last executing test programs:

7.870418488s ago: executing program 0 (id=1348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000182000000000000cc00000000000000000000000000000000860090780000000000000020000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

7.768393087s ago: executing program 0 (id=1350):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000008000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @broadcast}, &(0x7f0000000180)=0xc) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000000c0000004800000008000000000000005c30d5ade90db416a9d201c872c528616b33697123dcef33f9b8f43dfd282484664a7426939ffcde1fefb0386740bbbfc5b60e40997e2b9cbf22ac1e2578b838ffc83d8eae03bf08314db1ae1bb0e109ba4103843152c7aae2a29d93", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32)
socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004d0202c1c0bfd14f407b3fd35c7efb01efa4a570ec4e9a0f9ac6409c9ba48fa1731f447791a1d07c4804e82c94458d23e7"], 0x48) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$rds(0x15, 0x5, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x87) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x840000000002, 0x3, 0x100)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x10, 0x803, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000200)="3249a65fab83f5775cbf05b44bb7d5f1269b91ebade91cbdbf3a36a4cb2222c8c4f90b788eadd7", &(0x7f0000000040)=""/65}, 0x20) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="f90506000a000200aaaaaaaaaa1c0000f801d3ffa73788cc55e0f65f20668ab8b2c50c29ae834457bf0fd32dd23199e5c78582f72c5c6e3fd73f5068e1130835ef12fd816be9dc31c02e5df970c0fd539c251eb5"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)

7.767787367s ago: executing program 0 (id=1351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1d, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x4000000, 0x0, 0x3}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000002c00000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

7.693314451s ago: executing program 0 (id=1354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="50000000040a01080000000000000000070000000c0002400000000000000004090001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[], 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=r5, @ANYBLOB="05a3000000a1290000000d0000e7070003", @ANYRESHEX=r5, @ANYRESHEX=r5], 0x1c}}, 0x4020000)

7.595400709s ago: executing program 0 (id=1356):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async, rerun: 32)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x1400c004) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async, rerun: 32)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xc, 0x0, 0xb, [0x2, 0xff, 0x8]}]}}}], 0x20}, 0x0) (async)
socketpair(0x3, 0xa, 0x9, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xb8, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x8804)

7.521124651s ago: executing program 0 (id=1359):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f90000000000000000000000000000000000005c17b8d778325758d4eaa8dd9a135f16500345e5c7af51361533a255ab0fa6"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4000040)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) (async, rerun: 32)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) (async)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) (async)
r6 = socket(0x22, 0x2, 0x1) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) (async, rerun: 64)
accept4$inet(r6, 0x0, 0x0, 0x0) (rerun: 64)
r9 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32)
bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}}) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) (async)
recvmmsg(r11, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0)

1.827161268s ago: executing program 1 (id=1410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@can_newroute={0x3c, 0x18, 0x41b3fc1f056c542b, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0x3, 0xfffffffffffffffd, 0x2}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x1}, 0x2, 0x2, 0x0, 0x0, "6f78895d2ca0a828"}, 0x3}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004090}, 0x800)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e6400000000"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e64300000000000000000000000f9ce"], 0x2c}}, 0x40006)

1.820404798s ago: executing program 1 (id=1412):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000780), 0x4)
syz_emit_ethernet(0x87, &(0x7f0000000680)={@broadcast, @link_local, @void, {@ipv4={0x800, @tipc={{0x12, 0x4, 0x0, 0x4, 0x79, 0x66, 0x0, 0xd, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x34, 0xb3, 0x1, 0x3, [{@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@rand_addr=0x64010102, 0x5}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010102, 0x2}, {@broadcast, 0x4}]}]}}, @payload_named={{{{{0x31, 0x0, 0x1, 0x1, 0x1, 0xa, 0x1, 0x2, 0xe5, 0x0, 0x0, 0x0, 0x5, 0x2, 0x9, 0x0, 0x1, 0x4e23, 0x4e22}, 0x4, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110ab000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x32c, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "ec784450f7acb4f4"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "fd339e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_REALM={0x6d, 0xfa, "333627467412ac1a78dfe0005f7bc3667b3a10ea0099016d21b87c5cc745420e57759d0d9cc4778702dc45198c3b56b099ec30505263e98fab8b93a2e1211c2137d07c919911396c341b2e7037fb4ef8107d4de27a0f9e1e7940212d8f7867b8c912704ffc93e30a32"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffd}, @NL80211_ATTR_FILS_ERP_USERNAME={0x13, 0xf9, "f5c05f1d1ce4d59ac12e5c0b5f6766"}, @NL80211_ATTR_FILS_ERP_REALM={0x7d, 0xfa, "eeecf865e2b3b414d3ee5f1a235c9dc608a2729f735f46ccd4a5620b3f6aa56cb34d3967afd637631e9b9eee783b924475f675d92bc35fd3c401b09f64bf2daac0e9ad99a2158b72a73f57d4c2d737ee8eff7532fa7f8479d0203d34cc531ffb4dbe29520fb9325dbb1256302806ccf4b67b5a4fe7f03b73e5"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "9b16edc338fce8bb5b"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "8988b20fc56430551a9e1df1cf8adf335a3b03aae82f432fba71fb9b777cf370de1e5d4ff1c86049c3ee4734c4881441426a1994fae3dda5a874f987b9fd9747ae708f3c79da5f5e11f2012b439165ab643b85ba08b9b9889f2b5827316863c3ff4a6f7c3f760fd5bcb3ff1901f8f3937e4324c7fb55ebbd8c0010ec3cca315c9c424641ee56ced85b4681a7a8e00c7de952e0f25268a418fe28c1ba55c116f1ef4a2968fb199930cd2e1642d76349f34f6c04a8b19b8a0536377fde5529e650a2d72923c3fb0fa40a9c1de11fc08f868532ca3993"}], @NL80211_ATTR_IE={0xfc, 0x2a, [@ibss={0x6, 0x2, 0x3}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x8, 0x83}}, @mesh_chsw={0x76, 0x6, {0xfb, 0x7c, 0x30, 0x562}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x7, 0x9}}, @random_vendor={0xdd, 0xca, "5f245bfb9670096359e0de01f42243c99557605e18b592749288271e50c30b37d57e8731d5fb1e8ec6a2ca9342f07ec7c111b852a6b9ef7dbb11c113ee56a12c919860ade0514e4d10526e2d0fc1ee7a2015f365680b6e7b1f8a5b43727ec9d1bfa9a71fe149aa43148bb213f7d74209bbca017d0fe3b5ff6ea5ea8d0cb14f68464cd0b45a5e293975a93d483da94de57e969e94f0e7eaec94b143880074ff75ef2b666eae1769e3e9b5c5239bc5f0d836ede14cb9cb090a8430a7ebb6b0d1d3f1ed4d263673a19a6287"}, @link_id={0x65, 0x12, {@random="0dff476b3e92", @device_b, @broadcast}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4000881}, 0x80)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00(\x00\x00\x00\x00\x00'], 0x44}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0)
close(0xffffffffffffffff)
r8 = socket$packet(0x11, 0x3, 0x300)
unshare(0x22020400)
setsockopt$packet_int(r8, 0x107, 0x9, 0x0, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="760a00000000000061114c0000000080180056c81055000000000000000000009500000000000400b4b5a052db0302f5267a9770a9d339"], &(0x7f0000000000)='GPL\x00'}, 0x90)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0xc93)
ioctl$IMGETCOUNT(r9, 0x80044943, &(0x7f0000000000))

1.66693813s ago: executing program 1 (id=1413):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791028000000000069003a00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000700)={{<r5=>0x0, 0x0, 0x200, 0x9, 0x10001, 0xf, 0x0, 0x7fffffff, 0x9a7, 0xfff, 0xb3, 0x2, 0x6, 0xd82b, 0x4947f0de}, 0x8, [0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000780)={r4, r5, "203d9498053a65ae4e93427b6cf2b3afe96520851a9d1dd7cdb31a9a3c6cce7a7b77148e9a47cd5ecca78d5bbb4a5ddc76eec24a562997df0af856c406a175d5cbf0c5a4a02e9b73b65386cc948b3331806f95db7bd5667558497108ca90426b22787536a874f206e4b2c4d3b4f3f3192970e876cd97060808a2bcff4af30bc7c8c4e7e848fda04daaa623d379811de9e94316de0e4cb001d7e9ba42f3c64a85930c92df1b217eb4c69133c6aca01f6eb828a2f0941f24e959d0174546feaecac402a8c3c32a2ada25160b663ba496d7079d86e7c1ea81fcaf4583ccb43851bf7a3f5be43a201bc12ddf587b1206b57f62ec35adc002e4f872860ca12462d8f9", "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"})
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x160, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4080}, 0x4804)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x14, r6, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x89ca1276bd65e311}, 0x810)
sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.662419218s ago: executing program 1 (id=1415):
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)=ANY=[], 0x34}}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x792c788efadeb7cd, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x19}}, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000f6c0), 0x0, 0x40)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce476", 0x5, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448e1, &(0x7f0000000240)={0x1, 0xfbfe, "be4108"})
r4 = socket(0x11, 0x2, 0x10001)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, 0x30, 0x9, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0)

780.253124ms ago: executing program 1 (id=1418):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000300)=0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$inet(r4, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003940)="3afc2ecff6f266726cb29b1b1825d9999d6fea2cab9613b3c4ca72ef72a6c02158d7eed64377f1f3f15538e9cef45a0ae59bfb18d50dc887d4d8a3d202655f95e7fc87d49a506ff6726ca8a235b614ad4d14c8e652e43473a6b1af7a3a045dbac8f3b5e571fa11ce17e11e81eb86fe70b234e392b8495c66f3d901c9c34d60", 0x7f}, {&(0x7f00000039c0)="58eda318ade3d6e5c5cfd732f28b98677509ba6c725c1a2e0fb1394633983bb2165140cc5043f79e8c829b5cb1ea7a31de01ab72aae07194a0e4d5ea55085a1a13e71252e986f625ea68e06f318a721d6c515e2de7070eb60029ab5ce1865893cbd2cf5ed3db11c1e96fc0eb58e8606d12ba8252a33bf1e6c2703d7ee701b59f2caa3cc890f634419c9b2585b2d91d4c948ce32d6ab09d0723c22e3021733d210b3ac966ace42d1b04bddbc4ae4a6e355c7ccf564f5e0be6d6f247fcf699ab43a19f2cb470bef71a699cf2f7916f2ff9334eb308", 0xd4}, {&(0x7f0000003ac0)="f9090ea3845041653db38de301c25c180343f1bcbbeaff3157e8c4f242d58321b16c4b690d490319a33c2cb3003a3f021db04ccf587b46eeec592c73c7f7ce7968440cfabdaf7679afe4792c529c8e3e56f49be2ccf105a460428aec50a5c82467e6560cc5c3244b8110fdfb6e1db163ba94ac6fc081bb7f1662be435355b35820ff62eb3ccb6ac7f6b7c647ea292659e23e24bb31f398677899473491914e2d0e2b2d1210441efbe6631345", 0xac}], 0x3}}], 0x1, 0x4000000)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

680.10822ms ago: executing program 1 (id=1419):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100004e4662d94221811ab8bcad465b10de35c07c3f49464d103d8f6936d94f2d3bf7e8a69392066f078b8e2a2258897ed66a23f4af5dbd8e8af0bb522763d59d0e93735ac47edc02e5908ccb2733f40318d4f41a3d", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$sock_buf(r6, 0x1, 0x22, &(0x7f0000000040)=""/232, &(0x7f0000000180)=0xe8)
socket$key(0xf, 0x3, 0x2)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r7 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@delqdisc={0x580, 0x25, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_red={{0x8}, {0x120, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0xfffffffe}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x5}]}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffffd}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5a, 0x3, 0x0, 0x5, 0x0, 0xf, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x92]}}, {{0x1c, 0x1, {0x2, 0x4, 0x4, 0x0, 0x2, 0x10, 0xc17, 0x2}}, {0x8, 0x2, [0x4, 0x40]}}, {{0x1c, 0x1, {0xa5, 0x7f, 0x2, 0xfffffff3, 0x2, 0x818d, 0xe, 0x6}}, {0x10, 0x2, [0xffff, 0x928, 0x7, 0x1, 0xce, 0xe53]}}, {{0x1c, 0x1, {0x40, 0x4, 0x1000, 0x7fff, 0x0, 0x0, 0x9, 0x3}}, {0xa, 0x2, [0x1, 0x3, 0x8001]}}, {{0x1c, 0x1, {0x4, 0x40, 0x197f, 0x8b, 0x1, 0x2, 0x2, 0x4}}, {0xc, 0x2, [0x8000, 0x4, 0x1, 0x8000]}}, {{0x1c, 0x1, {0x9, 0x4, 0xe, 0x7f, 0x32c1b64239b59c7b, 0x6, 0xf, 0x6}}, {0x10, 0x2, [0x8, 0xff5b, 0x12, 0x54e, 0x200, 0x1000]}}, {{0x1c, 0x1, {0x4, 0xf0, 0x3ab8, 0x5, 0x1, 0x7, 0xa, 0x3}}, {0xa, 0x2, [0xff81, 0x8, 0x9]}}, {{0x1c, 0x1, {0x8b, 0x7, 0x8, 0x8, 0x0, 0x6e, 0x4, 0x3}}, {0xa, 0x2, [0x6, 0xe, 0x5]}}]}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x16c, 0x2, {{0x10, [0x6, 0x5, 0x2, 0x10, 0xa, 0xd, 0x2, 0x7, 0xd, 0x7, 0x0, 0x9, 0xd, 0xb, 0x0, 0x9], 0x0, [0x7, 0xf, 0xa, 0x932, 0x2a73, 0x40, 0x3, 0x474, 0xff, 0x9, 0x1, 0x4b0d, 0x6, 0x2, 0x509c, 0x4], [0xfff9, 0x3, 0xe, 0x4c9d, 0x4, 0x7, 0x7f, 0x5237, 0x5, 0x2, 0xfff8, 0x7, 0x1, 0x101, 0x3, 0x1]}, [@TCA_MQPRIO_MIN_RATE64={0x94, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x5}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x7fffffff}, {0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x8}, {0xc}, {0xc, 0x3, 0x626}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x100000000}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x6}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MIN_RATE64={0x10, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7fffffff}]}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0x4c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x40}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x8a}, {0xc, 0x4, 0xffffffffffffffba}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x9}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x28000}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x3, 0xf, 0x1, 0x1ff, 0x40, 0x1}}, {0x6, 0x2, [0x7800]}}, {{0x1c, 0x1, {0x94, 0x1f, 0x7767, 0x7ff, 0x2, 0x1ff, 0x9, 0x3}}, {0xa, 0x2, [0xfff8, 0x3, 0xf]}}, {{0x1c, 0x1, {0x80, 0x4, 0xfffc, 0x6, 0x2, 0x9, 0x7, 0x4}}, {0xc, 0x2, [0x8, 0x8, 0x1ff, 0x9]}}, {{0x1c, 0x1, {0x6, 0x1, 0x8, 0x4, 0x1, 0x240, 0x1, 0x7}}, {0x12, 0x2, [0x7ff, 0x3ff, 0xc53f, 0x4, 0x5, 0x8001, 0x7]}}, {{0x1c, 0x1, {0xd7, 0x7f, 0x3aa2, 0x1000, 0x2, 0x4, 0x25a, 0x1}}, {0x6, 0x2, [0xf]}}, {{0x1c, 0x1, {0x2, 0x8, 0x8, 0x1, 0x2, 0x9, 0xf3, 0x4}}, {0xc, 0x2, [0x6, 0x6, 0x2, 0x7]}}, {{0x1c, 0x1, {0xe, 0xb, 0x6, 0x4, 0x2, 0x4, 0x410, 0x3}}, {0xa, 0x2, [0x5, 0x2, 0x5]}}, {{0x1c, 0x1, {0x5, 0xa, 0x0, 0xfff, 0x0, 0x7, 0x4, 0x5}}, {0xe, 0x2, [0xdfa, 0x200, 0x9, 0x40, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd213}]}, 0x580}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

504.129121ms ago: executing program 2 (id=1420):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1d, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x4000000, 0x0, 0x3}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000ffffff8500000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

389.480775ms ago: executing program 2 (id=1421):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa5}, 0x90)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

210.425215ms ago: executing program 2 (id=1422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth0_to_batadv\x00', <r2=>0x0})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000880)={0x1d, r2}, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

209.574248ms ago: executing program 2 (id=1423):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493aa8", 0x1002, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4008000)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xfffffffffffffd03, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fddbdf2501000100000400000008003400070000e10700030090d2c9f610469a82b1939c1ec0a3b124f5e98e086b77de454b893ba7f90578f2b3f33f5bf4a9ad080505009d61807e0818f8b0f624e99c369265ed", @ANYRES32=r2, @ANYBLOB="0800320001000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
close(r5)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8)
r9 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r9, 0x0, 0xfffffffffffffd4a, 0x4000, &(0x7f0000000480)={0x23, 0x81, 0x8, 0x6}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000597dce2773114200"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

65.229394ms ago: executing program 2 (id=1424):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x8, 'pim6reg\x00', {'veth1_to_bond\x00'}, 0xfff}) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000c42980a9506c5a07113ec3fe2e7e767f00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f00000001c0), &(0x7f0000000280)=@udp6, 0x11}, 0x20)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd6c45fcdbdf25923d110308000300", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002a0001000000050029000100000008000300", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824) (async)
r10 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4) (async)
r11 = socket(0x10, 0x80003, 0x0) (async)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno\x00', 0xb) (async)
setsockopt$inet_buf(r12, 0x0, 0x2c, 0x0, 0x0) (async)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', <r14=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10b}]}}]}, 0x40}}, 0x0) (async)
r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r15, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r15, &(0x7f0000000040)="18000000010005", 0x7) (async)
getsockopt$XDP_STATISTICS(r11, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x30)

0s ago: executing program 2 (id=1425):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x6000008, 0x8c4b815a5465c2b1, r0, 0xf1f5000)
r1 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
socket$inet(0x2, 0x80000, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x5, 0x800000}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c840)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x10, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000000), 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16614' (ED25519) to the list of known hosts.
syzkaller login: [   47.494858][ T5805] cgroup: Unknown subsys name 'net'
[   47.655567][ T5805] cgroup: Unknown subsys name 'cpuset'
[   47.660272][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.384068][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.536451][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.539600][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.542362][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.545828][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.548459][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.619679][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.635580][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.639040][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.645265][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.648450][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.652713][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.658971][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.673282][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.676168][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.688928][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.751256][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   53.862958][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.865324][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.867849][ T5843] bridge_slave_0: entered allmulticast mode
[   53.870784][ T5843] bridge_slave_0: entered promiscuous mode
[   53.890495][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.893398][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.895653][ T5843] bridge_slave_1: entered allmulticast mode
[   53.898876][ T5843] bridge_slave_1: entered promiscuous mode
[   53.947058][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.968543][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.013966][ T5843] team0: Port device team_slave_0 added
[   54.026287][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   54.035412][ T5843] team0: Port device team_slave_1 added
[   54.068581][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.070824][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.078706][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.095364][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.108536][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.110860][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.119105][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.205549][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.207814][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.210085][ T5851] bridge_slave_0: entered allmulticast mode
[   54.213312][ T5851] bridge_slave_0: entered promiscuous mode
[   54.216822][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.219167][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.221517][ T5851] bridge_slave_1: entered allmulticast mode
[   54.225193][ T5851] bridge_slave_1: entered promiscuous mode
[   54.256355][ T5843] hsr_slave_0: entered promiscuous mode
[   54.258691][ T5843] hsr_slave_1: entered promiscuous mode
[   54.278005][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.280279][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.283121][ T5849] bridge_slave_0: entered allmulticast mode
[   54.285772][ T5849] bridge_slave_0: entered promiscuous mode
[   54.306263][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.309373][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.313584][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.316514][ T5849] bridge_slave_1: entered allmulticast mode
[   54.320432][ T5849] bridge_slave_1: entered promiscuous mode
[   54.339277][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.396964][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.401063][ T5851] team0: Port device team_slave_0 added
[   54.408711][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.417882][ T5851] team0: Port device team_slave_1 added
[   54.464850][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.467675][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.476126][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.485489][ T5849] team0: Port device team_slave_0 added
[   54.487811][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.490042][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.498179][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.511907][ T5849] team0: Port device team_slave_1 added
[   54.556339][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.559172][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.567542][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.587219][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.590053][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.604243][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.614277][ T5851] hsr_slave_0: entered promiscuous mode
[   54.617429][ T5851] hsr_slave_1: entered promiscuous mode
[   54.620405][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   54.624683][ T5851] Cannot create hsr debugfs directory
[   54.679731][ T5849] hsr_slave_0: entered promiscuous mode
[   54.683086][ T5849] hsr_slave_1: entered promiscuous mode
[   54.685993][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   54.688284][ T5849] Cannot create hsr debugfs directory
[   54.767978][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.788483][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.817586][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.837118][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.940429][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.949771][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.965448][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.974051][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.010982][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.020101][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.026273][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.040607][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.104310][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.110402][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.138872][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   55.144688][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   55.159067][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.161944][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.171320][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.173644][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.180402][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.183362][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.198610][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.209097][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.211597][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.255583][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.278503][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.281123][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.295286][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.297604][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.378154][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.444598][ T5851] veth0_vlan: entered promiscuous mode
[   55.459683][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.465371][ T5851] veth1_vlan: entered promiscuous mode
[   55.469978][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.507352][ T5851] veth0_macvtap: entered promiscuous mode
[   55.518004][ T5851] veth1_macvtap: entered promiscuous mode
[   55.534763][ T5843] veth0_vlan: entered promiscuous mode
[   55.555062][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.560315][ T5843] veth1_vlan: entered promiscuous mode
[   55.570812][ T5849] veth0_vlan: entered promiscuous mode
[   55.579482][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.583332][ T5846] Bluetooth: hci0: command tx timeout
[   55.601894][ T5849] veth1_vlan: entered promiscuous mode
[   55.606242][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.619673][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.624904][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.632988][ T5843] veth0_macvtap: entered promiscuous mode
[   55.636526][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.644351][ T5843] veth1_macvtap: entered promiscuous mode
[   55.700508][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.711121][ T5849] veth0_macvtap: entered promiscuous mode
[   55.722688][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.741427][ T5849] veth1_macvtap: entered promiscuous mode
[   55.741530][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.744081][ T5846] Bluetooth: hci1: command tx timeout
[   55.747465][ T5853] Bluetooth: hci2: command tx timeout
[   55.757517][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.767203][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.769986][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.786228][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.802104][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.807865][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.838376][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.845123][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.852877][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.859047][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.862253][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.868679][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.871131][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.872158][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.881766][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.932173][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.937210][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.961192][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.990035][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.996213][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.038674][  T171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.042064][  T171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.109627][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.117574][ T5917] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4'.
[   56.616429][ T5944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'.
[   56.811368][ T5952] netlink: 'syz.0.9': attribute type 2 has an invalid length.
[   56.836074][ T5952] : entered promiscuous mode
[   56.926686][ T5950] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8'.
[   56.930486][ T5950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8'.
[   56.963860][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   56.995178][ T5950] lo speed is unknown, defaulting to 1000
[   57.011057][ T5950] lo speed is unknown, defaulting to 1000
[   57.015788][ T5950] lo speed is unknown, defaulting to 1000
[   57.081775][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.169129][ T5966] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   57.365020][ T5897] lo speed is unknown, defaulting to 1000
[   57.367769][ T5950] infiniband syz0: set active
[   57.370052][ T5950] infiniband syz0: added lo
[   57.445879][ T5950] RDS/IB: syz0: added
[   57.448444][ T5950] smc: adding ib device syz0 with port count 1
[   57.451140][ T5950] smc:    ib device syz0 port 1 has pnetid 
[   57.455022][ T5897] lo speed is unknown, defaulting to 1000
[   57.465996][ T5950] lo speed is unknown, defaulting to 1000
[   57.663162][ T5853] Bluetooth: hci0: command tx timeout
[   57.668604][ T5950] lo speed is unknown, defaulting to 1000
[   57.825347][ T5846] Bluetooth: hci1: command tx timeout
[   57.827133][ T5853] Bluetooth: hci2: command tx timeout
[   57.846969][ T5975] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   57.861464][ T5950] lo speed is unknown, defaulting to 1000
[   57.991383][ T5950] syz.2.8 (5950) used greatest stack depth: 18752 bytes left
[   58.189190][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   58.202190][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   58.202247][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'.
[   58.208447][ T5986] hsr_slave_0: left promiscuous mode
[   58.210777][ T5986] hsr_slave_1: left promiscuous mode
[   58.718182][ T5990] bridge_slave_0: left allmulticast mode
[   58.720350][ T5990] bridge_slave_0: left promiscuous mode
[   58.725291][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.731753][ T5990] bridge_slave_1: left allmulticast mode
[   58.737604][ T5990] bridge_slave_1: left promiscuous mode
[   58.739780][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.746686][ T5990] bond0: (slave bond_slave_0): Releasing backup interface
[   58.753903][ T5990] bond0: (slave bond_slave_1): Releasing backup interface
[   58.763433][ T5990] team0: Port device team_slave_0 removed
[   58.769839][ T5990] team0: Port device team_slave_1 removed
[   58.773658][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.775858][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.779178][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.781469][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.849707][ T5990] team0: Mode changed to "activebackup"
[   59.104604][ T6011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.213674][ T6018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.253421][ T6018] bridge_slave_1: left allmulticast mode
[   59.255255][ T6018] bridge_slave_1: left promiscuous mode
[   59.257102][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.261389][ T6018] bridge_slave_0: left allmulticast mode
[   59.264306][ T6018] bridge_slave_0: left promiscuous mode
[   59.266547][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.378760][ T6021] wg0 speed is unknown, defaulting to 1000
[   59.381110][ T6021] wg0 speed is unknown, defaulting to 1000
[   59.383594][ T6021] wg0 speed is unknown, defaulting to 1000
[   59.492857][ T6021] infiniband syz2: set active
[   59.494366][ T6021] infiniband syz2: added wg0
[   59.497633][  T792] wg0 speed is unknown, defaulting to 1000
[   59.514077][ T6021] RDS/IB: syz2: added
[   59.515410][ T6021] smc: adding ib device syz2 with port count 1
[   59.517352][ T6021] smc:    ib device syz2 port 1 has pnetid 
[   59.520079][  T792] wg0 speed is unknown, defaulting to 1000
[   59.522610][ T6021] wg0 speed is unknown, defaulting to 1000
[   59.640554][ T6021] wg0 speed is unknown, defaulting to 1000
[   59.644983][ T6034] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[   59.648558][ T6034] netlink: 'syz.2.32': attribute type 17 has an invalid length.
[   59.657192][ T6034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.664734][    T9] lo speed is unknown, defaulting to 1000
[   59.743032][ T5853] Bluetooth: hci0: command tx timeout
[   59.776341][ T6042] tipc: Started in network mode
[   59.778672][ T6042] tipc: Node identity d2564573c276, cluster identity 4711
[   59.781153][ T6042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.789503][ T6040] syzkaller0: entered promiscuous mode
[   59.792215][ T6040] syzkaller0: entered allmulticast mode
[   59.798012][ T6041] tipc: Resetting bearer <eth:syzkaller0>
[   59.809892][ T6021] wg0 speed is unknown, defaulting to 1000
[   59.814122][ T6041] tipc: Resetting bearer <eth:syzkaller0>
[   59.824310][ T6041] tipc: Disabling bearer <eth:syzkaller0>
[   59.902609][ T5853] Bluetooth: hci2: command tx timeout
[   59.902946][ T5846] Bluetooth: hci1: command tx timeout
[   59.997937][ T6048] Zero length message leads to an empty skb
[   60.103835][ T6048] netlink: 'syz.2.35': attribute type 13 has an invalid length.
[   60.314555][ T6061] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   60.466871][ T6059] netlink: 'syz.0.39': attribute type 4 has an invalid length.
[   60.583241][ T6064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.627909][ T6067] netlink: 'syz.1.40': attribute type 5 has an invalid length.
[   60.656056][ T6064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.774041][ T6064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.837231][ T6064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.961841][ T6078] lo speed is unknown, defaulting to 1000
[   60.971509][ T5866] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.991987][ T5866] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.029915][ T5866] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.033923][ T5866] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.109640][ T6079] netlink: 'syz.0.45': attribute type 1 has an invalid length.
[   61.113412][ T6079] __nla_validate_parse: 12 callbacks suppressed
[   61.113424][ T6079] netlink: 232 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.122841][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.165459][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'.
[   61.222111][ T6091] netlink: 56 bytes leftover after parsing attributes in process `syz.1.48'.
[   61.237839][ T6078] wg0 speed is unknown, defaulting to 1000
[   61.240438][ T6091] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[   61.318364][ T6098] netlink: 'syz.1.51': attribute type 4 has an invalid length.
[   61.448900][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   61.452040][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'.
[   61.549870][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'.
[   61.679064][ T6119] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   61.822875][ T5846] Bluetooth: hci0: command tx timeout
[   61.841390][ T6134] netlink: 'syz.1.63': attribute type 3 has an invalid length.
[   61.856425][ T6134] syz_tun: entered allmulticast mode
[   61.888188][ T6134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.907542][ T6134] netlink: 'syz.1.63': attribute type 11 has an invalid length.
[   61.918047][ T6136] lo speed is unknown, defaulting to 1000
[   61.976239][ T6137] netlink: 'syz.0.64': attribute type 13 has an invalid length.
[   61.982448][ T5846] Bluetooth: hci1: command tx timeout
[   61.992758][ T5846] Bluetooth: hci2: command tx timeout
[   62.004872][ T6133] syz_tun: left allmulticast mode
[   62.067077][ T6146] netlink: 14 bytes leftover after parsing attributes in process `syz.1.66'.
[   62.097225][ T6137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.202052][ T6146] bond0 (unregistering): Released all slaves
[   62.216572][ T6136] wg0 speed is unknown, defaulting to 1000
[   62.228369][ T6153] pim6reg: entered allmulticast mode
[   62.276135][ T6155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.68'.
[   62.402917][ T6166] tipc: New replicast peer: 255.255.255.255
[   62.408435][ T6166] tipc: Enabled bearer <udp:syz2>, priority 10
[   62.480829][ T6173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.496143][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'.
[   62.496853][ T6171] lo speed is unknown, defaulting to 1000
[   62.525505][ T6174] netlink: 'syz.0.71': attribute type 1 has an invalid length.
[   62.649972][ T6171] wg0 speed is unknown, defaulting to 1000
[   62.756888][ T6180] siw: device registration error -23
[   62.893145][ T6145] pim6reg: left allmulticast mode
[   63.535017][   T59] tipc: Node number set to 270550387
[   63.703815][ T6216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.077195][ T6253] lo speed is unknown, defaulting to 1000
[   64.247217][ T6253] wg0 speed is unknown, defaulting to 1000
[   64.580675][ T6260] netlink: set zone limit has 8 unknown bytes
[   64.586630][ T6261] netlink: set zone limit has 8 unknown bytes
[   64.688518][ T6263] tipc: Enabling <ib:lo> not permitted
[   64.690726][ T6263] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   65.411747][ T6300] netlink: 'syz.2.104': attribute type 4 has an invalid length.
[   65.529557][ T6302] netlink: 'syz.2.105': attribute type 39 has an invalid length.
[   65.844451][ T6316] veth2: entered allmulticast mode
[   66.029764][ T6329] netlink: 'syz.0.112': attribute type 9 has an invalid length.
[   66.048550][ T6329] hsr0: entered promiscuous mode
[   66.050378][ T6329] macvlan2: entered promiscuous mode
[   66.052250][ T6329] macvlan2: entered allmulticast mode
[   66.054501][ T6329] hsr0: entered allmulticast mode
[   66.062734][ T6329] hsr_slave_0: entered allmulticast mode
[   66.066942][ T6329] hsr_slave_1: entered allmulticast mode
[   66.093013][ T6333] smc: removing ib device syz2
[   66.147572][ T6336] __nla_validate_parse: 20 callbacks suppressed
[   66.147588][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'.
[   66.154723][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'.
[   66.395923][ T6344] policy can only be matched on NF_INET_PRE_ROUTING
[   66.395937][ T6344] unable to load match
[   66.610770][ T6358] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   66.918265][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'.
[   66.944577][ T5846] Bluetooth: hci2: command tx timeout
[   66.998294][ T6385] ieee802154 phy0 wpan0: encryption failed: -22
[   67.047010][ T6388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.129'.
[   67.286165][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'.
[   67.289515][ T6407] netem: change failed
[   67.376605][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   67.382208][ T6409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.135'.
[   67.393273][ T6409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.135'.
[   67.436988][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   67.488834][ T6420] netlink: 60 bytes leftover after parsing attributes in process `syz.1.138'.
[   67.494583][ T6419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.138'.
[   67.683145][ T6431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.733880][ T6431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.750045][ T6441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.776277][ T6442] syzkaller0: entered promiscuous mode
[   67.778402][ T6442] syzkaller0: entered allmulticast mode
[   67.781561][ T6441] syzkaller0: mtu less than device minimum
[   67.810904][ T6431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.829545][ T6442] tipc: Resetting bearer <eth:syzkaller0>
[   68.605643][ T6442] tipc: Disabling bearer <eth:syzkaller0>
[   68.627241][ T6431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.752633][ T6453] bond0: (slave bond_slave_0): Releasing backup interface
[   68.758696][ T6453] bond0: (slave bond_slave_1): Releasing backup interface
[   68.766630][ T6453] team0: Port device team_slave_0 removed
[   68.783853][ T6453] team0: Port device team_slave_1 removed
[   68.786385][ T6453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.788913][ T6453] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.814056][ T6453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.816636][ T6453] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.934654][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.962217][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.011023][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.049194][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.123330][ T6486] warning: `syz.2.152' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.247311][ T6492] lo speed is unknown, defaulting to 1000
[   69.301752][ T6503] bridge0: port 1(ipvlan0) entered blocking state
[   69.306764][ T6503] bridge0: port 1(ipvlan0) entered disabled state
[   69.309612][ T6503] ipvlan0: entered allmulticast mode
[   69.311848][ T6503] bridge0: entered allmulticast mode
[   69.316938][ T6503] ipvlan0: left allmulticast mode
[   69.318982][ T6503] bridge0: left allmulticast mode
[   69.354759][ T6504] bridge0: port 1(ipvlan0) entered blocking state
[   69.356962][ T6504] bridge0: port 1(ipvlan0) entered disabled state
[   69.359376][ T6504] ipvlan0: entered allmulticast mode
[   69.361276][ T6504] bridge0: entered allmulticast mode
[   69.365496][ T6504] ipvlan0: left allmulticast mode
[   69.367183][ T6504] bridge0: left allmulticast mode
[   69.381548][ T6498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.603767][ T6510] tipc: Started in network mode
[   69.606447][ T6510] tipc: Node identity 4280dabc1508, cluster identity 4711
[   69.612837][ T6510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.615693][ T6508] syzkaller0: entered promiscuous mode
[   69.617421][ T6508] syzkaller0: entered allmulticast mode
[   69.647712][ T6507] tipc: Resetting bearer <eth:syzkaller0>
[   69.660483][ T6507] tipc: Disabling bearer <eth:syzkaller0>
[   69.863271][ T6518] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   69.865222][ T6516] syzkaller0: entered promiscuous mode
[   69.868442][ T6516] syzkaller0: entered allmulticast mode
[   70.772677][ T6518] syzkaller0: entered promiscuous mode
[   70.774890][ T6518] syzkaller0: entered allmulticast mode
[   70.947425][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   70.954084][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.295023][ T6544] nbd: must specify a size in bytes for the device
[   71.856860][ T6537] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   71.940148][ T6547] __nla_validate_parse: 8 callbacks suppressed
[   71.940163][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   71.999375][ T6551] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   72.079187][ T6558] bond0: (slave geneve2): making interface the new active one
[   72.085987][ T6558] bond0: (slave geneve2): Enslaving as an active interface with an up link
[   72.095409][ T5866] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   72.096965][ T6562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.175'.
[   72.107562][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   72.110492][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'.
[   72.114333][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   72.117192][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   72.134467][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.186650][ T6565] netlink: 'syz.2.176': attribute type 7 has an invalid length.
[   72.189590][ T6565] netlink: 'syz.2.176': attribute type 8 has an invalid length.
[   72.192244][ T6565] netlink: 'syz.2.176': attribute type 15 has an invalid length.
[   72.541038][ T6595] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   72.556264][ T6595] Bluetooth: MGMT ver 1.23
[   72.569725][ T6597] veth0: entered promiscuous mode
[   72.574853][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'.
[   72.755127][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'.
[   72.758859][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.193'.
[   72.818839][ T6618] openvswitch: netlink: IP tunnel TTL not specified.
[   72.843592][ T6622] netlink: 92 bytes leftover after parsing attributes in process `syz.1.196'.
[   72.848845][ T6622] netlink: 11708 bytes leftover after parsing attributes in process `syz.1.196'.
[   72.878737][ T6622] netlink: 92 bytes leftover after parsing attributes in process `syz.1.196'.
[   73.011341][ T6635] netlink: 'syz.2.201': attribute type 4 has an invalid length.
[   73.020147][  T793] lo speed is unknown, defaulting to 1000
[   73.024599][  T793] syz0: Port: 1 Link DOWN
[   73.026921][  T793] lo speed is unknown, defaulting to 1000
[   73.030284][ T6635] netlink: 'syz.2.201': attribute type 4 has an invalid length.
[   73.037881][  T793] lo speed is unknown, defaulting to 1000
[   73.044670][  T793] syz0: Port: 1 Link ACTIVE
[   73.046667][  T793] lo speed is unknown, defaulting to 1000
[   73.104445][ T6640] pim6reg: entered allmulticast mode
[   73.117755][ T6640] pim6reg: left allmulticast mode
[   73.387615][ T6661] tipc: Enabling of bearer <et:g> rejected, media not registered
[   73.552589][ T6665] dvmrp8: entered allmulticast mode
[   73.609487][ T6657] dvmrp8: left allmulticast mode
[   73.685194][ T6670] vlan2: entered promiscuous mode
[   73.687483][ T6670] vlan2: entered allmulticast mode
[   73.707720][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[   73.730718][ T6672] openvswitch: netlink: Flow actions attr not present in new flow.
[   73.909946][ T6685] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   73.915382][ T6685] netlink: 'syz.0.217': attribute type 12 has an invalid length.
[   73.918145][ T6685] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   74.048348][ T6696] tipc: Started in network mode
[   74.050477][ T6696] tipc: Node identity 16cf7fe54a62, cluster identity 4711
[   74.060860][ T6696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.073598][ T6693] tipc: Disabling bearer <eth:syzkaller0>
[   74.168464][ T6708] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.277480][ T6715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.372790][ T6715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.529400][ T6715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.567545][ T6725] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.614964][ T6725] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   74.671844][ T6728] macvlan2: entered promiscuous mode
[   74.684004][ T6728] macvlan2: entered allmulticast mode
[   74.692877][ T6728] bond1: (slave macvlan2): Error -98 calling set_mac_address
[   74.776603][ T6715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.950784][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.985335][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.039911][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.068236][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.165200][ T6749] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.179784][ T6749] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   75.184425][ T6749] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[   75.398673][ T6776] validate_nla: 2 callbacks suppressed
[   75.398695][ T6776] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[   75.451821][ T6785] netlink: 'syz.2.247': attribute type 11 has an invalid length.
[   75.547834][ T6788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.550574][ T6788] syzkaller0: entered promiscuous mode
[   75.553305][ T6788] syzkaller0: entered allmulticast mode
[   75.578869][ T6788] tipc: Resetting bearer <eth:syzkaller0>
[   75.582057][ T6787] tipc: Resetting bearer <eth:syzkaller0>
[   75.609791][ T6787] tipc: Disabling bearer <eth:syzkaller0>
[   75.703721][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.706559][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.765322][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.771548][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.852186][ T6799] hsr0: left allmulticast mode
[   75.854611][ T6799] hsr_slave_0: left allmulticast mode
[   75.856735][ T6799] macvlan2: left promiscuous mode
[   75.858499][ T6799] macvlan2: left allmulticast mode
[   75.894438][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.897487][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.905726][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.908327][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.204780][ T6818] erspan0: entered promiscuous mode
[   76.208323][ T6818] erspan0: left promiscuous mode
[   76.266397][ T6823] !: renamed from dummy0 (while UP)
[   76.499654][ T6837] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   76.505410][ T6837] tipc: Disabling bearer <udp:syz2>
[   76.637053][ T6850] lo speed is unknown, defaulting to 1000
[   76.758195][ T6861] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.878458][ T6866] syzkaller1: entered promiscuous mode
[   76.880597][ T6866] syzkaller1: entered allmulticast mode
[   76.992171][ T6873] netlink: 'syz.2.270': attribute type 13 has an invalid length.
[   76.999349][ T6873] netlink: 'syz.2.270': attribute type 17 has an invalid length.
[   77.010196][ T6873] lo: entered promiscuous mode
[   77.012111][ T6873] lo: entered allmulticast mode
[   77.016702][ T6873] tunl0: entered promiscuous mode
[   77.018489][ T6873] tunl0: entered allmulticast mode
[   77.020675][ T6873] gre0: entered promiscuous mode
[   77.023038][ T6873] gre0: entered allmulticast mode
[   77.025223][ T6873] gretap0: entered promiscuous mode
[   77.027014][ T6873] gretap0: entered allmulticast mode
[   77.029431][ T6873] erspan0: entered promiscuous mode
[   77.031307][ T6873] erspan0: entered allmulticast mode
[   77.034595][ T6873] ip_vti0: entered promiscuous mode
[   77.036628][ T6873] ip_vti0: entered allmulticast mode
[   77.039203][ T6873] ip6_vti0: entered promiscuous mode
[   77.041279][ T6873] ip6_vti0: entered allmulticast mode
[   77.076587][ T6873] sit0: entered promiscuous mode
[   77.078317][ T6873] sit0: entered allmulticast mode
[   77.080386][ T6873] ip6tnl0: entered promiscuous mode
[   77.082040][ T6873] ip6tnl0: entered allmulticast mode
[   77.084672][ T6873] ip6gre0: entered promiscuous mode
[   77.086575][ T6873] ip6gre0: entered allmulticast mode
[   77.088563][ T6873] ip6gretap0: entered promiscuous mode
[   77.090440][ T6873] ip6gretap0: entered allmulticast mode
[   77.093499][ T6873] vcan0: entered promiscuous mode
[   77.095194][ T6873] vcan0: entered allmulticast mode
[   77.097315][ T6873] bond0: entered promiscuous mode
[   77.098949][ T6873] bond0: entered allmulticast mode
[   77.101227][ T6873] team0: entered promiscuous mode
[   77.104425][ T6873] team0: entered allmulticast mode
[   77.109535][ T6873] dummy0: entered promiscuous mode
[   77.111267][ T6873] dummy0: entered allmulticast mode
[   77.114723][ T6873] nlmon0: entered promiscuous mode
[   77.116401][ T6873] nlmon0: entered allmulticast mode
[   77.118493][ T6873] caif0: entered promiscuous mode
[   77.120450][ T6873] caif0: entered allmulticast mode
[   77.124666][ T6873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.151634][ T6866] lo speed is unknown, defaulting to 1000
[   77.348086][ T6876] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   78.360600][ T6936] __nla_validate_parse: 15 callbacks suppressed
[   78.360610][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.288'.
[   78.379613][ T6936] lo speed is unknown, defaulting to 1000
[   78.929275][ T6936] netlink: 'syz.1.288': attribute type 6 has an invalid length.
[   79.006015][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.291'.
[   79.009260][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   79.218135][ T6953] veth1: entered promiscuous mode
[   79.351611][ T6955] syzkaller1: entered promiscuous mode
[   79.354283][ T6955] syzkaller1: entered allmulticast mode
[   79.396773][ T6955] netlink: 256 bytes leftover after parsing attributes in process `syz.0.293'.
[   79.720399][ T6976] netlink: 'syz.1.300': attribute type 4 has an invalid length.
[   79.735393][ T6976] netlink: 'syz.1.300': attribute type 4 has an invalid length.
[   79.859186][ T6983] syz_tun: entered allmulticast mode
[   79.861862][ T6983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.302'.
[   79.888739][ T6983] dvmrp1: entered allmulticast mode
[   79.913167][ T6982] syz_tun: left allmulticast mode
[   79.964489][ T6988] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   80.016182][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'.
[   80.019176][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'.
[   80.021938][ T6991] netlink: 'syz.2.305': attribute type 14 has an invalid length.
[   80.024896][ T6991] netlink: 'syz.2.305': attribute type 13 has an invalid length.
[   80.049936][ T6988] batadv_slave_0: entered promiscuous mode
[   80.062479][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'.
[   80.066005][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'.
[   80.266306][ T7000] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   80.314514][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   80.477153][ T7017] nbd: couldn't find device at index 536870912
[   80.667214][ T7025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.671248][ T7025] syzkaller0: entered promiscuous mode
[   80.674100][ T7025] syzkaller0: entered allmulticast mode
[   80.693885][ T7025] tipc: Resetting bearer <eth:syzkaller0>
[   80.713514][ T7025] tipc: Disabling bearer <eth:syzkaller0>
[   80.816612][ T7041] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   80.914229][ T7041] nbd0: detected capacity change from 0 to 127
[   80.918373][   T55] block nbd0: Receive control failed (result -32)
[   80.919768][ T5847] block nbd0: Send control failed (result -32)
[   80.925217][ T5847] block nbd0: Request send failed, requeueing
[   80.929719][   T60] block nbd0: Dead connection, failed to find a fallback
[   80.934438][   T60] block nbd0: shutting down sockets
[   80.935513][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.937065][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.941071][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read
[   80.944123][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[   80.955498][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.968889][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read
[   80.981802][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.986141][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read
[   80.989061][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   80.991914][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.035546][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.038563][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.041213][ T5847] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.046069][ T5847] Buffer I/O error on dev nbd0, logical block 2, async page read
[   81.048904][ T5847] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.052228][ T5847] Buffer I/O error on dev nbd0, logical block 3, async page read
[   81.067256][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.070808][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.073705][ T5847] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.076689][ T5847] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.082715][ T5847] ldm_validate_partition_table(): Disk read failed.
[   81.093736][ T5847] Dev nbd0: unable to read RDB block 0
[   81.098685][ T5847]  nbd0: unable to read partition table
[   81.110313][ T5847] ldm_validate_partition_table(): Disk read failed.
[   81.114498][ T5847] Dev nbd0: unable to read RDB block 0
[   81.117478][ T5847]  nbd0: unable to read partition table
[   81.176096][ T7062] netlink: 'syz.1.325': attribute type 7 has an invalid length.
[   81.185618][   T10] cfg80211: failed to load regulatory.db
[   81.314943][ T7067] delete_channel: no stack
[   81.380692][ T7072] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[   81.385808][ T7072] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[   83.309027][ T7134] batadv_slave_0: left promiscuous mode
[   83.351654][ T7134] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   83.375647][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.378517][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   83.383628][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.388634][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   83.394823][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.399858][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   83.408956][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.411849][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   83.531213][ T7143] syz_tun: entered allmulticast mode
[   83.536255][ T7143] syz_tun: left allmulticast mode
[   83.538250][ T7143] dvmrp1: left allmulticast mode
[   83.588079][ T7144] siw: device registration error -23
[   83.618247][ T7144] 8021q: adding VLAN 0 to HW filter on device team0
[   83.624968][ T7144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.950609][ T7155] __nla_validate_parse: 8 callbacks suppressed
[   83.950621][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'.
[   83.959355][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'.
[   84.119916][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[   84.168384][ T7178] netlink: 'syz.0.360': attribute type 1 has an invalid length.
[   84.225944][ T7181] pim6reg: entered allmulticast mode
[   84.229239][ T7181] pim6reg: left allmulticast mode
[   84.380257][ T7195] netlink: 164 bytes leftover after parsing attributes in process `syz.0.367'.
[   84.587938][ T7205] netlink: 'syz.2.370': attribute type 178 has an invalid length.
[   84.609485][ T7207] netlink: 'syz.0.371': attribute type 3 has an invalid length.
[   84.646620][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'.
[   87.666601][ T7222] syzkaller0: tun_chr_ioctl cmd 1074041702
[   87.695185][ T7222] syzkaller0: create flow: hash 1713151565 index 1
[   87.703089][ T7222] syzkaller0: tun_chr_ioctl cmd 1074304022
[   87.706177][ T7224] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[   87.709290][ T7224] netlink: 'syz.0.377': attribute type 3 has an invalid length.
[   87.712234][ T7224] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[   87.722615][ T7224] netlink: 204 bytes leftover after parsing attributes in process `syz.0.377'.
[   87.726193][ T7224] NCSI netlink: No device for ifindex 0
[   87.762368][ T7221] syzkaller0: delete flow: hash 1713151565 index 1
[   88.719048][ T7238] netlink: 248 bytes leftover after parsing attributes in process `syz.0.380'.
[   88.874350][ T7250] lo speed is unknown, defaulting to 1000
[   88.974036][ T7260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.388'.
[   88.976864][ T7260] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   89.200579][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'.
[   89.218718][ T7274] macsec1: entered promiscuous mode
[   89.220946][ T7274] macsec1: entered allmulticast mode
[   89.337075][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.354683][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'.
[   89.375978][ T7290] vlan1: entered allmulticast mode
[   89.377594][ T7290] bridge0: entered allmulticast mode
[   89.379475][ T7290] bridge3: port 1(vlan1) entered blocking state
[   89.381578][ T7290] bridge3: port 1(vlan1) entered disabled state
[   89.387593][ T7290] vlan1: entered promiscuous mode
[   89.389991][ T7290] bridge0: entered promiscuous mode
[   89.401042][ T7290] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   89.451386][ T7296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.455163][ T7296] syzkaller0: entered promiscuous mode
[   89.457423][ T7296] syzkaller0: entered allmulticast mode
[   89.476512][ T7296] tipc: Resetting bearer <eth:syzkaller0>
[   89.480049][ T7295] tipc: Resetting bearer <eth:syzkaller0>
[   89.488371][ T7295] tipc: Disabling bearer <eth:syzkaller0>
[   89.572149][ T7300] openvswitch: netlink: IPv4 tun info is not correct
[   89.615928][ T5844] IPVS: starting estimator thread 0...
[   89.622859][ T7302] netlink: 192 bytes leftover after parsing attributes in process `syz.2.403'.
[   89.625855][ T7302] netlink: zone id is out of range
[   89.627531][ T7302] netlink: zone id is out of range
[   89.629180][ T7302] netlink: zone id is out of range
[   89.630863][ T7302] netlink: zone id is out of range
[   89.632599][ T7302] netlink: zone id is out of range
[   89.634648][ T7302] netlink: zone id is out of range
[   89.636195][ T7302] netlink: zone id is out of range
[   89.637789][ T7302] netlink: zone id is out of range
[   89.639469][ T7302] netlink: zone id is out of range
[   89.704757][ T7303] IPVS: using max 61 ests per chain, 146400 per kthread
[   89.747629][ T7311] batadv_slave_1: entered promiscuous mode
[   89.765314][ T7311] netlink: 72 bytes leftover after parsing attributes in process `syz.1.405'.
[   89.767409][ T7317] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.408'.
[   89.768965][ T7315] lo speed is unknown, defaulting to 1000
[   89.771114][ T7317] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.408'.
[   89.774953][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'.
[   89.840358][ T7323] netlink: 'syz.2.409': attribute type 11 has an invalid length.
[   89.844054][ T7323] netlink: 'syz.2.409': attribute type 11 has an invalid length.
[   89.847217][ T7323] netlink: 224 bytes leftover after parsing attributes in process `syz.2.409'.
[   89.847984][ T7311] vlan1 (unregistering): left promiscuous mode
[   89.877728][ T7311] bridge0 (unregistering): left promiscuous mode
[   89.879837][ T7311] bridge3: port 1(vlan1) entered disabled state
[   89.907594][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'.
[   89.938643][ T7326] 8021q: VLANs not supported on vxcan1
[   90.018008][ T7309] batadv_slave_1: left promiscuous mode
[   90.469403][ T7351] lo speed is unknown, defaulting to 1000
[   90.738905][ T7374] netlink: 'syz.1.424': attribute type 23 has an invalid length.
[   90.916802][ T7382] netlink: 'syz.0.425': attribute type 1 has an invalid length.
[   91.021980][ T7390] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[   91.043534][ T7390] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.048861][ T7389] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   91.058065][ T7389] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   91.160642][ T7399] tipc: MTU too low for tipc bearer
[   91.430613][ T7416] netlink: 'syz.2.436': attribute type 10 has an invalid length.
[   91.440741][ T7416] veth0_vlan: left promiscuous mode
[   91.443689][ T7416] veth0_vlan: entered promiscuous mode
[   91.448250][ T7416] team0: Device veth0_vlan failed to register rx_handler
[   91.945886][ T7447] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[   91.971085][ T7447] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.986126][ T7447] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.989092][ T7447] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.994798][ T7447] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   92.029141][ T7449] erspan0: entered allmulticast mode
[   92.035231][ T7449] bond3: (slave erspan0): making interface the new active one
[   92.039007][ T7449] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   92.688342][ T5844] IPVS: starting estimator thread 0...
[   92.793024][ T7475] IPVS: using max 61 ests per chain, 146400 per kthread
[   92.849303][ T7484] netlink: 'syz.1.459': attribute type 2 has an invalid length.
[   92.853966][ T7484] netlink: 'syz.1.459': attribute type 1 has an invalid length.
[   92.889307][ T7487] lo: left promiscuous mode
[   92.890897][ T7487] lo: left allmulticast mode
[   92.898412][ T7487] tunl0: left promiscuous mode
[   92.900048][ T7487] tunl0: left allmulticast mode
[   92.908598][ T7487] gre0: left promiscuous mode
[   92.910430][ T7487] gre0: left allmulticast mode
[   92.916190][ T7487] gretap0: left promiscuous mode
[   92.917806][ T7487] gretap0: left allmulticast mode
[   92.921477][ T7487] erspan0: left promiscuous mode
[   92.924075][ T7487] erspan0: left allmulticast mode
[   92.927898][ T7487] ip_vti0: left promiscuous mode
[   92.929689][ T7487] ip_vti0: left allmulticast mode
[   92.932698][ T7487] ip6_vti0: left promiscuous mode
[   92.934511][ T7487] ip6_vti0: left allmulticast mode
[   92.938287][ T7487] sit0: left promiscuous mode
[   92.939976][ T7487] sit0: left allmulticast mode
[   92.945477][ T7487] ip6tnl0: left promiscuous mode
[   92.947437][ T7487] ip6tnl0: left allmulticast mode
[   92.954082][ T7487] ip6gre0: left promiscuous mode
[   92.955980][ T7487] ip6gre0: left allmulticast mode
[   92.967767][ T7487] vcan0: left promiscuous mode
[   92.970330][ T7487] vcan0: left allmulticast mode
[   92.975498][ T7487] bond0: left promiscuous mode
[   92.977706][ T7487] bond0: left allmulticast mode
[   92.983439][ T7487] team0: left promiscuous mode
[   92.985639][ T7487] team0: left allmulticast mode
[   92.988041][ T7487] dummy0: left promiscuous mode
[   92.990285][ T7487] dummy0: left allmulticast mode
[   92.996896][ T7487] nlmon0: left promiscuous mode
[   92.999107][ T7487] nlmon0: left allmulticast mode
[   93.003172][ T7487] caif0: left promiscuous mode
[   93.004953][ T7487] caif0: left allmulticast mode
[   93.130437][ T7487] ip6gretap0: left allmulticast mode
[   93.133361][ T7487] macsec1: left promiscuous mode
[   93.135277][ T7487] macsec1: left allmulticast mode
[   93.138513][   T10] lo speed is unknown, defaulting to 1000
[   93.143568][   T10] syz0: Port: 1 Link DOWN
[   93.147748][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.150396][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.155195][   T10] lo speed is unknown, defaulting to 1000
[   93.155963][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.160817][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.019906][ T7550] __nla_validate_parse: 14 callbacks suppressed
[   94.019917][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.469'.
[   94.929223][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'.
[   94.933492][ T7580] IPVS: Error joining to the multicast group
[   95.186232][ T7607] netlink: 277 bytes leftover after parsing attributes in process `syz.2.481'.
[   95.222378][ T7609] netlink: 277 bytes leftover after parsing attributes in process `syz.2.481'.
[   95.343914][ T7621] netlink: 'syz.0.482': attribute type 13 has an invalid length.
[   95.346978][ T7621] netlink: 368 bytes leftover after parsing attributes in process `syz.0.482'.
[   95.369083][ T7621] lo speed is unknown, defaulting to 1000
[   95.410783][ T7624] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20002
[   95.462559][ T7624] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[   95.465654][ T7624] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   95.516313][ T7635] netlink: 88 bytes leftover after parsing attributes in process `syz.2.486'.
[   95.697410][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'.
[   96.226851][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'.
[   96.232851][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.501'.
[   96.336628][ T7695] IPv6: NLM_F_REPLACE set, but no existing node found!
[   96.667650][ T7714] dvmrp8: entered allmulticast mode
[   96.670023][ T7713] dvmrp8: left allmulticast mode
[   96.764735][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'.
[   96.768388][ T7724] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   96.816707][ T7734] netlink: 'syz.2.513': attribute type 1 has an invalid length.
[   96.906318][ T7746] Bluetooth: hci1: Opcode 0x080f failed: -4
[   96.986556][ T7752] dvmrp8: entered allmulticast mode
[   97.017075][ T7753] net_ratelimit: 31 callbacks suppressed
[   97.017107][ T7753] sock: sock_set_timeout: `syz.1.518' (pid 7753) tries to set negative timeout
[   97.319056][ T7764] lo speed is unknown, defaulting to 1000
[   97.393957][ T7747] dvmrp8: left allmulticast mode
[   97.763155][ T7772] syzkaller0: entered promiscuous mode
[   97.765724][ T7772] syzkaller0: entered allmulticast mode
[   98.828957][ T7800] batadv_slave_1: entered promiscuous mode
[   98.841007][ T7800] batadv_slave_1: left promiscuous mode
[   98.944370][ T5846] Bluetooth: hci1: command 0x080f tx timeout
[   99.089184][ T7826] __nla_validate_parse: 6 callbacks suppressed
[   99.089199][ T7826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'.
[   99.108215][ T7826] netlink: 32 bytes leftover after parsing attributes in process `syz.1.540'.
[   99.194356][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[   99.556182][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'.
[   99.654288][ T7867] syzkaller1: entered promiscuous mode
[   99.656663][ T7867] syzkaller1: entered allmulticast mode
[  100.051354][ T7872] netlink: 'syz.0.553': attribute type 3 has an invalid length.
[  100.054324][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'.
[  100.171348][ T7880] vlan2: entered allmulticast mode
[  100.526419][ T7896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.562'.
[  101.100831][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'.
[  101.159272][ T7905] bridge_slave_1: entered allmulticast mode
[  101.187652][ T7909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.193226][ T7909] syzkaller0: entered promiscuous mode
[  101.197255][ T7909] syzkaller0: entered allmulticast mode
[  101.231521][ T7911] tipc: Resetting bearer <eth:syzkaller0>
[  101.245150][ T7911] tipc: Disabling bearer <eth:syzkaller0>
[  101.694391][ T7928] netlink: 'syz.2.572': attribute type 11 has an invalid length.
[  101.720667][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'.
[  101.725591][ T7933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.766377][ T7936] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.775170][ T7936] bond0: (slave rose0): Enslaving as an active interface with an up link
[  101.922028][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'.
[  101.986670][ T7957] lo speed is unknown, defaulting to 1000
[  102.054502][ T7962] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  102.069579][ T7970] netlink: 844 bytes leftover after parsing attributes in process `syz.0.582'.
[  102.104921][ T5897] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  102.115428][ T5897] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  102.133952][ T7962] netlink: 'syz.2.581': attribute type 12 has an invalid length.
[  102.411321][ T7996] Bluetooth: MGMT ver 1.23
[  102.604609][ T8016] batadv_slave_1: entered promiscuous mode
[  102.795006][ T8015] batadv_slave_1: left promiscuous mode
[  102.933093][ T8047] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  102.982228][ T8052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.986527][ T8052] syzkaller0: entered promiscuous mode
[  102.988780][ T8052] syzkaller0: entered allmulticast mode
[  103.009782][ T8052] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  103.018692][ T8052] tipc: Resetting bearer <eth:syzkaller0>
[  103.025386][ T8050] tipc: Resetting bearer <eth:syzkaller0>
[  103.035104][ T8050] tipc: Disabling bearer <eth:syzkaller0>
[  103.341429][ T8075] sctp: [Deprecated]: syz.2.613 (pid 8075) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.341429][ T8075] Use struct sctp_sack_info instead
[  103.773990][ T8098] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  104.302497][ T8113] netlink: 'syz.0.627': attribute type 4 has an invalid length.
[  104.573381][ T8129] nbd1: detected capacity change from 0 to 127
[  104.577069][   T55] block nbd1: Receive control failed (result -104)
[  104.588743][ T8135] netlink: 'syz.1.631': attribute type 1 has an invalid length.
[  104.743367][ T8147] __nla_validate_parse: 8 callbacks suppressed
[  104.743378][ T8147] netlink: 52 bytes leftover after parsing attributes in process `syz.1.631'.
[  104.758374][ T8147] veth3: entered promiscuous mode
[  104.762963][ T8147] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  104.766559][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'.
[  104.770783][ T8147] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.910066][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.635'.
[  104.914140][ T8152] openvswitch: netlink: Flow actions attr not present in new flow.
[  104.958562][ T8155] netlink: 88 bytes leftover after parsing attributes in process `syz.2.636'.
[  104.961766][ T8156] netlink: 88 bytes leftover after parsing attributes in process `syz.2.636'.
[  104.967542][ T8154] netlink: 'syz.2.636': attribute type 1 has an invalid length.
[  104.969982][ T8154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.636'.
[  105.001669][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'.
[  105.061978][ T8160] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  105.114662][ T8161] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  105.197117][ T8166] sctp: [Deprecated]: syz.2.639 (pid 8166) Use of int in max_burst socket option.
[  105.197117][ T8166] Use struct sctp_assoc_value instead
[  105.240937][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'.
[  105.303542][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'.
[  105.435543][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'.
[  105.465558][ T8189] pim6reg1: entered promiscuous mode
[  105.467197][ T8189] pim6reg1: entered allmulticast mode
[  105.596438][ T8199] netlink: 'syz.1.651': attribute type 1 has an invalid length.
[  105.677199][ T8204] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  105.814005][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.088152][ T8230] sctp: [Deprecated]: syz.1.661 (pid 8230) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.088152][ T8230] Use struct sctp_sack_info instead
[  106.339844][ T8239] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[  106.409344][ T8241] dvmrp8: entered allmulticast mode
[  106.416375][ T8241] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20004
[  106.422850][ T8240] dvmrp8: left allmulticast mode
[  106.586497][ T8256] sctp: [Deprecated]: syz.1.670 (pid 8256) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.586497][ T8256] Use struct sctp_sack_info instead
[  106.615553][ T8256] netlink: 'syz.1.670': attribute type 7 has an invalid length.
[  106.618700][ T8256] netlink: 'syz.1.670': attribute type 8 has an invalid length.
[  106.921195][ T8290] Bluetooth: hci1: Opcode 0x080f failed: -4
[  106.979621][ T8295] netlink: 'syz.2.682': attribute type 1 has an invalid length.
[  107.214552][ T8314] syzkaller1: entered allmulticast mode
[  107.217643][ T8314] syzkaller1: left allmulticast mode
[  107.225284][ T8314] batadv_slave_1: entered promiscuous mode
[  107.339698][ T8316] bond0: (slave bond_slave_1): Releasing backup interface
[  107.678426][ T8343] syzkaller1: entered promiscuous mode
[  107.680166][ T8343] syzkaller1: entered allmulticast mode
[  107.723422][ T8339] block nbd2: server does not support multiple connections per device.
[  107.727891][ T8339] block nbd2: shutting down sockets
[  107.907971][   T97] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.910611][   T97] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.913440][   T97] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.915646][   T97] block nbd1: Connection timed out, retrying (0/1 alive)
[  107.917829][   T97] block nbd1: Dead connection, failed to find a fallback
[  107.920427][   T97] block nbd1: shutting down sockets
[  107.922246][   T97] blk_print_req_error: 138 callbacks suppressed
[  107.922253][   T97] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.927377][   T97] buffer_io_error: 138 callbacks suppressed
[  107.927384][   T97] Buffer I/O error on dev nbd1, logical block 3, async page read
[  107.931679][   T97] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.934868][   T97] Buffer I/O error on dev nbd1, logical block 2, async page read
[  107.937256][   T97] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.940214][   T97] Buffer I/O error on dev nbd1, logical block 1, async page read
[  107.943661][   T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.947893][   T97] Buffer I/O error on dev nbd1, logical block 0, async page read
[  107.951884][ T5847] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.954992][ T5847] Buffer I/O error on dev nbd1, logical block 0, async page read
[  107.957488][ T5847] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.960674][ T5847] Buffer I/O error on dev nbd1, logical block 1, async page read
[  107.963904][ T5847] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.966868][ T5847] Buffer I/O error on dev nbd1, logical block 2, async page read
[  107.969551][ T5847] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.972612][ T5847] Buffer I/O error on dev nbd1, logical block 3, async page read
[  107.975111][ T5847] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.978125][ T5847] Buffer I/O error on dev nbd1, logical block 0, async page read
[  107.980855][ T5847] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  107.984208][ T5847] Buffer I/O error on dev nbd1, logical block 1, async page read
[  107.993939][ T5847] ldm_validate_partition_table(): Disk read failed.
[  107.997093][ T5847] Dev nbd1: unable to read RDB block 0
[  108.000132][ T5847]  nbd1: unable to read partition table
[  108.011562][ T5847] ldm_validate_partition_table(): Disk read failed.
[  108.013334][ T8373] dvmrp8: entered allmulticast mode
[  108.014851][ T5847] Dev nbd1: unable to read RDB block 0
[  108.024225][ T5847]  nbd1: unable to read partition table
[  108.032737][  T792] IPVS: starting estimator thread 0...
[  108.035748][ T8372] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  108.067486][ T8360] dvmrp8: left allmulticast mode
[  108.108521][ T8385] netlink: 'syz.0.703': attribute type 11 has an invalid length.
[  108.117068][ T8385] netlink: 'syz.0.703': attribute type 4 has an invalid length.
[  108.120604][ T8385] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  108.124472][ T8381] IPVS: using max 61 ests per chain, 146400 per kthread
[  108.128708][ T8385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.450820][ T8421] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  108.590642][ T8439] netlink: 'syz.2.718': attribute type 13 has an invalid length.
[  108.597859][ T8439] netlink: 'syz.2.718': attribute type 17 has an invalid length.
[  108.631795][ T8439] lo speed is unknown, defaulting to 1000
[  108.669107][ T8448] syzkaller1: entered promiscuous mode
[  108.670886][ T8448] syzkaller1: entered allmulticast mode
[  108.942500][ T5846] Bluetooth: hci1: command 0x080f tx timeout
[  109.420758][ T8487] vlan2: entered allmulticast mode
[  109.423075][ T8487] macvtap0: entered allmulticast mode
[  109.567555][ T8496] vlan0: entered promiscuous mode
[  109.569515][ T8496] geneve1: entered promiscuous mode
[  109.732964][ T8500] lo speed is unknown, defaulting to 1000
[  109.865184][ T8515] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  109.948087][ T8521] netlink: 'syz.0.744': attribute type 1 has an invalid length.
[  110.002084][ T8528] __nla_validate_parse: 35 callbacks suppressed
[  110.002098][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'.
[  110.007991][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.745'.
[  110.011396][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'.
[  110.011444][ T8531] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  110.016111][ T8528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'.
[  110.105348][ T8531] bond2: (slave macvlan2): Releasing backup interface
[  110.109980][ T8531] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  110.124143][ T8531] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  110.137224][ T8531] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  110.141126][ T8531] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.445315][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'.
[  110.680448][ T8568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.758'.
[  110.926836][ T8574] macsec0: entered allmulticast mode
[  110.929385][ T8574] veth1_macvtap: entered allmulticast mode
[  110.931269][ T8574] macsec0: left allmulticast mode
[  110.932993][ T8574] veth1_macvtap: left allmulticast mode
[  110.936341][ T8574] validate_nla: 3 callbacks suppressed
[  110.936349][ T8574] netlink: 'syz.2.760': attribute type 8 has an invalid length.
[  110.948747][ T8574] netlink: 'syz.2.760': attribute type 2 has an invalid length.
[  111.272475][ T8592] netlink: 'syz.2.765': attribute type 1 has an invalid length.
[  111.291081][ T8592] 8021q: adding VLAN 0 to HW filter on device bond3
[  111.299883][ T8592] vlan2: entered promiscuous mode
[  111.301474][ T8592] bond3: entered promiscuous mode
[  111.303256][ T8592] vlan2: entered allmulticast mode
[  111.305060][ T8592] bond3: entered allmulticast mode
[  111.314053][ T8592] bond3: (slave gretap1): making interface the new active one
[  111.316382][ T8592] gretap1: entered promiscuous mode
[  111.318219][ T8592] gretap1: entered allmulticast mode
[  111.321783][ T8592] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  111.430219][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'.
[  111.460346][ T8603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.768'.
[  111.525843][ T8609] netlink: 264 bytes leftover after parsing attributes in process `syz.2.771'.
[  111.528822][ T8609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.771'.
[  111.575595][ T8609] netlink: 'syz.2.771': attribute type 4 has an invalid length.
[  111.607928][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.612568][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.709337][ T8624] lo speed is unknown, defaulting to 1000
[  111.782983][ T8610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.171498][ T8633] netlink: 'syz.2.775': attribute type 3 has an invalid length.
[  112.178620][ T8633] netlink: 'syz.2.775': attribute type 1 has an invalid length.
[  113.097181][ T8685] netlink: 'syz.2.789': attribute type 29 has an invalid length.
[  113.120432][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.449962][ T8709] macvlan3: entered promiscuous mode
[  113.462670][ T8709] macvlan3: entered allmulticast mode
[  113.465679][ T8709] bond5: (slave macvlan3): Opening slave failed
[  113.502014][ T8719] only policy match revision 0 supported
[  113.502026][ T8719] unable to load match
[  113.599455][ T8727] netlink: 'syz.2.797': attribute type 1 has an invalid length.
[  113.606695][ T8727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.610832][ T8727] netlink: 'syz.2.797': attribute type 1 has an invalid length.
[  113.643871][ T8727] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.756179][ T8741] netlink: 'syz.0.800': attribute type 4 has an invalid length.
[  113.870721][ T8749] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  114.130983][ T8780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.136901][ T8781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.538680][ T8810] syzkaller1: entered promiscuous mode
[  114.540629][ T8810] syzkaller1: entered allmulticast mode
[  114.711231][ T8816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.716261][ T8816] syzkaller0: entered promiscuous mode
[  114.718262][ T8816] syzkaller0: entered allmulticast mode
[  114.725875][ T8816] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  114.738848][ T8816] tipc: Resetting bearer <eth:syzkaller0>
[  114.742130][ T8815] tipc: Resetting bearer <eth:syzkaller0>
[  114.753469][ T8815] tipc: Disabling bearer <eth:syzkaller0>
[  115.044376][ T8836] __nla_validate_parse: 49 callbacks suppressed
[  115.044391][ T8836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.828'.
[  115.084762][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.291067][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'.
[  115.674793][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'.
[  115.766026][ T8893] gtp1: entered promiscuous mode
[  115.773659][ T8892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.776101][ T8892] syzkaller0: entered promiscuous mode
[  115.777745][ T8892] syzkaller0: entered allmulticast mode
[  115.789368][ T8892] tipc: Resetting bearer <eth:syzkaller0>
[  115.796628][ T8891] tipc: Resetting bearer <eth:syzkaller0>
[  115.807642][ T8891] tipc: Disabling bearer <eth:syzkaller0>
[  116.175182][ T8926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'.
[  116.380552][ T8947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.855'.
[  116.395803][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.
[  116.473229][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.854'.
[  116.478747][ T8946] openvswitch: netlink: Flow actions attr not present in new flow.
[  116.497158][ T8955] netlink: 52 bytes leftover after parsing attributes in process `syz.2.856'.
[  116.520945][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.857'.
[  116.546776][ T8957] bond6: entered promiscuous mode
[  116.548822][ T8957] bond6: entered allmulticast mode
[  116.550725][ T8957] 8021q: adding VLAN 0 to HW filter on device bond6
[  116.599883][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'.
[  116.679337][ T8969] veth9: entered promiscuous mode
[  116.714659][ T8970] bond3: (slave erspan0): Releasing active interface
[  116.721281][ T8970] bridge_slave_0: left promiscuous mode
[  116.725948][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.730705][ T8970] bridge_slave_1: left allmulticast mode
[  116.741190][ T8970] bridge_slave_1: left promiscuous mode
[  116.743285][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.750452][ T8970] bond0: (slave bond_slave_0): Releasing backup interface
[  116.756315][ T8970] team0: Port device team_slave_0 removed
[  116.759895][ T8970] team0: Port device team_slave_1 removed
[  116.762409][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.767478][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.101241][ T9003] syzkaller1: entered promiscuous mode
[  117.103213][ T9003] syzkaller1: entered allmulticast mode
[  117.492365][ T9023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.529785][ T9025] tipc: Resetting bearer <eth:syzkaller0>
[  117.589853][ T9023] tipc: Resetting bearer <eth:syzkaller0>
[  117.603075][ T9041] validate_nla: 38 callbacks suppressed
[  117.603085][ T9041] netlink: 'syz.2.877': attribute type 30 has an invalid length.
[  117.609398][ T9023] tipc: Disabling bearer <eth:syzkaller0>
[  117.619440][ T9041] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  117.624920][ T9041] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  117.864917][ T9071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.872800][ T9071] syzkaller0: entered promiscuous mode
[  117.882392][ T9071] syzkaller0: entered allmulticast mode
[  117.910879][ T9072] tipc: Resetting bearer <eth:syzkaller0>
[  117.918694][ T9068] tipc: Resetting bearer <eth:syzkaller0>
[  117.935770][ T9068] tipc: Disabling bearer <eth:syzkaller0>
[  118.119772][ T9088] can: request_module (can-proto-0) failed.
[  118.889319][ T9110] lo speed is unknown, defaulting to 1000
[  119.909402][ T9084] Set syz1 is full, maxelem 65536 reached
[  120.130884][ T9128] veth0_to_bridge: entered promiscuous mode
[  120.137253][ T9128] __nla_validate_parse: 8 callbacks suppressed
[  120.137268][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'.
[  120.168556][ T9132] lo speed is unknown, defaulting to 1000
[  120.488021][ T9126] veth0_to_bridge: left promiscuous mode
[  120.774642][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.909'.
[  120.864186][ T9145] Illegal XDP return value 4294967289 on prog  (id 338) dev N/A, expect packet loss!
[  120.887244][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'.
[  120.891222][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'.
[  120.898378][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[  120.932875][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'.
[  120.985777][ T9145] lo speed is unknown, defaulting to 1000
[  121.070723][ T9157] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  121.076185][ T9157] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  121.191696][ T9159] lo speed is unknown, defaulting to 1000
[  121.826902][ T9168] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  121.869568][ T9171] netlink: 'syz.2.918': attribute type 1 has an invalid length.
[  121.928700][ T9173] netlink: 3 bytes leftover after parsing attributes in process `syz.2.918'.
[  121.948730][ T9171] bond5: entered promiscuous mode
[  121.951127][ T9171] 8021q: adding VLAN 0 to HW filter on device bond5
[  121.961575][ T9173] batadv1: entered promiscuous mode
[  121.964604][ T9173] batadv1: entered allmulticast mode
[  122.160609][ T9171] netlink: 48 bytes leftover after parsing attributes in process `syz.2.918'.
[  122.385668][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.424786][ T9185] lo speed is unknown, defaulting to 1000
[  122.927181][ T9205] macvlan3: entered allmulticast mode
[  122.929418][ T9205] veth1_vlan: entered allmulticast mode
[  122.937665][ T9205] veth1_vlan: left allmulticast mode
[  122.970611][ T9207] netlink: 260 bytes leftover after parsing attributes in process `syz.1.928'.
[  123.103201][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'.
[  123.533639][ T9230] syzkaller1: entered promiscuous mode
[  123.535849][ T9230] syzkaller1: entered allmulticast mode
[  123.695094][ T9234] macvlan0: entered promiscuous mode
[  123.697373][ T9234] macvlan0: entered allmulticast mode
[  123.699444][ T9234] veth1_vlan: entered allmulticast mode
[  123.929443][ T9248] nbd: couldn't find device at index 536870912
[  124.096393][ T9268] netlink: 'syz.2.946': attribute type 3 has an invalid length.
[  124.104980][ T9269] netlink: 'syz.2.946': attribute type 3 has an invalid length.
[  124.129531][ T9268] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  124.340783][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.344317][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.420008][ T9290] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  124.469999][ T9292] netlink: 'syz.2.954': attribute type 1 has an invalid length.
[  124.524750][ T9300] "syz.0.957" (9300) uses obsolete ecb(arc4) skcipher
[  124.535099][ T9300] erspan0: left allmulticast mode
[  124.546395][ T9300] veth1_vlan: left allmulticast mode
[  124.548356][ T9300] macvlan0: left promiscuous mode
[  124.550057][ T9300] macvlan0: left allmulticast mode
[  124.561223][ T9300] bond6: left promiscuous mode
[  124.564491][ T9300] bond6: left allmulticast mode
[  125.128496][ T9328] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.132609][ T9328] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.342175][ T9336] netlink: 'syz.1.971': attribute type 2 has an invalid length.
[  125.356478][ T9336] k*]: entered promiscuous mode
[  125.363222][ T9336] __nla_validate_parse: 17 callbacks suppressed
[  125.363238][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  125.371776][ T9336] veth0_to_team: entered promiscuous mode
[  125.374173][ T9336] veth0_to_team: entered allmulticast mode
[  125.561324][ T9345] netlink: 'syz.1.975': attribute type 1 has an invalid length.
[  125.677419][ T9350] tap0: tun_chr_ioctl cmd 1074025678
[  125.679201][ T9350] tap0: group set to 0
[  125.714468][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.977'.
[  125.833566][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'.
[  125.837185][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'.
[  125.943540][ T9370] lo speed is unknown, defaulting to 1000
[  125.962651][ T9376] syzkaller1: entered promiscuous mode
[  125.964791][ T9376] syzkaller1: entered allmulticast mode
[  126.075750][ T9366] lo speed is unknown, defaulting to 1000
[  126.178832][ T9391] netlink: 'syz.1.989': attribute type 9 has an invalid length.
[  126.237142][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'.
[  126.256584][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'.
[  126.368492][ T9402] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  126.666116][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'.
[  126.798392][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'.
[  126.801196][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'.
[  127.424889][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  128.006083][ T9479] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  128.030318][ T9481] bridge6: port 1(veth0_to_bond) entered blocking state
[  128.036376][ T9481] bridge6: port 1(veth0_to_bond) entered disabled state
[  128.040823][ T9481] veth0_to_bond: entered allmulticast mode
[  128.047592][ T9481] veth0_to_bond: entered promiscuous mode
[  128.439523][ T9507] vlan2: entered promiscuous mode
[  128.441620][ T9507] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  128.489126][ T9514] nft_compat: unsupported protocol 6
[  128.826774][ T9524] netlink: 'syz.0.1033': attribute type 1 has an invalid length.
[  128.870873][ T9524] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.894934][ T9524] bond7: (slave gretap2): making interface the new active one
[  128.898839][ T9524] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  129.038128][ T9537] lo speed is unknown, defaulting to 1000
[  129.079509][ T9542] netlink: 'syz.2.1038': attribute type 21 has an invalid length.
[  129.120746][ T9542] netlink: 'syz.2.1038': attribute type 6 has an invalid length.
[  129.643237][ T9565] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  129.649908][ T9565] gretap2: entered promiscuous mode
[  129.914313][ T9582] lo speed is unknown, defaulting to 1000
[  129.956461][ T5876] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  129.960012][ T5876] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  129.992851][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  130.042005][ T9590] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4
[  130.122941][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  130.329251][ T9609] netlink: 'syz.1.1060': attribute type 1 has an invalid length.
[  130.472557][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  130.891282][ T9619] netlink: 'syz.2.1063': attribute type 1 has an invalid length.
[  130.896693][ T9619] netlink: 'syz.2.1063': attribute type 10 has an invalid length.
[  130.899758][ T9619] __nla_validate_parse: 23 callbacks suppressed
[  130.899767][ T9619] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1063'.
[  130.905927][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'.
[  130.968413][ T9620] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1063'.
[  130.972087][ T9619] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1063'.
[  131.630303][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'.
[  131.634222][ T9626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.644484][ T9627] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  131.696060][ T9630] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1067'.
[  131.747785][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'.
[  131.763863][ T9632] batman_adv: batadv0: Adding interface: ipvlan2
[  131.766939][ T9632] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.777655][ T9632] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  131.783258][ T9633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.848759][ T9632] tipc: Disabling bearer <eth:syzkaller0>
[  131.887388][ T9639] veth0_to_bond: left allmulticast mode
[  131.889196][ T9639] veth0_to_bond: left promiscuous mode
[  131.891518][ T9639] bridge6: port 1(veth0_to_bond) entered disabled state
[  131.898564][ T9639] bond1: (slave wlan0): Releasing active interface
[  131.916830][ T9639] bond0: (slave geneve2): Releasing active interface
[  131.927450][ T9639] bond2: (slave veth3): Releasing backup interface
[  131.962118][ T9639] netlink: 'syz.1.1070': attribute type 10 has an invalid length.
[  131.965394][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  131.975920][ T9639] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.979700][ T9639] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.032801][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  132.219177][ T9649] syzkaller1: entered promiscuous mode
[  132.221295][ T9649] syzkaller1: entered allmulticast mode
[  132.230714][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1074'.
[  132.340391][ T9651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1075'.
[  132.384934][ T1365] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.611582][ T9663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'.
[  132.622821][ T9663] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  132.627086][ T9663] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  132.997028][ T9677] netlink: 'syz.1.1086': attribute type 2 has an invalid length.
[  133.029878][ T9677] 8021q: adding VLAN 0 to HW filter on device team0
[  133.039517][ T9677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.051066][ T9679] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  133.094952][ T9681] netlink: 'syz.1.1088': attribute type 11 has an invalid length.
[  133.097988][ T9681] netlink: 'syz.1.1088': attribute type 11 has an invalid length.
[  133.577657][ T9716] trusted_key: syz.0.1099 sent an empty control message without MSG_MORE.
[  133.716300][ T9728] netlink: 'syz.0.1102': attribute type 5 has an invalid length.
[  133.733193][ T9728] geneve2: entered promiscuous mode
[  133.735252][ T9728] geneve2: entered allmulticast mode
[  133.740797][ T5866] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  133.745433][ T5866] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  133.748233][ T5866] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  133.760253][ T9725] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  133.818004][ T9725] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  133.869141][ T9725] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  133.950123][ T9734] bridge8: entered promiscuous mode
[  133.961689][ T5866] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  133.979595][ T5866] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  133.992529][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  134.005445][ T5866] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  134.019158][ T5866] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  134.080533][ T9739] syzkaller1: entered promiscuous mode
[  134.083020][ T9739] syzkaller1: entered allmulticast mode
[  135.102497][ T5846] Bluetooth: hci0: command tx timeout
[  135.114832][ T9778] openvswitch: netlink: IP tunnel dst address not specified
[  135.229698][ T9789] netlink: 'syz.0.1124': attribute type 11 has an invalid length.
[  135.270307][ T9793] openvswitch: netlink: IP tunnel dst address not specified
[  135.304199][ T9791] ipvlan0: entered promiscuous mode
[  135.520174][ T9818] netlink: 'syz.2.1133': attribute type 1 has an invalid length.
[  135.561033][ T9818] 8021q: adding VLAN 0 to HW filter on device bond6
[  135.581640][ T9828] 8021q: adding VLAN 0 to HW filter on device bond6
[  135.585445][ T9828] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  135.590057][ T9828] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  135.651015][ T9818] veth1: entered promiscuous mode
[  135.656971][ T9818] bond6: (slave veth1): Enslaving as an active interface with a down link
[  135.663481][ T9818] erspan0: entered allmulticast mode
[  135.668557][ T9818] bond6: (slave erspan0): making interface the new active one
[  135.671990][ T9818] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  135.790355][ T9845] pim6reg: entered allmulticast mode
[  135.794631][ T9845] pim6reg: left allmulticast mode
[  136.100066][ T9864] netlink: 'syz.1.1145': attribute type 5 has an invalid length.
[  136.151493][ T9862] __nla_validate_parse: 17 callbacks suppressed
[  136.151509][ T9862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1146'.
[  137.109912][ T9884] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1152'.
[  137.196976][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1153'.
[  137.240584][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'.
[  137.255736][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'.
[  137.359575][ T9896] netlink: 'syz.0.1156': attribute type 4 has an invalid length.
[  137.399700][ T9898] netlink: 'syz.0.1157': attribute type 11 has an invalid length.
[  137.410261][ T9898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1157'.
[  137.653156][ T9911] bond6: (slave erspan0): Releasing active interface
[  137.659139][ T9911] bond0: (slave wlan1): Releasing backup interface
[  137.666866][ T9911] bond3: (slave gretap1): Releasing active interface
[  137.669305][ T9911] gretap1: left promiscuous mode
[  137.671002][ T9911] gretap1: left allmulticast mode
[  137.679191][ T9911] batman_adv: batadv0: Removing interface: ipvlan2
[  137.684148][ T9911] bond6: (slave veth1): Releasing active interface
[  137.831131][ T9926] IPVS: Error connecting to the multicast addr
[  138.055149][ T9935] netlink: 'syz.0.1171': attribute type 10 has an invalid length.
[  138.161507][ T9940] 8021q: adding VLAN 0 to HW filter on device bond7
[  138.191283][ T9946] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  138.200059][ T9946] bond7: (slave macvlan3): Enslaving as a backup interface with a down link
[  138.221236][ T9948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1174'.
[  138.228007][ T9948] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1174'.
[  138.231700][ T9948] 0: renamed from hsr0
[  138.238815][ T9948] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  138.243568][ T9948] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  138.248153][ T9948] 0: entered allmulticast mode
[  138.250104][ T9948] hsr_slave_0: entered allmulticast mode
[  138.252495][ T9948] hsr_slave_1: entered allmulticast mode
[  138.256031][ T9948] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  138.387772][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'.
[  138.438053][ T9960] lo speed is unknown, defaulting to 1000
[  138.744500][ T9977] tipc: New replicast peer: 255.255.255.255
[  138.747429][ T9977] tipc: Enabled bearer <udp:syz2>, priority 10
[  138.749988][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'.
[  138.755815][ T9978] tipc: Disabling bearer <udp:syz2>
[  139.342079][ T9992] Bluetooth: MGMT ver 1.23
[  139.800488][T10017] lo speed is unknown, defaulting to 1000
[  140.346817][T10058] netlink: 'syz.1.1205': attribute type 21 has an invalid length.
[  140.351819][T10058] tipc: Enabled bearer <eth:team0>, priority 0
[  140.419345][T10060] netlink: 'syz.0.1206': attribute type 3 has an invalid length.
[  140.419469][T10063] netlink: 'syz.1.1207': attribute type 1 has an invalid length.
[  140.427367][T10063] netlink: 'syz.1.1207': attribute type 11 has an invalid length.
[  140.478875][T10067] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  140.733704][T10074] pim6reg: entered allmulticast mode
[  141.030959][T10097] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  141.139878][T10106] netlink: 'syz.0.1219': attribute type 10 has an invalid length.
[  141.150410][T10106] team0: Port device dummy0 added
[  141.153365][T10106] netlink: 'syz.0.1219': attribute type 10 has an invalid length.
[  141.159734][T10106] team0: Port device dummy0 removed
[  141.170304][T10106] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  141.462481][ T5844] tipc: Node number set to 1468586684
[  141.636490][T10124] __nla_validate_parse: 5 callbacks suppressed
[  141.636501][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'.
[  141.644753][   T55] block nbd2: Receive control failed (result -107)
[  141.692411][T10124] nbd2: detected capacity change from 0 to 32
[  141.695365][ T9963] block nbd2: Dead connection, failed to find a fallback
[  141.712593][ T9963] block nbd2: shutting down sockets
[  141.714371][ T9963] blk_print_req_error: 138 callbacks suppressed
[  141.714380][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.719169][ T9963] buffer_io_error: 138 callbacks suppressed
[  141.719177][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.738411][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.748326][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.756534][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.762451][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.767275][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.771257][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.774904][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.778522][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.789373][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.795043][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.797960][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.801081][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.804149][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.807145][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.810032][ T9963] ldm_validate_partition_table(): Disk read failed.
[  141.813835][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.817502][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.820335][ T9963] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  141.823876][ T9963] Buffer I/O error on dev nbd2, logical block 0, async page read
[  141.827941][ T9963] Dev nbd2: unable to read RDB block 0
[  141.833093][ T9963]  nbd2: unable to read partition table
[  141.851867][ T9963] ldm_validate_partition_table(): Disk read failed.
[  141.856295][ T9963] Dev nbd2: unable to read RDB block 0
[  141.863072][ T9963]  nbd2: unable to read partition table
[  141.946982][T10136] netlink: 'syz.0.1233': attribute type 1 has an invalid length.
[  141.982714][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  142.110694][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'.
[  142.116241][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'.
[  142.300334][T10173] lo speed is unknown, defaulting to 1000
[  142.339553][T10181] IPv6: Can't replace route, no match found
[  142.370473][T10180] netlink: 'syz.2.1245': attribute type 1 has an invalid length.
[  142.373350][T10180] netlink: 'syz.2.1245': attribute type 1 has an invalid length.
[  142.376750][T10180] netlink: 'syz.2.1245': attribute type 21 has an invalid length.
[  142.379583][T10180] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1245'.
[  142.383476][T10180] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1245'.
[  142.461893][T10171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.599582][T10191] smc: ib device syz0 ibport 2 erased user defined pnetid SYZ2
[  142.717285][T10195] openvswitch: netlink: Key type 251 is out of range max 32
[  142.774050][T10196] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1251'.
[  143.003759][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'.
[  143.261965][T10217] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1259'.
[  143.352780][T10222] tipc: Resetting bearer <eth:team0>
[  143.367805][T10222] team0: Mode changed to "loadbalance"
[  143.394143][ T5844] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  143.586739][T10227] vxcan2: entered promiscuous mode
[  143.717704][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'.
[  143.891602][T10231] lo speed is unknown, defaulting to 1000
[  144.058129][T10240] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1266'.
[  144.076560][T10240] veth2: entered promiscuous mode
[  144.145421][ T5844] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  144.530749][T10273] syz_tun: entered allmulticast mode
[  144.537110][T10272] syz_tun: left allmulticast mode
[  145.536776][T10306] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  145.639970][T10316] syzkaller1: entered promiscuous mode
[  145.641798][T10316] syzkaller1: entered allmulticast mode
[  145.646710][T10316] validate_nla: 1 callbacks suppressed
[  145.646723][T10316] netlink: 'syz.1.1291': attribute type 15 has an invalid length.
[  145.833625][T10335] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  145.954531][T10347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.957817][T10348] syzkaller0: entered promiscuous mode
[  145.959568][T10348] syzkaller0: entered allmulticast mode
[  145.965721][T10348] tipc: Resetting bearer <eth:syzkaller0>
[  145.969355][T10346] tipc: Resetting bearer <eth:syzkaller0>
[  145.978929][T10346] tipc: Disabling bearer <eth:syzkaller0>
[  146.466617][T10393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.692981][T10408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.695381][T10409] syzkaller0: entered promiscuous mode
[  146.704141][T10409] syzkaller0: entered allmulticast mode
[  146.752739][T10408] __nla_validate_parse: 13 callbacks suppressed
[  146.752750][T10408] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1323'.
[  146.753477][T10415] netlink: 'syz.2.1326': attribute type 22 has an invalid length.
[  146.757672][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'.
[  146.779883][ T5876] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.779936][T10415] netlink: 'syz.2.1326': attribute type 22 has an invalid length.
[  146.783157][ T5876] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.786480][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'.
[  146.787168][ T5876] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.810372][ T5876] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.820718][T10421] netlink: 'syz.1.1327': attribute type 10 has an invalid length.
[  146.832612][    C0] syzkaller0: tun_net_xmit 90
[  146.857291][T10425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.859942][T10425] syzkaller0: entered promiscuous mode
[  146.861713][T10425] syzkaller0: entered allmulticast mode
[  146.866816][T10408] tipc: Resetting bearer <eth:syzkaller0>
[  146.877699][T10408] tipc: Disabling bearer <eth:syzkaller0>
[  146.892607][T10425] tipc: Resetting bearer <eth:syzkaller0>
[  146.901944][T10424] tipc: Resetting bearer <eth:syzkaller0>
[  146.911761][T10424] tipc: Disabling bearer <eth:syzkaller0>
[  147.000537][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1330'.
[  147.030225][T10431] 8021q: adding VLAN 0 to HW filter on device bond8
[  147.033258][T10431] team0: Port device bond8 added
[  147.217088][T10451] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1335'.
[  147.219880][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'.
[  147.265584][T10453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.305391][T10462] tipc: Resetting bearer <eth:team0>
[  147.317722][T10453] netlink: 'syz.0.1337': attribute type 1 has an invalid length.
[  147.335364][  T792] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  147.350357][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'.
[  147.353430][T10467] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1340'.
[  147.512761][  T792] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  147.968564][T10500] netlink: 'syz.2.1346': attribute type 3 has an invalid length.
[  148.069410][T10508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.072065][T10508] syzkaller0: entered promiscuous mode
[  148.073930][T10508] syzkaller0: entered allmulticast mode
[  148.085497][T10508] tipc: Resetting bearer <eth:syzkaller0>
[  148.088219][T10507] tipc: Resetting bearer <eth:syzkaller0>
[  148.098300][T10507] tipc: Disabling bearer <eth:syzkaller0>
[  148.181498][T10467] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.186394][T10467] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  148.233855][T10517] netlink: 'syz.2.1352': attribute type 10 has an invalid length.
[  148.237097][T10517] team0: Device veth1_macvtap failed to register rx_handler
[  148.254094][T10522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1354'.
[  148.269283][T10519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.290975][T10519] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  148.294347][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1353'.
[  148.776066][T10556] bridge0: port 1(macsec3) entered blocking state
[  148.778599][T10556] bridge0: port 1(macsec3) entered disabled state
[  148.781143][T10556] macsec3: entered allmulticast mode
[  148.785205][T10556] macsec3: left allmulticast mode
[  151.032412][ T5853] Bluetooth: hci1: command 0x080f tx timeout
[  152.486902][T10612] __nla_validate_parse: 5 callbacks suppressed
[  152.486918][T10612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1382'.
[  152.500028][T10612] vlan3: entered promiscuous mode
[  152.502033][T10612] vlan3: entered allmulticast mode
[  152.509633][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'.
[  153.027504][T10617] netlink: 'syz.1.1383': attribute type 58 has an invalid length.
[  153.030520][T10617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'.
[  153.049429][T10619] netlink: 'syz.2.1384': attribute type 1 has an invalid length.
[  153.052188][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'.
[  153.056871][T10619] netlink: 11382 bytes leftover after parsing attributes in process `syz.2.1384'.
[  153.231678][T10633] tipc: New replicast peer: 255.255.255.255
[  153.234616][T10633] tipc: Enabled bearer <udp:syz2>, priority 10
[  153.715770][T10666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'.
[  153.738072][T10666] bridge9: port 1(veth5) entered blocking state
[  153.740115][T10666] bridge9: port 1(veth5) entered disabled state
[  153.742774][T10666] veth5: entered allmulticast mode
[  153.746526][T10666] veth5: entered promiscuous mode
[  153.751065][T10666] bridge9: port 2(veth0_to_bond) entered blocking state
[  153.754353][T10666] bridge9: port 2(veth0_to_bond) entered disabled state
[  153.756662][T10666] veth0_to_bond: entered allmulticast mode
[  153.759415][T10666] veth0_to_bond: entered promiscuous mode
[  153.766257][T10666] vlan3: entered allmulticast mode
[  153.767991][T10666] veth1: entered allmulticast mode
[  153.769916][T10666] bridge9: port 3(vlan3) entered blocking state
[  153.772142][T10666] bridge9: port 3(vlan3) entered disabled state
[  153.775627][T10666] vlan3: entered promiscuous mode
[  153.777370][T10666] veth1: entered promiscuous mode
[  153.812237][T10670] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1404'.
[  153.888239][T10675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.894448][T10677] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1405'.
[  153.897603][T10677] openvswitch: netlink: Flow key attr not present in new flow.
[  153.921088][T10675] tipc: Disabling bearer <eth:syzkaller0>
[  154.074883][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'.
[  154.170952][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'.
[  154.237825][T10706] dvmrp8: entered allmulticast mode
[  154.240440][T10705] dvmrp8: left allmulticast mode
[  155.087315][T10708] Bluetooth: hci1: Opcode 0x080f failed: -4
[  155.992377][    C1] ==================================================================
[  155.994934][    C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  155.997391][    C1] Read of size 1 at addr ffff8880276dc7b0 by task syz.1.1419/10720
[  156.000346][    C1] 
[  156.001409][    C1] CPU: 1 UID: 0 PID: 10720 Comm: syz.1.1419 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  156.001422][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.001428][    C1] Call Trace:
[  156.001432][    C1]  <IRQ>
[  156.001436][    C1]  dump_stack_lvl+0x189/0x250
[  156.001449][    C1]  ? __kasan_check_byte+0x12/0x40
[  156.001462][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.001472][    C1]  ? lock_release+0x4b/0x3e0
[  156.001485][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  156.001496][    C1]  print_report+0xca/0x240
[  156.001505][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  156.001517][    C1]  kasan_report+0x118/0x150
[  156.001528][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  156.001540][    C1]  xfrm_state_find+0x2cf2/0x5400
[  156.001551][    C1]  ? __lock_acquire+0xab9/0xd20
[  156.001565][    C1]  ? unwind_next_frame+0xa5/0x2390
[  156.001575][    C1]  ? xfrm_state_find+0x1da/0x5400
[  156.001587][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  156.001601][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  156.001615][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  156.001624][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  156.001634][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  156.001644][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  156.001659][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  156.001668][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  156.001679][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  156.001687][    C1]  ? l3mdev_master_ifindex+0x18/0x160
[  156.001699][    C1]  ? l3mdev_master_ifindex+0x18/0x160
[  156.001708][    C1]  ? l3mdev_master_ifindex+0x18/0x160
[  156.001719][    C1]  icmp_route_lookup+0x3ab/0x870
[  156.001731][    C1]  ? __pfx_icmp_route_lookup+0x10/0x10
[  156.001740][    C1]  ? __asan_memset+0x22/0x50
[  156.001751][    C1]  ? __pfx___ip_options_echo+0x10/0x10
[  156.001764][    C1]  ? __icmp_send+0x1b9/0x12d0
[  156.001773][    C1]  __icmp_send+0xd0e/0x12d0
[  156.001784][    C1]  ? __icmp_send+0x1b9/0x12d0
[  156.001794][    C1]  ? __pfx___icmp_send+0x10/0x10
[  156.001802][    C1]  ? netif_receive_skb_list_internal+0xa4f/0xcc0
[  156.001814][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  156.001825][    C1]  ? e1000_clean_rx_irq+0xf7c/0x1170
[  156.001837][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  156.001847][    C1]  ipv4_link_failure+0x64e/0xa30
[  156.001857][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[  156.001867][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[  156.001875][    C1]  arp_error_report+0x118/0x160
[  156.001884][    C1]  neigh_invalidate+0x235/0x460
[  156.001898][    C1]  neigh_timer_handler+0x949/0x1150
[  156.001915][    C1]  call_timer_fn+0x17e/0x5f0
[  156.001928][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[  156.001938][    C1]  ? call_timer_fn+0xbe/0x5f0
[  156.001949][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  156.001961][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  156.001971][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.001980][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[  156.001992][    C1]  __run_timer_base+0x61a/0x860
[  156.002002][    C1]  ? ktime_get+0x3e/0x1f0
[  156.002013][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  156.002023][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  156.002036][    C1]  run_timer_softirq+0xb7/0x180
[  156.002047][    C1]  handle_softirqs+0x286/0x870
[  156.002056][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  156.002065][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  156.002074][    C1]  __irq_exit_rcu+0xca/0x1f0
[  156.002082][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  156.002092][    C1]  irq_exit_rcu+0x9/0x30
[  156.002099][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  156.002109][    C1]  </IRQ>
[  156.002119][    C1]  <TASK>
[  156.002122][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.002133][    C1] RIP: 0010:__rcu_read_unlock+0x71/0xe0
[  156.002145][    C1] Code: e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e <41> 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6c 00 00 00 eb d2 89
[  156.002152][    C1] RSP: 0018:ffffc90004daf208 EFLAGS: 00000287
[  156.002161][    C1] RAX: 0000000000000000 RBX: ffffc90004daf301 RCX: 579931ce2ece2300
[  156.002166][    C1] RDX: 0000000000000001 RSI: ffffffff8dba3956 RDI: ffff8880243a9cc0
[  156.002197][    C1] RBP: dffffc0000000000 R08: ffffc90004daf347 R09: 0000000000000000
[  156.002204][    C1] R10: ffffc90004daf338 R11: fffff520009b5e69 R12: ffffc90004daf9f0
[  156.002214][    C1] R13: ffffc90004da8000 R14: ffffc90004daf2e8 R15: dffffc0000000000
[  156.002229][    C1]  ? unwind_next_frame+0xa5/0x2390
[  156.002240][    C1]  unwind_next_frame+0x19ae/0x2390
[  156.002250][    C1]  ? unwind_next_frame+0xa5/0x2390
[  156.002259][    C1]  ? __alloc_pages_noprof+0xa/0x30
[  156.002268][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  156.002279][    C1]  arch_stack_walk+0x11c/0x150
[  156.002290][    C1]  ? pcpu_populate_chunk+0x182/0xb30
[  156.002303][    C1]  stack_trace_save+0x9c/0xe0
[  156.002313][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  156.002324][    C1]  save_stack+0xf5/0x1f0
[  156.002334][    C1]  ? __pfx_save_stack+0x10/0x10
[  156.002344][    C1]  ? post_alloc_hook+0x240/0x2a0
[  156.002354][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  156.002362][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  156.002370][    C1]  ? __alloc_pages_noprof+0xa/0x30
[  156.002380][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  156.002392][    C1]  __set_page_owner+0x8d/0x4a0
[  156.002402][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  156.002414][    C1]  post_alloc_hook+0x240/0x2a0
[  156.002425][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  156.002434][    C1]  ? finish_task_switch+0x32b/0x950
[  156.002452][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  156.002461][    C1]  ? prepare_alloc_pages+0x213/0x610
[  156.002470][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  156.002479][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  156.002487][    C1]  ? preempt_schedule+0xae/0xc0
[  156.002499][    C1]  __alloc_pages_noprof+0xa/0x30
[  156.002507][    C1]  pcpu_populate_chunk+0x182/0xb30
[  156.002521][    C1]  pcpu_alloc_noprof+0xcbf/0x16b0
[  156.002536][    C1]  bpf_map_alloc_percpu+0xbc/0x1b0
[  156.002549][    C1]  prealloc_init+0x225/0x630
[  156.002563][    C1]  htab_map_alloc+0x6ce/0xc70
[  156.002574][    C1]  map_create+0xaa3/0x14d0
[  156.002585][    C1]  ? security_bpf+0x7e/0x300
[  156.002595][    C1]  __sys_bpf+0x60f/0x870
[  156.002605][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  156.002615][    C1]  ? __sys_bind+0x33b/0x3e0
[  156.002628][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  156.002639][    C1]  ? rcu_is_watching+0x15/0xb0
[  156.002649][    C1]  __x64_sys_bpf+0x7c/0x90
[  156.002658][    C1]  do_syscall_64+0xfa/0x3b0
[  156.002669][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.002678][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.002687][    C1]  ? exc_page_fault+0x9f/0xf0
[  156.002696][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.002704][    C1] RIP: 0033:0x7f704238ebe9
[  156.002713][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.002720][    C1] RSP: 002b:00007f7043146038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  156.002728][    C1] RAX: ffffffffffffffda RBX: 00007f70425b6090 RCX: 00007f704238ebe9
[  156.002734][    C1] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000000
[  156.002739][    C1] RBP: 00007f7042411e19 R08: 0000000000000000 R09: 0000000000000000
[  156.002744][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.002749][    C1] R13: 00007f70425b6128 R14: 00007f70425b6090 R15: 00007ffddecfa238
[  156.002758][    C1]  </TASK>
[  156.002761][    C1] 
[  156.236978][    C1] Allocated by task 8947:
[  156.238328][    C1]  kasan_save_track+0x3e/0x80
[  156.239791][    C1]  __kasan_slab_alloc+0x6c/0x80
[  156.241261][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  156.242933][    C1]  xfrm_state_alloc+0x24/0x2f0
[  156.244595][    C1]  __find_acq_core+0x8a7/0x1c00
[  156.246585][    C1]  xfrm_find_acq+0x78/0xa0
[  156.248407][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  156.250463][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  156.252166][    C1]  netlink_rcv_skb+0x208/0x470
[  156.253798][    C1]  xfrm_netlink_rcv+0x79/0x90
[  156.255354][    C1]  netlink_unicast+0x82f/0x9e0
[  156.257320][    C1]  netlink_sendmsg+0x805/0xb30
[  156.258788][    C1]  __sock_sendmsg+0x21c/0x270
[  156.260279][    C1]  ____sys_sendmsg+0x505/0x830
[  156.261761][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  156.263389][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  156.265122][    C1]  do_syscall_64+0xfa/0x3b0
[  156.266551][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.268788][    C1] 
[  156.269553][    C1] Freed by task 5844:
[  156.270826][    C1]  kasan_save_track+0x3e/0x80
[  156.272541][    C1]  kasan_save_free_info+0x46/0x50
[  156.274480][    C1]  __kasan_slab_free+0x5b/0x80
[  156.276330][    C1]  kmem_cache_free+0x18f/0x400
[  156.278095][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  156.279947][    C1]  process_scheduled_works+0xae1/0x17b0
[  156.281903][    C1]  worker_thread+0x8a0/0xda0
[  156.283535][    C1]  kthread+0x711/0x8a0
[  156.285030][    C1]  ret_from_fork+0x3fc/0x770
[  156.286480][    C1]  ret_from_fork_asm+0x1a/0x30
[  156.287933][    C1] 
[  156.288855][    C1] The buggy address belongs to the object at ffff8880276dc480
[  156.288855][    C1]  which belongs to the cache xfrm_state of size 928
[  156.293538][    C1] The buggy address is located 816 bytes inside of
[  156.293538][    C1]  freed 928-byte region [ffff8880276dc480, ffff8880276dc820)
[  156.298201][    C1] 
[  156.298928][    C1] The buggy address belongs to the physical page:
[  156.300795][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880276dc480 pfn:0x276dc
[  156.304057][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  156.306494][    C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  156.308841][    C1] page_type: f5(slab)
[  156.310050][    C1] raw: 00fff00000000040 ffff88801bff5c80 0000000000000000 dead000000000001
[  156.312563][    C1] raw: ffff8880276dc480 00000000800e0006 00000000f5000000 0000000000000000
[  156.315066][    C1] head: 00fff00000000040 ffff88801bff5c80 0000000000000000 dead000000000001
[  156.317581][    C1] head: ffff8880276dc480 00000000800e0006 00000000f5000000 0000000000000000
[  156.320093][    C1] head: 00fff00000000002 ffffea00009db701 00000000ffffffff 00000000ffffffff
[  156.322649][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  156.325174][    C1] page dumped because: kasan: bad access detected
[  156.327027][    C1] page_owner tracks the page as allocated
[  156.328684][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5969, tgid 5968 (syz.1.13), ts 57259648766, free_ts 56008686910
[  156.334313][    C1]  post_alloc_hook+0x240/0x2a0
[  156.335721][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  156.337358][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  156.339123][    C1]  alloc_pages_mpol+0x232/0x4a0
[  156.340596][    C1]  allocate_slab+0x8a/0x370
[  156.341946][    C1]  ___slab_alloc+0xbeb/0x1410
[  156.343345][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  156.345020][    C1]  xfrm_state_alloc+0x24/0x2f0
[  156.346524][    C1]  xfrm_state_find+0x37d4/0x5400
[  156.348001][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  156.350415][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  156.352419][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  156.354105][    C1]  udp_sendmsg+0x142e/0x2170
[  156.355748][    C1]  __sock_sendmsg+0x19c/0x270
[  156.357214][    C1]  ____sys_sendmsg+0x52d/0x830
[  156.358857][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  156.360693][    C1] page last free pid 5848 tgid 5848 stack trace:
[  156.362571][    C1]  __free_frozen_pages+0xbc4/0xd30
[  156.364076][    C1]  __slab_free+0x303/0x3c0
[  156.365690][    C1]  qlist_free_all+0x97/0x140
[  156.367443][    C1]  kasan_quarantine_reduce+0x148/0x160
[  156.369112][    C1]  __kasan_slab_alloc+0x22/0x80
[  156.370611][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  156.372296][    C1]  getname_flags+0xb8/0x540
[  156.373877][    C1]  __x64_sys_unlink+0x3a/0x50
[  156.375552][    C1]  do_syscall_64+0xfa/0x3b0
[  156.377113][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.378922][    C1] 
[  156.379630][    C1] Memory state around the buggy address:
[  156.381350][    C1]  ffff8880276dc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.383673][    C1]  ffff8880276dc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.386689][    C1] >ffff8880276dc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  156.389419][    C1]                                      ^
[  156.391183][    C1]  ffff8880276dc800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  156.393687][    C1]  ffff8880276dc880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  156.396577][    C1] ==================================================================
[  156.399576][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  156.402161][    C1] CPU: 1 UID: 0 PID: 10720 Comm: syz.1.1419 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  156.406347][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.409280][    C1] Call Trace:
[  156.410307][    C1]  <IRQ>
[  156.411169][    C1]  dump_stack_lvl+0x99/0x250
[  156.412810][    C1]  ? __asan_memcpy+0x40/0x70
[  156.414554][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.416556][    C1]  ? __pfx__printk+0x10/0x10
[  156.418392][    C1]  vpanic+0x281/0x750
[  156.419971][    C1]  ? __pfx_vpanic+0x10/0x10
[  156.421814][    C1]  ? irqentry_exit+0x74/0x90
[  156.423696][    C1]  panic+0xb9/0xc0
[  156.425234][    C1]  ? __pfx_panic+0x10/0x10
[  156.427157][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  156.429469][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  156.431743][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  156.433254][    C1]  check_panic_on_warn+0x89/0xb0
[  156.434955][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  156.436493][    C1]  end_report+0x78/0x160
[  156.437730][    C1]  kasan_report+0x129/0x150
[  156.439077][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  156.440689][    C1]  xfrm_state_find+0x2cf2/0x5400
[  156.442398][    C1]  ? __lock_acquire+0xab9/0xd20
[  156.443852][    C1]  ? unwind_next_frame+0xa5/0x2390
[  156.445361][    C1]  ? xfrm_state_find+0x1da/0x5400
[  156.446842][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  156.448415][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  156.450560][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  156.452474][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  156.454673][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  156.456608][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  156.458549][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  156.460462][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  156.462393][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  156.464412][    C1]  ? l3mdev_master_ifindex+0x18/0x160
[  156.466147][    C1]  ? l3mdev_master_ifindex+0x18/0x160
[  156.467906][    C1]  ? l3mdev_master_ifindex+0x18/0x160
[  156.469920][    C1]  icmp_route_lookup+0x3ab/0x870
[  156.471601][    C1]  ? __pfx_icmp_route_lookup+0x10/0x10
[  156.473386][    C1]  ? __asan_memset+0x22/0x50
[  156.475022][    C1]  ? __pfx___ip_options_echo+0x10/0x10
[  156.477111][    C1]  ? __icmp_send+0x1b9/0x12d0
[  156.478774][    C1]  __icmp_send+0xd0e/0x12d0
[  156.480424][    C1]  ? __icmp_send+0x1b9/0x12d0
[  156.482165][    C1]  ? __pfx___icmp_send+0x10/0x10
[  156.484061][    C1]  ? netif_receive_skb_list_internal+0xa4f/0xcc0
[  156.486234][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  156.488569][    C1]  ? e1000_clean_rx_irq+0xf7c/0x1170
[  156.490251][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  156.492027][    C1]  ipv4_link_failure+0x64e/0xa30
[  156.493663][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[  156.495354][    C1]  ? __pfx_ipv4_link_failure+0x10/0x10
[  156.497052][    C1]  arp_error_report+0x118/0x160
[  156.498526][    C1]  neigh_invalidate+0x235/0x460
[  156.500017][    C1]  neigh_timer_handler+0x949/0x1150
[  156.501659][    C1]  call_timer_fn+0x17e/0x5f0
[  156.503167][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[  156.504863][    C1]  ? call_timer_fn+0xbe/0x5f0
[  156.506304][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  156.508146][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  156.509775][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.511428][    C1]  ? __pfx_neigh_timer_handler+0x10/0x10
[  156.513297][    C1]  __run_timer_base+0x61a/0x860
[  156.514804][    C1]  ? ktime_get+0x3e/0x1f0
[  156.516158][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  156.517805][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  156.519777][    C1]  run_timer_softirq+0xb7/0x180
[  156.521347][    C1]  handle_softirqs+0x286/0x870
[  156.522869][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  156.524384][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  156.526025][    C1]  __irq_exit_rcu+0xca/0x1f0
[  156.527416][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  156.528950][    C1]  irq_exit_rcu+0x9/0x30
[  156.530247][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  156.532035][    C1]  </IRQ>
[  156.533008][    C1]  <TASK>
[  156.533954][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.535822][    C1] RIP: 0010:__rcu_read_unlock+0x71/0xe0
[  156.537572][    C1] Code: e8 03 42 0f b6 04 38 84 c0 75 66 41 83 3e 00 75 27 43 0f b6 04 3c 84 c0 75 41 8b 03 3d 00 00 00 40 73 0f 5b 41 5c 41 5d 41 5e <41> 5f c3 cc cc cc cc cc 90 0f 0b 90 eb eb e8 6c 00 00 00 eb d2 89
[  156.543661][    C1] RSP: 0018:ffffc90004daf208 EFLAGS: 00000287
[  156.545581][    C1] RAX: 0000000000000000 RBX: ffffc90004daf301 RCX: 579931ce2ece2300
[  156.548037][    C1] RDX: 0000000000000001 RSI: ffffffff8dba3956 RDI: ffff8880243a9cc0
[  156.550492][    C1] RBP: dffffc0000000000 R08: ffffc90004daf347 R09: 0000000000000000
[  156.552895][    C1] R10: ffffc90004daf338 R11: fffff520009b5e69 R12: ffffc90004daf9f0
[  156.555317][    C1] R13: ffffc90004da8000 R14: ffffc90004daf2e8 R15: dffffc0000000000
[  156.557744][    C1]  ? unwind_next_frame+0xa5/0x2390
[  156.559344][    C1]  unwind_next_frame+0x19ae/0x2390
[  156.560954][    C1]  ? unwind_next_frame+0xa5/0x2390
[  156.562546][    C1]  ? __alloc_pages_noprof+0xa/0x30
[  156.564135][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  156.566026][    C1]  arch_stack_walk+0x11c/0x150
[  156.567508][    C1]  ? pcpu_populate_chunk+0x182/0xb30
[  156.569051][    C1]  stack_trace_save+0x9c/0xe0
[  156.570518][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  156.572193][    C1]  save_stack+0xf5/0x1f0
[  156.573531][    C1]  ? __pfx_save_stack+0x10/0x10
[  156.575245][    C1]  ? post_alloc_hook+0x240/0x2a0
[  156.577155][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  156.579094][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  156.581442][    C1]  ? __alloc_pages_noprof+0xa/0x30
[  156.583249][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  156.585182][    C1]  __set_page_owner+0x8d/0x4a0
[  156.586666][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  156.588340][    C1]  post_alloc_hook+0x240/0x2a0
[  156.589809][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  156.591505][    C1]  ? finish_task_switch+0x32b/0x950
[  156.593097][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  156.594852][    C1]  ? prepare_alloc_pages+0x213/0x610
[  156.596493][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  156.598287][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  156.600225][    C1]  ? preempt_schedule+0xae/0xc0
[  156.601712][    C1]  __alloc_pages_noprof+0xa/0x30
[  156.603234][    C1]  pcpu_populate_chunk+0x182/0xb30
[  156.604808][    C1]  pcpu_alloc_noprof+0xcbf/0x16b0
[  156.606382][    C1]  bpf_map_alloc_percpu+0xbc/0x1b0
[  156.607956][    C1]  prealloc_init+0x225/0x630
[  156.609380][    C1]  htab_map_alloc+0x6ce/0xc70
[  156.610839][    C1]  map_create+0xaa3/0x14d0
[  156.612209][    C1]  ? security_bpf+0x7e/0x300
[  156.613617][    C1]  __sys_bpf+0x60f/0x870
[  156.614930][    C1]  ? __pfx___sys_bpf+0x10/0x10
[  156.616421][    C1]  ? __sys_bind+0x33b/0x3e0
[  156.617810][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  156.619424][    C1]  ? rcu_is_watching+0x15/0xb0
[  156.620894][    C1]  __x64_sys_bpf+0x7c/0x90
[  156.622285][    C1]  do_syscall_64+0xfa/0x3b0
[  156.623689][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.625303][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.627167][    C1]  ? exc_page_fault+0x9f/0xf0
[  156.628612][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.630449][    C1] RIP: 0033:0x7f704238ebe9
[  156.631850][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.637667][    C1] RSP: 002b:00007f7043146038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  156.640202][    C1] RAX: ffffffffffffffda RBX: 00007f70425b6090 RCX: 00007f704238ebe9
[  156.642556][    C1] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000000
[  156.644948][    C1] RBP: 00007f7042411e19 R08: 0000000000000000 R09: 0000000000000000
[  156.647373][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.649803][    C1] R13: 00007f70425b6128 R14: 00007f70425b6090 R15: 00007ffddecfa238
[  156.652293][    C1]  </TASK>
[  156.653808][    C1] Kernel Offset: disabled
[  156.655167][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:36:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000202 RCX=9920f736a23a7700 RDX=ffffc9000177f501
RSI=ffffffff8d9c842d RDI=ffffffff8be32680 RBP=dffffc0000000000 RSP=ffffc9000177f388
R8 =ffffc9000177f5b0 R9 =0000000000000000 R10=ffffc9000177f578 R11=fffff520002efeb1
R12=ffffc9000177f5c0 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffff888027393980
RIP=ffffffff8b78d150 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f07c514bc80 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7a250e56c0 CR3=0000000107244000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=00000000000001e1 0000000000000030
XMM06=ffffffffffff0000 ffffffffffffff00 XMM07=000000000000ff00 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=00000000000001e1 0000000000000030
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001df710
R8 =ffff8881066d8237 R9 =1ffff11020cdb046 R10=dffffc0000000000 R11=ffffffff854e7250
R12=dffffc0000000000 R13=ffffffff99af48cc R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e72cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f70431466c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7a2518afc8 CR3=0000000044a98000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=c25b798542b2e7fb bf2e2bb5d58f0f5e XMM03=7d0c134c8199b0b9 ae79f4f966556049
XMM04=d70e60df33cb94d5 4dffd7fb7a69e5de XMM05=a52a2ecf052faab7 da4b7e79f9093c82
XMM06=b5ca6d38d00320b2 f87dde2c985d70b1 XMM07=5e630c38ae5dc9db b9a6ea5108eb48c6
XMM08=0c667f06d70e60df 33cb94d54dffd7fb XMM09=0000000000000000 00007f7042412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
