allmulticast mode
[  142.555879][ T9467] trusted_key: syz.1.914 sent an empty control message without MSG_MORE.
[  142.663453][ T9476] batadv1: entered promiscuous mode
[  142.672462][ T9476] batadv1: entered allmulticast mode
[  142.790548][ T7021] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  142.793350][ T7021] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  142.799897][ T7021] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  142.802715][ T7021] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  142.831971][ T9492] netlink: 'syz.0.920': attribute type 30 has an invalid length.
[  143.136841][ T9510] team0: Caught tx_queue_len zero misconfig
[  143.431570][ T9520] __nla_validate_parse: 19 callbacks suppressed
[  143.431578][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'.
[  143.579408][ T9525] netlink: 68 bytes leftover after parsing attributes in process `syz.2.929'.
[  143.663269][ T9530] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.931'.
[  143.667407][ T9530] validate_nla: 5 callbacks suppressed
[  143.667415][ T9530] netlink: 'syz.2.931': attribute type 1 has an invalid length.
[  143.687214][ T9530] 8021q: adding VLAN 0 to HW filter on device bond33
[  143.837160][ T9535] pimreg: entered allmulticast mode
[  143.873510][ T9543] netlink: 'syz.2.934': attribute type 13 has an invalid length.
[  143.877246][ T9543] netlink: 'syz.2.934': attribute type 17 has an invalid length.
[  143.893978][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'.
[  143.907658][ T9543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.233199][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'.
[  144.250936][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'.
[  144.639417][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'.
[  144.816725][ T9573] IPv6: sit3: Disabled Multicast RS
[  144.846566][ T9562] syzkaller0: entered promiscuous mode
[  144.854697][ T9562] syzkaller0: entered allmulticast mode
[  145.021084][ T9579] netlink: 'syz.2.943': attribute type 10 has an invalid length.
[  145.079605][ T9580] netlink: 'syz.2.943': attribute type 10 has an invalid length.
[  145.082926][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.943'.
[  145.988395][ T9580] batadv0: entered promiscuous mode
[  145.990213][ T9580] batadv0: entered allmulticast mode
[  145.992231][ T9580] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  146.098563][ T5893] IPVS: starting estimator thread 0...
[  146.098637][ T9590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.947'.
[  146.117840][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'.
[  146.193774][ T9593] IPVS: using max 82 ests per chain, 196800 per kthread
[  146.407375][ T9600] erspan0: left allmulticast mode
[  146.441027][ T9600] veth0_to_team: left promiscuous mode
[  146.497012][ T9600] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  146.501553][ T9600] bond2: left promiscuous mode
[  146.510744][ T9600] geneve2: left promiscuous mode
[  146.516196][ T9600] bond7: left promiscuous mode
[  146.519995][ T9600] bond10: left promiscuous mode
[  146.522106][ T9600] bond10: left allmulticast mode
[  146.535914][ T9600] veth5: left promiscuous mode
[  146.567338][ T9600] veth9: left promiscuous mode
[  146.569647][ T9600] bond24: left promiscuous mode
[  146.571619][ T9600] bond24: left allmulticast mode
[  146.577368][ T9600] ipvlan1: left allmulticast mode
[  146.579213][ T9600] bond26: left allmulticast mode
[  146.581388][ T5712] netdevsim netdevsim0 : unset [0, 0] type 1 family 0 port 8472 - 0
[  146.586205][ T5712] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[  146.589640][ T5712] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.593163][ T5712] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.600106][ T5712] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.607511][ T5712] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.613468][ T5712] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.619127][ T5712] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.749933][ T9610] netlink: 'syz.0.951': attribute type 5 has an invalid length.
[  147.012631][ T9616] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  147.578239][ T9616] team0: Device macsec2 is already an upper device of the team interface
[  147.679040][ T9623] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  147.690904][ T9623] bond14: (slave erspan0): Releasing active interface
[  147.701953][ T9623] veth0_to_bond: left allmulticast mode
[  147.704727][ T9623] veth0_to_bond: left promiscuous mode
[  147.707243][ T9623] bridge5: port 2(veth0_to_bond) entered disabled state
[  147.714669][ T9623] team0: Port device team_slave_1 removed
[  147.718960][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.722677][ T9623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.729546][ T9623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  147.750106][ T9623] netlink: 'syz.2.955': attribute type 10 has an invalid length.
[  147.753287][ T9623] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  147.762307][ T9623] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.766314][ T9623] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  148.389057][ T9636] pim6reg: entered allmulticast mode
[  148.393064][ T9635] pim6reg: left allmulticast mode
[  148.521262][ T9641] __nla_validate_parse: 5 callbacks suppressed
[  148.521278][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  148.670891][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'.
[  148.830613][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'.
[  148.849727][ T9666] netlink: 'syz.2.969': attribute type 1 has an invalid length.
[  148.863100][ T9666] bond35: entered promiscuous mode
[  148.866294][ T9666] 8021q: adding VLAN 0 to HW filter on device bond35
[  148.884274][ T9666] 8021q: adding VLAN 0 to HW filter on device bond35
[  148.886780][ T9666] bond35: (slave wireguard1): The slave device specified does not support setting the MAC address
[  148.890969][ T9666] bond35: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  148.899309][ T9666] bond35: (slave wireguard1): making interface the new active one
[  148.902681][ T9666] wireguard1: entered promiscuous mode
[  148.906725][ T9666] bond35: (slave wireguard1): Enslaving as an active interface with an up link
[  148.914886][ T9666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.918114][ T9666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.951570][ T9675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'.
[  148.970331][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'.
[  149.037603][ T9682] pim6reg: entered allmulticast mode
[  149.042552][ T9682] pim6reg: left allmulticast mode
[  149.282591][ T9690] netlink: 'syz.2.976': attribute type 10 has an invalid length.
[  149.290394][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'.
[  149.400904][ T9698] netlink: 'syz.2.979': attribute type 1 has an invalid length.
[  149.428635][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'.
[  149.430922][ T9698] bond36: entered promiscuous mode
[  149.437178][ T9698] 8021q: adding VLAN 0 to HW filter on device bond36
[  149.440363][ T9695] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  149.442868][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.979'.
[  149.488537][ T9698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.498312][ T9697] tipc: Resetting bearer <eth:syzkaller0>
[  149.574201][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'.
[  150.244043][ T9715] netlink: 'syz.0.982': attribute type 1 has an invalid length.
[  150.647443][ T9697] tipc: Disabling bearer <eth:syzkaller0>
[  150.676525][ T9715] 8021q: adding VLAN 0 to HW filter on device bond27
[  150.734865][ T9720] 8021q: adding VLAN 0 to HW filter on device bond4
[  150.757308][ T9720] bond19: (slave erspan0): Releasing active interface
[  150.761988][ T9720] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  150.793925][ T9727] netlink: 'syz.1.985': attribute type 8 has an invalid length.
[  150.811612][ T9729] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  150.876569][ T9736] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  150.912992][ T9743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'.
[  151.040771][ T9758] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  151.045565][ T9760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.057584][ T9758] 8021q: adding VLAN 0 to HW filter on device bond31
[  151.175638][ T9764] netlink: 'syz.1.997': attribute type 10 has an invalid length.
[  151.333597][ T9779] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  151.435179][ T9771] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  151.474797][ T9787] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  151.628313][ T9791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.637802][ T9791] syzkaller0: entered promiscuous mode
[  151.640165][ T9791] syzkaller0: entered allmulticast mode
[  151.655058][ T9791] tipc: Resetting bearer <eth:syzkaller0>
[  151.661438][ T9790] tipc: Resetting bearer <eth:syzkaller0>
[  151.672048][ T9790] tipc: Disabling bearer <eth:syzkaller0>
[  151.803539][ T9799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.810753][ T9799] syzkaller0: entered promiscuous mode
[  151.813137][ T9799] syzkaller0: entered allmulticast mode
[  151.830289][ T9802] rdma_rxe: rxe_newlink: failed to add team0
[  151.835327][ T9804] netlink: 'syz.1.1008': attribute type 10 has an invalid length.
[  151.836760][ T9800] tipc: Resetting bearer <eth:syzkaller0>
[  151.842189][ T9797] tipc: Resetting bearer <eth:syzkaller0>
[  151.851456][ T9797] tipc: Disabling bearer <eth:syzkaller0>
[  151.905450][ T9808] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  151.945214][ T9809] ieee802154 phy1 wpan1: encryption failed: -22
[  151.972287][ T9809] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  152.101169][ T9820] 8021q: adding VLAN 0 to HW filter on device bond6
[  152.121046][ T9820] bond0: (slave dummy0): Releasing backup interface
[  152.137625][ T9820] veth0_to_bond: left allmulticast mode
[  152.140099][ T9820] veth0_to_bond: left promiscuous mode
[  152.143130][ T9820] bridge8: port 1(veth0_to_bond) entered disabled state
[  152.149916][ T9820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  152.251915][ T9826] 8021q: adding VLAN 0 to HW filter on device bond32
[  152.259898][ T9826] bridge0: port 3(bond32) entered blocking state
[  152.263148][ T9826] bridge0: port 3(bond32) entered disabled state
[  152.274187][ T9826] bond32: entered allmulticast mode
[  152.291049][ T9826] bond32: entered promiscuous mode
[  152.297024][ T9826] bridge0: port 3(bond32) entered blocking state
[  152.299732][ T9826] bridge0: port 3(bond32) entered forwarding state
[  152.343451][ T9826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  152.349025][ T9830] veth0: entered promiscuous mode
[  152.360637][ T9064] bridge0: port 3(bond32) entered disabled state
[  152.376575][ T9832] veth0 (unregistering): left promiscuous mode
[  152.453928][ T9832] bond15: (slave veth1): Releasing active interface
[  152.921217][ T9878] netlink: 'syz.2.1030': attribute type 1 has an invalid length.
[  152.948018][ T9878] 8021q: adding VLAN 0 to HW filter on device bond37
[  152.985225][ T9884] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  153.028384][ T9887] netlink: 'syz.2.1033': attribute type 10 has an invalid length.
[  153.031914][ T9887] team0: entered promiscuous mode
[  153.035554][ T9887] bond23: entered promiscuous mode
[  153.077672][ T9889] team0: left promiscuous mode
[  153.079467][ T9889] bond23: left promiscuous mode
[  153.388867][ T5234] Bluetooth: hci2: link tx timeout
[  153.390894][ T5234] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.396818][   T54] Bluetooth: hci2: link tx timeout
[  153.399017][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.427300][   T54] Bluetooth: hci2: link tx timeout
[  153.429110][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.446819][   T54] Bluetooth: hci2: link tx timeout
[  153.448981][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.455586][   T54] Bluetooth: hci2: link tx timeout
[  153.457434][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.656026][   T54] Bluetooth: hci2: link tx timeout
[  153.658434][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.667176][ T9910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  153.743245][ T9914] __nla_validate_parse: 11 callbacks suppressed
[  153.743255][ T9914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'.
[  153.872393][ T9924] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1039'.
[  153.923310][ T9924] validate_nla: 1 callbacks suppressed
[  153.923321][ T9924] netlink: 'syz.1.1039': attribute type 1 has an invalid length.
[  153.970798][ T9924] bond33: entered promiscuous mode
[  153.972852][ T9924] 8021q: adding VLAN 0 to HW filter on device bond33
[  153.989890][   T54] Bluetooth: hci2: link tx timeout
[  153.994109][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  154.046199][ T9930] 8021q: adding VLAN 0 to HW filter on device bond33
[  154.049597][ T9924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.049805][ T9930] bond33: (slave wireguard4): The slave device specified does not support setting the MAC address
[  154.052090][ T9924] IPv6: NLM_F_CREATE should be set when creating new route
[  154.059045][ T9924] IPv6: NLM_F_CREATE should be set when creating new route
[  154.060321][ T9930] bond33: (slave wireguard4): Setting fail_over_mac to active for active-backup mode
[  154.063828][ T9924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.074850][ T9930] bond33: (slave wireguard4): making interface the new active one
[  154.078185][ T9930] wireguard4: entered promiscuous mode
[  154.081710][ T9930] bond33: (slave wireguard4): Enslaving as an active interface with an up link
[  154.086702][ T9936] netlink: 'syz.0.1042': attribute type 1 has an invalid length.
[  154.222457][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'.
[  154.232462][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'.
[  154.260083][ T9943] netlink: 'syz.0.1045': attribute type 1 has an invalid length.
[  154.287405][ T9943] bond28: entered promiscuous mode
[  154.290120][ T9943] 8021q: adding VLAN 0 to HW filter on device bond28
[  154.331422][ T9943] 8021q: adding VLAN 0 to HW filter on device bond28
[  154.335624][ T9943] bond28: (slave wireguard0): The slave device specified does not support setting the MAC address
[  154.339423][ T9943] bond28: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  154.351966][ T9943] bond28: (slave wireguard0): making interface the new active one
[  154.354943][ T9943] wireguard0: entered promiscuous mode
[  154.358671][ T9943] bond28: (slave wireguard0): Enslaving as an active interface with an up link
[  154.451214][ T9957] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1049'.
[  154.553296][ T9961] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  154.581207][ T9964] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1051'.
[  154.812602][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'.
[  154.896586][ T9983] bridge9: port 1(veth1) entered blocking state
[  154.899050][ T9983] bridge9: port 1(veth1) entered disabled state
[  154.901370][ T9983] veth1: entered allmulticast mode
[  154.904189][ T9983] veth1: entered promiscuous mode
[  154.930123][ T9980] bridge9: port 2(veth0_to_bond) entered blocking state
[  154.932433][ T9980] bridge9: port 2(veth0_to_bond) entered disabled state
[  154.935354][ T9980] veth0_to_bond: entered allmulticast mode
[  154.947479][ T9980] veth0_to_bond: entered promiscuous mode
[  154.953511][ T9980] vlan2: entered allmulticast mode
[  154.960410][ T9980] bridge9: port 3(vlan2) entered blocking state
[  154.963983][ T9980] bridge9: port 3(vlan2) entered disabled state
[  154.971963][ T9980] vlan2: entered promiscuous mode
[  155.027376][ T9987] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  155.032241][ T9987] sctp: [Deprecated]: syz.2.1056 (pid 9987) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.032241][ T9987] Use struct sctp_sack_info instead
[  155.064543][   T54] Bluetooth: hci2: link tx timeout
[  155.066829][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  155.070458][   T54] Bluetooth: hci2: link tx timeout
[  155.072926][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  155.090103][ T9989] netlink: 'syz.1.1058': attribute type 1 has an invalid length.
[  155.118040][ T9989] 8021q: adding VLAN 0 to HW filter on device bond34
[  155.120613][ T9991] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  155.127221][ T9989] erspan0: entered allmulticast mode
[  155.133090][ T9989] bond34: (slave erspan0): making interface the new active one
[  155.138270][ T9989] bond34: (slave erspan0): Enslaving as an active interface with an up link
[  155.215583][ T9996] veth0: entered promiscuous mode
[  155.224287][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'.
[  155.248812][ T9996] veth0 (unregistering): left promiscuous mode
[  155.272793][T10002] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0403:0000:0000:7d01 with DS=0xe
[  155.431609][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'.
[  155.440320][   T54] Bluetooth: hci2: link tx timeout
[  155.442508][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  155.453832][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  155.458530][T10013] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1067'.
[  155.583343][T10022] IPv6: NLM_F_CREATE should be specified when creating new route
[  155.677382][T10032] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  155.863935][T10037] nbd2: detected capacity change from 0 to 63
[  155.877870][T10040] block nbd2: Receive control failed (result -104)
[  155.921349][T10053] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  155.949433][T10055] IPv6: NLM_F_CREATE should be specified when creating new route
[  156.000049][T10065] bridge9: port 1(veth1) entered disabled state
[  156.008068][T10065] vlan2 (unregistering): left promiscuous mode
[  156.010667][T10065] veth1 (unregistering): left promiscuous mode
[  156.013193][T10065] bridge9: port 3(vlan2) entered disabled state
[  156.720956][T10092] netlink: 'syz.0.1088': attribute type 1 has an invalid length.
[  156.746116][T10092] 8021q: adding VLAN 0 to HW filter on device bond30
[  156.752056][T10092] erspan0: entered allmulticast mode
[  156.759700][T10092] bond30: (slave erspan0): making interface the new active one
[  156.765559][T10092] bond30: (slave erspan0): Enslaving as an active interface with an up link
[  156.921159][T10106] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (68)
[  157.248175][T10129] netlink: 'syz.2.1100': attribute type 1 has an invalid length.
[  157.287022][T10129] 8021q: adding VLAN 0 to HW filter on device bond38
[  157.301905][T10129] bond38: (slave geneve3): making interface the new active one
[  157.317999][T10129] bond38: (slave geneve3): Enslaving as an active interface with an up link
[  157.321073][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  157.324825][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  157.330661][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  157.336519][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  157.348713][T10129] bond38: entered promiscuous mode
[  157.351003][T10129] geneve3: entered promiscuous mode
[  157.533443][T10144] netlink: 'syz.1.1104': attribute type 10 has an invalid length.
[  157.590437][T10144] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  157.596507][T10147] bond32: left allmulticast mode
[  157.598603][T10147] bond32: left promiscuous mode
[  157.601963][T10147] bridge0: port 3(bond32) entered disabled state
[  157.608834][T10147] bond22: left allmulticast mode
[  157.611039][T10147] bond22: left promiscuous mode
[  157.613392][T10147] bridge0: port 2(bond22) entered disabled state
[  157.629503][T10147] macsec0: left allmulticast mode
[  157.631727][T10147] macsec0: left promiscuous mode
[  157.634948][T10147] bridge0: port 1(macsec0) entered disabled state
[  157.651504][T10147] bond0: (slave bridge0): Releasing backup interface
[  157.724239][T10148] bridge13: port 1(veth1) entered blocking state
[  157.727067][T10148] bridge13: port 1(veth1) entered disabled state
[  157.729463][T10148] veth1: entered allmulticast mode
[  157.732002][T10148] veth1: entered promiscuous mode
[  158.056574][T10159] netlink: 'syz.0.1109': attribute type 1 has an invalid length.
[  158.087260][T10159] 8021q: adding VLAN 0 to HW filter on device bond31
[  158.096314][T10159] bond30: (slave erspan0): Releasing active interface
[  158.109821][T10159] bond31: (slave erspan0): making interface the new active one
[  158.114598][T10159] bond31: (slave erspan0): Enslaving as an active interface with an up link
[  158.706441][T10169] bond35: entered promiscuous mode
[  158.708556][T10169] 8021q: adding VLAN 0 to HW filter on device bond35
[  158.727866][T10169] 8021q: adding VLAN 0 to HW filter on device bond36
[  158.731134][T10169] bond35: (slave bond36): making interface the new active one
[  158.734160][T10169] bond36: entered promiscuous mode
[  158.736600][T10169] bond35: (slave bond36): Enslaving as an active interface with an up link
[  158.885232][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.890015][T10180] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  158.897046][T10180] __nla_validate_parse: 17 callbacks suppressed
[  158.897054][T10180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1114'.
[  158.902464][T10180] batadv0: entered promiscuous mode
[  158.904873][T10180] batadv0: entered allmulticast mode
[  158.907817][T10180] bond0: (slave batadv0): Releasing backup interface
[  158.913475][T10180] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  159.175377][T10187] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1117'.
[  159.182900][T10190] validate_nla: 3 callbacks suppressed
[  159.182913][T10190] netlink: 'syz.2.1116': attribute type 1 has an invalid length.
[  159.246963][T10190] 8021q: adding VLAN 0 to HW filter on device bond39
[  159.250163][T10194] erspan0: entered allmulticast mode
[  159.275654][T10194] bond39: (slave erspan0): making interface the new active one
[  159.279807][T10194] bond39: (slave erspan0): Enslaving as an active interface with an up link
[  159.284257][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'.
[  159.352374][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'.
[  159.373778][T10202] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.168523][T10218] netlink: 'syz.0.1123': attribute type 1 has an invalid length.
[  160.255753][T10218] 8021q: adding VLAN 0 to HW filter on device bond32
[  160.275764][T10221] bond32: (slave geneve4): making interface the new active one
[  160.280354][T10221] bond32: (slave geneve4): Enslaving as an active interface with an up link
[  160.317967][ T8466] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 6081 - 0
[  160.321589][ T8466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.330540][ T8466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.337866][ T8466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.345038][T10227] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[  160.385549][T10227] 8021q: adding VLAN 0 to HW filter on device bond33
[  160.407433][T10227] bond31: (slave erspan0): Releasing active interface
[  160.412992][T10227] bond33: (slave erspan0): making interface the new active one
[  160.417793][T10227] bond33: (slave erspan0): Enslaving as an active interface with an up link
[  160.427505][T10230] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.513608][T10232] netlink: 'syz.0.1128': attribute type 1 has an invalid length.
[  160.590867][T10232] bond34: entered promiscuous mode
[  160.592594][T10232] bond34: entered allmulticast mode
[  160.607883][T10245] bridge15: entered promiscuous mode
[  160.610152][T10245] bridge15: entered allmulticast mode
[  160.615430][T10245] bond34: (slave bridge15): making interface the new active one
[  160.618946][T10245] bond34: (slave bridge15): Enslaving as an active interface with an up link
[  160.640074][T10244] tap0: tun_chr_ioctl cmd 1074025677
[  160.642664][T10244] tap0: linktype set to 0
[  160.760715][T10257] netlink: 'syz.0.1135': attribute type 1 has an invalid length.
[  160.763156][T10257] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1135'.
[  160.767753][T10258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  160.880582][T10268] bond4: option mode: unable to set because the bond device is up
[  160.902636][T10273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1137'.
[  160.910231][T10273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1137'.
[  161.027312][T10285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1140'.
[  161.216038][T10291] netlink: 'syz.2.1143': attribute type 1 has an invalid length.
[  161.241988][T10291] 8021q: adding VLAN 0 to HW filter on device bond40
[  161.296147][T10305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  161.337604][T10308] 8021q: VLANs not supported on bond0
[  161.424678][T10315] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1146'.
[  161.462011][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1146'.
[  161.683046][T10350] netlink: 'syz.0.1158': attribute type 1 has an invalid length.
[  161.710359][T10353] sock: sock_set_timeout: `syz.0.1159' (pid 10353) tries to set negative timeout
[  161.741079][T10353] syzkaller0: entered promiscuous mode
[  161.743201][T10353] syzkaller0: entered allmulticast mode
[  161.749902][T10353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.753279][T10352] tipc: Resetting bearer <eth:syzkaller0>
[  162.875132][T10352] tipc: Disabling bearer <eth:syzkaller0>
[  162.916986][T10371] bond41: entered promiscuous mode
[  162.919713][T10371] 8021q: adding VLAN 0 to HW filter on device bond41
[  162.955630][T10372] 8021q: adding VLAN 0 to HW filter on device bond41
[  162.961975][T10372] bond41: (slave wireguard2): The slave device specified does not support setting the MAC address
[  162.965232][T10382] netlink: 'syz.0.1165': attribute type 2 has an invalid length.
[  162.970023][T10372] bond41: (slave wireguard2): Error -95 calling set_mac_address
[  163.024082][T10382] erspan0: left allmulticast mode
[  163.041947][T10382] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.046974][T10382] 8021q: adding VLAN 0 to HW filter on device team0
[  163.052553][T10382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.108895][T10385] workqueue: Failed to create a rescuer kthread for wq "bond37": -EINTR
[  163.260634][T10398] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0012:0000:0000:7d01 with DS=0xe
[  163.419105][T10403] netlink: 'syz.1.1171': attribute type 2 has an invalid length.
[  163.693121][T10432] netlink: 'syz.2.1179': attribute type 1 has an invalid length.
[  163.798031][T10433] bond42: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  163.852962][T10442] erspan0: left allmulticast mode
[  163.899811][T10442] batadv0: left promiscuous mode
[  163.901955][T10442] batadv0: left allmulticast mode
[  163.940095][T10442] vlan0: left allmulticast mode
[  163.944078][T10442] gretap0: left allmulticast mode
[  163.971081][T10442] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  163.972192][T10458] __nla_validate_parse: 9 callbacks suppressed
[  163.972201][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'.
[  163.980089][T10442] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  163.983083][T10442] macsec1: left promiscuous mode
[  163.987237][T10442] macsec1: left allmulticast mode
[  163.995976][T10442] bond33: left promiscuous mode
[  163.997880][T10442] wireguard4: left promiscuous mode
[  164.010507][T10442] bond35: left promiscuous mode
[  164.012742][T10442] bond36: left promiscuous mode
[  164.025699][ T5712] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  164.028745][ T5712] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  164.034501][ T5712] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  164.037450][ T5712] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  164.041003][T10451] pim6reg1: entered promiscuous mode
[  164.042702][T10451] pim6reg1: entered allmulticast mode
[  164.058243][T10458] hsr_slave_0: left promiscuous mode
[  164.080342][ T5712] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  164.088018][ T5712] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  164.105916][ T5712] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  164.110657][ T5712] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  164.355635][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'.
[  164.382243][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'.
[  164.543863][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'.
[  164.609958][T10490] bond28: left promiscuous mode
[  164.611931][T10490] wireguard0: left promiscuous mode
[  164.665597][T10490] bond34: left promiscuous mode
[  164.669425][T10490] bond34: left allmulticast mode
[  164.672697][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'.
[  164.677304][T10490] bridge15: left promiscuous mode
[  164.680514][T10490] bridge15: left allmulticast mode
[  164.686223][ T5712] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[  164.689557][ T5712] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.694003][T10496] validate_nla: 1 callbacks suppressed
[  164.694014][T10496] netlink: 'syz.1.1193': attribute type 10 has an invalid length.
[  164.699815][T10494] hsr_slave_0: left promiscuous mode
[  164.719798][ T5712] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.727264][ T5712] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.732466][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'.
[  164.776878][T10499] veth0_to_team: entered promiscuous mode
[  164.931906][T10510] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  164.979637][T10514] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.292796][T10536] netlink: 'syz.2.1206': attribute type 7 has an invalid length.
[  165.302691][T10538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1204'.
[  165.319328][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'.
[  165.478671][T10548] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  165.565640][T10554] netlink: 'syz.0.1212': attribute type 1 has an invalid length.
[  165.586757][T10554] 8021q: adding VLAN 0 to HW filter on device bond35
[  165.593479][T10555] vlan0: entered promiscuous mode
[  165.595620][T10555] bond35: entered promiscuous mode
[  165.598023][T10555] vlan0: entered allmulticast mode
[  165.600229][T10555] bond35: entered allmulticast mode
[  165.630616][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'.
[  165.668516][T10564] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[  165.680857][T10560] 8021q: adding VLAN 0 to HW filter on device bond43
[  165.686616][T10560] bond0: (slave bond43): Enslaving as an active interface with a down link
[  165.710548][T10564] 8021q: adding VLAN 0 to HW filter on device bond36
[  165.722429][T10564] ipvlan2: entered allmulticast mode
[  165.725113][T10564] bond36: entered allmulticast mode
[  165.809079][T10570] netlink: 'syz.2.1217': attribute type 5 has an invalid length.
[  166.157299][T10576] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.190506][T10576] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  166.193566][T10576] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  166.230208][T10581] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1220'.
[  166.462653][T10587] netlink: 'syz.2.1223': attribute type 14 has an invalid length.
[  166.490644][T10587] netlink: 'syz.2.1223': attribute type 39 has an invalid length.
[  167.186575][T10615] netlink: 'syz.0.1230': attribute type 10 has an invalid length.
[  167.223932][T10615] netlink: 'syz.0.1230': attribute type 10 has an invalid length.
[  167.283336][T10621] openvswitch: netlink: IP tunnel TTL not specified.
[  167.333348][T10622] netlink: 'syz.0.1232': attribute type 32 has an invalid length.
[  167.471555][T10635] Bluetooth: MGMT ver 1.23
[  167.765057][T10639] bond44: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  167.769691][T10639] bond44: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  167.773557][T10639] bond44: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  167.898345][T10660] bond22: left allmulticast mode
[  167.900280][T10660] bond22: left promiscuous mode
[  167.902448][T10660] bridge0: port 3(bond22) entered disabled state
[  167.909999][T10660] bond16: left allmulticast mode
[  167.912006][T10660] bond16: left promiscuous mode
[  167.917634][T10660] bridge0: port 1(bond16) entered disabled state
[  167.922473][T10660] bond6: left allmulticast mode
[  167.925018][T10660] bond6: left promiscuous mode
[  167.927296][T10660] bridge0: port 2(bond6) entered disabled state
[  167.976371][T10660] vlan2 (unregistering): left allmulticast mode
[  167.979246][T10660] bridge0 (unregistering): left allmulticast mode
[  167.982112][T10660] vlan2 (unregistering): left promiscuous mode
[  167.984990][T10660] bridge0 (unregistering): left promiscuous mode
[  167.987861][T10660] bridge8: port 1(vlan2) entered disabled state
[  168.059081][T10662] 8021q: adding VLAN 0 to HW filter on device bond38
[  168.068432][T10664] ipvlan0: entered allmulticast mode
[  168.070831][T10664] bond38: entered allmulticast mode
[  168.080060][T10665] bond38: (slave gretap5): making interface the new active one
[  168.082657][T10665] gretap5: entered allmulticast mode
[  168.091169][T10665] bond38: (slave gretap5): Enslaving as an active interface with an up link
[  168.153437][T10671] 8021q: adding VLAN 0 to HW filter on device bond37
[  168.168476][T10671] gretap3: entered promiscuous mode
[  168.173129][T10671] bond37: (slave gretap3): making interface the new active one
[  168.177222][T10671] bond37: (slave gretap3): Enslaving as an active interface with an up link
[  168.188903][T10671] macvlan2: entered promiscuous mode
[  168.190966][T10671] macvlan2: entered allmulticast mode
[  168.195125][T10671] bond37: entered promiscuous mode
[  168.197597][T10671] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  168.200777][T10671] bond37: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  168.211853][T10671] bond37: left promiscuous mode
[  168.482098][T10691] bond38: (slave vxcan1): The slave device specified does not support setting the MAC address
[  168.488245][T10691] bond38: (slave vxcan1): Error -95 calling set_mac_address
[  168.712350][T10704] 8021q: adding VLAN 0 to HW filter on device bond45
[  168.735841][T10704] bond39: (slave erspan0): Releasing active interface
[  168.749429][T10704] bond45: (slave erspan0): making interface the new active one
[  168.754656][T10704] bond45: (slave erspan0): Enslaving as an active interface with an up link
[  168.812984][T10712] team0: Port device dummy0 added
[  168.818391][T10710] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  168.828737][T10712] team0: Port device dummy0 removed
[  168.841469][T10712] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  169.152223][T10739] __nla_validate_parse: 15 callbacks suppressed
[  169.152236][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'.
[  169.178259][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'.
[  169.186611][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'.
[  169.190581][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'.
[  169.196958][T10740] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1265'.
[  169.200422][T10740] NCSI netlink: No device for ifindex 0
[  169.691054][T10758] vxcan0: entered promiscuous mode
[  169.823418][T10770] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  169.919289][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'.
[  169.952648][T10778] bridge13: port 1(veth1) entered blocking state
[  169.961994][T10778] bridge13: port 1(veth1) entered disabled state
[  169.965705][T10778] veth1: entered allmulticast mode
[  169.968280][T10778] veth1: entered promiscuous mode
[  169.972482][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  169.973580][T10778] veth0_to_bond: left allmulticast mode
[  169.977890][T10778] veth0_to_bond: left promiscuous mode
[  169.980099][T10778] bridge9: port 2(veth0_to_bond) entered disabled state
[  169.988422][T10778] bridge13: port 2(veth0_to_bond) entered blocking state
[  169.991131][T10778] bridge13: port 2(veth0_to_bond) entered disabled state
[  169.994947][T10778] veth0_to_bond: entered allmulticast mode
[  169.998030][T10778] veth0_to_bond: entered promiscuous mode
[  170.008110][T10778] vlan2: entered allmulticast mode
[  170.010183][T10778] bridge13: port 3(vlan2) entered blocking state
[  170.013233][T10778] bridge13: port 3(vlan2) entered disabled state
[  170.019242][T10778] vlan2: entered promiscuous mode
[  170.034581][T10787] validate_nla: 13 callbacks suppressed
[  170.034590][T10787] netlink: 'syz.1.1279': attribute type 1 has an invalid length.
[  170.111881][T10787] workqueue: Failed to create a rescuer kthread for wq "bond39": -EINTR
[  170.253386][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'.
[  170.264291][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'.
[  170.281297][T10811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.370687][T10828] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1288'.
[  170.374762][T10828] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  170.378502][T10828] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  170.894612][T10853] netlink: 'syz.2.1296': attribute type 1 has an invalid length.
[  170.917089][T10853] 8021q: adding VLAN 0 to HW filter on device bond46
[  170.931131][T10853] bond46: (slave geneve4): making interface the new active one
[  170.937604][T10853] bond46: (slave geneve4): Enslaving as an active interface with an up link
[  170.961087][T10864] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4)
[  170.982950][T10853] syz.2.1296 (10853) used greatest stack depth: 18184 bytes left
[  171.026628][T10870] netlink: 'syz.1.1302': attribute type 1 has an invalid length.
[  171.040850][T10875] batadv_slave_0: Caught tx_queue_len zero misconfig
[  171.141882][T10884] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  171.148571][T10884] bond33: (slave erspan0): Releasing active interface
[  171.159844][T10884] bond0: (slave wlan1): Releasing backup interface
[  171.178045][T10884] bond11: (slave ip6gretap1): Releasing active interface
[  171.191446][T10884] bond13: (slave ip6gretap2): Removing an active aggregator
[  171.199345][T10884] bond13: (slave ip6gretap2): Releasing backup interface
[  171.202464][T10884] bond13: (slave ip6gretap2): the permanent HWaddr of slave - 16:07:a6:56:4f:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  171.217755][T10884] bond13: (slave veth5): Releasing backup interface
[  171.222086][T10884] bond14: (slave gretap1): Releasing active interface
[  171.227812][T10884] bond15: (slave bridge9): Releasing active interface
[  171.231734][T10884] veth7: left allmulticast mode
[  171.234179][T10884] veth7: left promiscuous mode
[  171.236546][T10884] bridge10: port 1(veth7) entered disabled state
[  171.242406][T10884] bond28: (slave wireguard0): Releasing backup interface
[  171.247089][T10884] veth1: left allmulticast mode
[  171.249097][T10884] veth1: left promiscuous mode
[  171.251814][T10884] bridge13: port 1(veth1) entered disabled state
[  171.257993][T10884] bond32: (slave geneve4): Releasing active interface
[  171.263268][T10884] bond34: (slave bridge15): Releasing backup interface
[  171.268983][T10884] bond37: (slave gretap3): Releasing active interface
[  172.012077][T10905] gre0: Master is either lo or non-ether device
[  172.130981][T10913] syzkaller1: entered promiscuous mode
[  172.133349][T10913] syzkaller1: entered allmulticast mode
[  172.138407][T10913] syzkaller1: left promiscuous mode
[  172.140809][T10913] syzkaller1: left allmulticast mode
[  172.315369][T10923] netlink: 'syz.1.1317': attribute type 1 has an invalid length.
[  172.360780][T10923] bond39: (slave vxcan1): The slave device specified does not support setting the MAC address
[  172.367013][T10923] bond39: (slave vxcan1): Error -95 calling set_mac_address
[  172.418367][T10927] bond39: (slave bridge0): Enslaving as an active interface with a down link
[  172.695020][T10945] 8021q: adding VLAN 0 to HW filter on device batadv4
[  172.698479][T10945] team0: Failed to send port change of device batadv4 via netlink (err -105)
[  172.702281][T10945] team0: Failed to send options change via netlink (err -105)
[  172.706179][T10945] team0: Port device batadv4 added
[  172.743069][T10948] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.747326][T10948] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.970028][T10951] netlink: 'syz.1.1325': attribute type 1 has an invalid length.
[  173.000710][T10951] 8021q: adding VLAN 0 to HW filter on device bond40
[  173.319636][T10974] 8021q: adding VLAN 0 to HW filter on device bond47
[  173.323043][T10974] team0: Port device bond47 added
[  173.431495][T10981] netlink: 'syz.2.1334': attribute type 39 has an invalid length.
[  176.497641][T10990] netlink: 'syz.2.1338': attribute type 2 has an invalid length.
[  176.505705][T10993] erspan0: left allmulticast mode
[  176.505820][T10992] __nla_validate_parse: 13 callbacks suppressed
[  176.505833][T10992] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1337'.
[  176.512072][T10993] 8021q: adding VLAN 0 to HW filter on device team0
[  176.522465][T10993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.537481][T10992] netlink: 'syz.1.1337': attribute type 10 has an invalid length.
[  176.540270][T10992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1337'.
[  176.543501][T10992] dummy0: entered promiscuous mode
[  176.547636][T10995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'.
[  176.551810][T10992] bond0: (slave dummy0): Releasing backup interface
[  176.561757][T10992] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  176.735610][T11008] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1343'.
[  176.754004][T11009] netlink: 'syz.0.1342': attribute type 10 has an invalid length.
[  176.784352][T11012] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0005:0000:7d01 with DS=0xe
[  176.945695][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1345'.
[  177.049665][T11031] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1347'.
[  177.072632][T11031] team0: Device macsec1 is already an upper device of the team interface
[  177.108006][T11023] bond45: (slave erspan0): Releasing active interface
[  177.119403][T11023] veth0_to_bond: left allmulticast mode
[  177.121766][T11023] veth0_to_bond: left promiscuous mode
[  177.124861][T11023] bridge13: port 2(veth0_to_bond) entered disabled state
[  177.131611][T11023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  177.223249][T11023] netlink: 'syz.2.1346': attribute type 10 has an invalid length.
[  177.302215][T11028] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  177.314333][T11028] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  177.325444][T11053] netlink: 'syz.0.1349': attribute type 10 has an invalid length.
[  177.328942][T11053] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  177.332675][T11053] bond0: (slave wlan1): Opening slave failed
[  177.343096][T11051] netlink: 'syz.1.1350': attribute type 4 has an invalid length.
[  177.356101][T11051] netlink: 'syz.1.1350': attribute type 4 has an invalid length.
[  177.432212][T11059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1352'.
[  177.436435][T11059] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1352'.
[  177.440506][T11059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1352'.
[  177.451665][T11059] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1352'.
[  177.495674][T11063] netlink: 'syz.0.1351': attribute type 10 has an invalid length.
[  177.680755][T11071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.699156][T11074] netlink: 'syz.0.1356': attribute type 1 has an invalid length.
[  177.702340][T11071] IPVS: stopping backup sync thread 8126 ...
[  177.836977][T11074] 8021q: adding VLAN 0 to HW filter on device bond39
[  177.856793][T11078] erspan0: entered allmulticast mode
[  177.866290][T11078] bond39: (slave erspan0): making interface the new active one
[  177.872107][T11078] bond39: (slave erspan0): Enslaving as an active interface with an up link
[  177.938428][T11086] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  177.994919][T11081] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.999221][T11081] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.003448][T11081] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.042162][T11097] 8021q: adding VLAN 0 to HW filter on device bond41
[  178.063062][T11097] bond41: (slave geneve7): making interface the new active one
[  178.072471][T11097] bond41: (slave geneve7): Enslaving as an active interface with an up link
[  178.080293][T11081] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.099461][T11081] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.103413][T11081] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.134297][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.142380][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.148198][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.156577][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.174271][T11081] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.178391][T11081] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.182630][T11081] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.193047][ T5712] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.197971][ T5712] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.237820][T11110] 8021q: adding VLAN 0 to HW filter on device bond40
[  178.240784][ T5712] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.245167][ T5712] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.249062][T11113] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  178.252752][T11113] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  178.256166][T11081] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.263472][T11081] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  178.268346][T11081] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.291330][T11114] bond40: (slave geneve5): making interface the new active one
[  178.296011][T11114] bond40: (slave geneve5): Enslaving as an active interface with an up link
[  178.299932][ T7021] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.306456][ T7021] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.311001][ T7021] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.316038][ T7021] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.325746][T11110] bond40: entered promiscuous mode
[  178.327792][T11110] geneve5: entered promiscuous mode
[  178.391087][ T5712] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.395871][ T5712] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.399658][ T5712] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  178.408315][T11122] bond39: (slave erspan0): Releasing active interface
[  178.416087][T11122] bond40: (slave geneve5): Releasing active interface
[  178.418272][T11122] geneve5: left promiscuous mode
[  178.421906][ T5712] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.426701][ T5712] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.430398][ T5712] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  178.466354][ T5712] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.472572][ T5712] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.484752][ T5712] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.488189][ T5712] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.505896][ T5712] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.508650][ T5712] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.517694][ T5712] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  178.521278][ T5712] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.535140][ T5712] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.538688][ T5712] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  178.574770][T11128] 8021q: adding VLAN 0 to HW filter on device bond42
[  178.579232][T11128] team0: Port device bond42 added
[  178.774214][T11146] 8021q: adding VLAN 0 to HW filter on device bond41
[  179.399949][T11183] team1: entered promiscuous mode
[  179.401823][T11183] team1: entered allmulticast mode
[  179.453185][T11185] openvswitch: netlink: IP tunnel TTL not specified.
[  179.967696][T11203] IPv6: sit3: Disabled Multicast RS
[  180.189553][T11211] 8021q: adding VLAN 0 to HW filter on device bond43
[  180.195899][T11211] erspan0: entered allmulticast mode
[  180.206650][T11211] bond34: (slave erspan0): Releasing active interface
[  180.215439][T11211] bond43: (slave erspan0): making interface the new active one
[  180.218494][T11211] bond43: (slave erspan0): Enslaving as an active interface with an up link
[  180.294898][ T5712] 
[  180.296076][ T5712] ============================================
[  180.298653][ T5712] WARNING: possible recursive locking detected
[  180.301239][ T5712] syzkaller #0 Not tainted
[  180.303865][ T5712] --------------------------------------------
[  180.307140][ T5712] kworker/u8:2/5712 is trying to acquire lock:
[  180.309694][ T5712] ffff88810ddb2158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  180.314005][ T5712] 
[  180.314005][ T5712] but task is already holding lock:
[  180.317314][ T5712] ffff88810ceba958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  180.321572][ T5712] 
[  180.321572][ T5712] other info that might help us debug this:
[  180.324879][ T5712]  Possible unsafe locking scenario:
[  180.324879][ T5712] 
[  180.328098][ T5712]        CPU0
[  180.329611][ T5712]        ----
[  180.331140][ T5712]   lock(&qdisc_xmit_lock_key#4);
[  180.333256][ T5712]   lock(&qdisc_xmit_lock_key#4);
[  180.335371][ T5712] 
[  180.335371][ T5712]  *** DEADLOCK ***
[  180.335371][ T5712] 
[  180.338872][ T5712]  May be due to missing lock nesting notation
[  180.338872][ T5712] 
[  180.342338][ T5712] 11 locks held by kworker/u8:2/5712:
[  180.344591][ T5712]  #0: ffff8881266a7148 ((wq_completion)bond38#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  180.349264][ T5712]  #1: ffffc90002f7fbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  180.354717][ T5712]  #2: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800
[  180.358871][ T5712]  #3: ffffffff8e139f80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  180.362903][ T5712]  #4: ffff888123d68258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  180.368178][ T5712]  #5: ffff88810ceba958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  180.372562][ T5712]  #6: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  180.376383][ T5712]  #7: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  180.380393][ T5712]  #8: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  180.384213][ T5712]  #9: ffffffff8e139f80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50
[  180.388296][ T5712]  #10: ffff888030351258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50
[  180.393682][ T5712] 
[  180.393682][ T5712] stack backtrace:
[  180.396290][ T5712] CPU: 0 UID: 0 PID: 5712 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  180.396305][ T5712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.396313][ T5712] Workqueue: bond38 bond_alb_monitor
[  180.396332][ T5712] Call Trace:
[  180.396338][ T5712]  <TASK>
[  180.396344][ T5712]  dump_stack_lvl+0x189/0x250
[  180.396360][ T5712]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.396372][ T5712]  ? __pfx__printk+0x10/0x10
[  180.396387][ T5712]  ? skb_network_protocol+0x508/0x760
[  180.396402][ T5712]  ? print_lock_name+0xde/0x100
[  180.396416][ T5712]  print_deadlock_bug+0x28b/0x2a0
[  180.396428][ T5712]  validate_chain+0x1a3f/0x2140
[  180.396439][ T5712]  ? validate_xmit_xfrm+0xbf/0x1160
[  180.396452][ T5712]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  180.396463][ T5712]  ? __pfx_netif_skb_features+0x10/0x10
[  180.396476][ T5712]  ? unwind_next_frame+0xa5/0x2390
[  180.396491][ T5712]  __lock_acquire+0xab9/0xd20
[  180.396536][ T5712]  ? sch_direct_xmit+0x153/0x4b0
[  180.396552][ T5712]  lock_acquire+0x120/0x360
[  180.396566][ T5712]  ? sch_direct_xmit+0x153/0x4b0
[  180.396583][ T5712]  _raw_spin_lock+0x2e/0x40
[  180.396600][ T5712]  ? sch_direct_xmit+0x153/0x4b0
[  180.396614][ T5712]  sch_direct_xmit+0x153/0x4b0
[  180.396630][ T5712]  ? __pfx_sch_direct_xmit+0x10/0x10
[  180.396648][ T5712]  __dev_queue_xmit+0x1857/0x3b50
[  180.396662][ T5712]  ? arp_send_dst+0xa5/0x340
[  180.396676][ T5712]  ? arp_solicit+0xc1d/0xe60
[  180.396690][ T5712]  ? __neigh_event_send+0xf70/0x1560
[  180.396707][ T5712]  ? __dev_queue_xmit+0x27b/0x3b50
[  180.396721][ T5712]  ? ret_from_fork_asm+0x1a/0x30
[  180.396739][ T5712]  ? __pfx___dev_queue_xmit+0x10/0x10
[  180.396756][ T5712]  ? __lock_acquire+0xab9/0xd20
[  180.396776][ T5712]  ? NF_HOOK+0x9e/0x3a0
[  180.396790][ T5712]  NF_HOOK+0x310/0x3a0
[  180.396805][ T5712]  ? __pfx_arp_xmit_finish+0x10/0x10
[  180.396835][ T5712]  ? NF_HOOK+0x9e/0x3a0
[  180.396849][ T5712]  ? __pfx_NF_HOOK+0x10/0x10
[  180.396863][ T5712]  ? arp_xmit+0x23/0x270
[  180.396880][ T5712]  arp_xmit+0x16c/0x270
[  180.396893][ T5712]  ? arp_xmit+0x23/0x270
[  180.396907][ T5712]  arp_solicit+0xc1d/0xe60
[  180.396922][ T5712]  ? arp_solicit+0x11a/0xe60
[  180.396937][ T5712]  ? __pfx_arp_solicit+0x10/0x10
[  180.396954][ T5712]  ? __neigh_event_send+0xf08/0x1560
[  180.396969][ T5712]  ? __pfx_arp_solicit+0x10/0x10
[  180.396984][ T5712]  __neigh_event_send+0xf70/0x1560
[  180.397003][ T5712]  neigh_resolve_output+0x198/0x750
[  180.397014][ T5712]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  180.397032][ T5712]  ip_finish_output2+0xd40/0x1160
[  180.397047][ T5712]  ? ip_skb_dst_mtu+0x18d/0xb70
[  180.397062][ T5712]  ? ip_finish_output2+0x452/0x1160
[  180.397077][ T5712]  ? __pfx_ip_finish_output2+0x10/0x10
[  180.397092][ T5712]  ? ip_skb_dst_mtu+0x18d/0xb70
[  180.397105][ T5712]  ? ip_skb_dst_mtu+0x917/0xb70
[  180.397120][ T5712]  ? ip_finish_output+0x33a/0x3f0
[  180.397133][ T5712]  ip_output+0x29f/0x450
[  180.397152][ T5712]  ? ip_output+0x5b/0x450
[  180.397165][ T5712]  iptunnel_xmit+0x5f8/0xa90
[  180.397180][ T5712]  ip_tunnel_xmit+0x1c41/0x2390
[  180.397202][ T5712]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  180.397215][ T5712]  ? gre_build_header+0x3fd/0xa40
[  180.397230][ T5712]  ? __pfx_gre_build_header+0x10/0x10
[  180.397246][ T5712]  gre_tap_xmit+0x590/0x7a0
[  180.397261][ T5712]  ? __pfx_gre_tap_xmit+0x10/0x10
[  180.397273][ T5712]  ? __lock_acquire+0xab9/0xd20
[  180.397289][ T5712]  dev_hard_start_xmit+0x2d7/0x830
[  180.397307][ T5712]  sch_direct_xmit+0x241/0x4b0
[  180.397322][ T5712]  ? __pfx_sch_direct_xmit+0x10/0x10
[  180.397340][ T5712]  __dev_queue_xmit+0x1857/0x3b50
[  180.397356][ T5712]  ? __dev_queue_xmit+0x27b/0x3b50
[  180.397373][ T5712]  ? __pfx___dev_queue_xmit+0x10/0x10
[  180.397387][ T5712]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  180.397401][ T5712]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  180.397416][ T5712]  ? __build_skb_around+0x257/0x3e0
[  180.397433][ T5712]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  180.397445][ T5712]  ? alb_send_lp_vid+0x139/0x510
[  180.397460][ T5712]  alb_send_lp_vid+0x324/0x510
[  180.397474][ T5712]  ? rcu_is_watching+0x15/0xb0
[  180.397486][ T5712]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  180.397528][ T5712]  ? __lock_acquire+0xab9/0xd20
[  180.397546][ T5712]  alb_send_learning_packets+0x10d/0x2c0
[  180.397561][ T5712]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  180.397579][ T5712]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  180.397592][ T5712]  bond_alb_monitor+0x3e4/0x1800
[  180.397607][ T5712]  ? bond_alb_monitor+0xf1/0x1800
[  180.397620][ T5712]  ? process_scheduled_works+0x9ef/0x17b0
[  180.397632][ T5712]  ? __pfx_bond_alb_monitor+0x10/0x10
[  180.397646][ T5712]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.397656][ T5712]  ? process_scheduled_works+0x9ef/0x17b0
[  180.397665][ T5712]  ? process_scheduled_works+0x9ef/0x17b0
[  180.397676][ T5712]  process_scheduled_works+0xae1/0x17b0
[  180.397693][ T5712]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.397707][ T5712]  worker_thread+0x8a0/0xda0
[  180.397724][ T5712]  kthread+0x711/0x8a0
[  180.397743][ T5712]  ? __pfx_worker_thread+0x10/0x10
[  180.397753][ T5712]  ? __pfx_kthread+0x10/0x10
[  180.397766][ T5712]  ? _raw_spin_unlock_irq+0x23/0x50
[  180.397776][ T5712]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.397787][ T5712]  ? __pfx_kthread+0x10/0x10
[  180.397799][ T5712]  ret_from_fork+0x3fc/0x770
[  180.397812][ T5712]  ? __pfx_ret_from_fork+0x10/0x10
[  180.397824][ T5712]  ? __switch_to_asm+0x39/0x70
[  180.397837][ T5712]  ? __switch_to_asm+0x33/0x70
[  180.397850][ T5712]  ? __pfx_kthread+0x10/0x10
[  180.397863][ T5712]  ret_from_fork_asm+0x1a/0x30
[  180.397881][ T5712]  </TASK>
[  180.893955][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  180.896769][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  182.973896][ T5234] Bluetooth: hci1: command 0x0406 tx timeout
[  186.494119][   T60] block nbd2: Possible stuck request ffff8880210a0000: control (read@0,1024B). Runtime 30 seconds
[  186.497697][   T60] block nbd2: Possible stuck request ffff8880210a0200: control (read@1024,1024B). Runtime 30 seconds
[  186.501289][   T60] block nbd2: Possible stuck request ffff8880210a0400: control (read@2048,1024B). Runtime 30 seconds
[  186.505888][   T60] block nbd2: Possible stuck request ffff8880210a0600: control (read@3072,1024B). Runtime 30 seconds

VM DIAGNOSIS:
12:09:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002f7dbf0
R8 =ffff88801fe48237 R9 =1ffff11003fc9046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018d3 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31e1dff8 CR3=0000000027a1a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9df2412e53
XMM06=0000000000000000 00007f9df2412e4d XMM07=0000000000000000 00007f9df2412e61
XMM08=0000000000000000 00007f9df2412ee7 XMM09=0000000000000000 00007f9df2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b0e77b RBX=ffff888136623900 RCX=0000000000000000 RDX=ffff88810c891cc0
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc900030b7b08
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81703490
R12=000000000ffff0e6 R13=dffffc0000000000 R14=0000000000000000 R15=0000000000000020
RIP=ffffffff81b0e780 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556de56500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31e1cff8 CR3=0000000113982000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=55618196fada47ae ddb7e1fb16ab803d
XMM02=5938796ae7f2d16a 2bec46fc54f5638e XMM03=444c41c72f49fdfe 7bbefe2edf008ede
XMM04=f1ca7c46e36cddd8 bfcb06735e407adf XMM05=73c5f1ca7c46e36c ddd8bfcb06735e40
XMM06=7adf444c41c72f49 fdfe7bbefe2edf00 XMM07=8ede5938796ae7f2 d16a2bec46fc54f5
XMM08=638e55618196fada 47aeddb7e1fb16ab XMM09=0000000000000000 00007f9df2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
