last executing test programs:

1.627018886s ago: executing program 2 (id=1295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=@newtaction={0xeb8, 0x30, 0x25, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_pedit={0xea0, 0x1, 0x0, 0x0, {{0xa}, {0xe74, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0xfffeffff}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x0, 0x0, 0x5}, {0x0, 0x7}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {0x0, 0x10001}, {0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4cb0}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0xa}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="fe0000000000000008000d00ff7fffff"], 0x28}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r5, &(0x7f0000000040), 0x0}, 0x20)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="14fc409419284ff9a7e5112000000001"], 0x14}, 0x1, 0x0, 0x0, 0x4000885}, 0x40000)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x62000080}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x891}, 0x880)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8)
sendmmsg$inet(r9, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}], 0x38}}], 0x2, 0x4040000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r11, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000090}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6)
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24000018}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="040025bd7000fcdbdf25340000000600fd00020000001400fe00068718a4e19ec5d58224f32a6c22bc2b0a00060008021100000100000a000600027a3cb6f26200000a0034000202020202020000140055007ebd950200d993517acd0856d8880071"], 0x68}}, 0x4000)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000000)
sendmsg$NLBL_MGMT_C_LISTDEF(r12, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c004}, 0x40000)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x23)

1.479094436s ago: executing program 2 (id=1297):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
recvmsg(r1, &(0x7f0000000480)={&(0x7f00000003c0)=@ax25={{0x3, @bcast}, [@null, @netrom, @bcast, @null, @netrom, @rose, @bcast, @netrom]}, 0x80, &(0x7f0000000440), 0x0, &(0x7f00000005c0)=""/198, 0xc6}, 0x10040)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x26)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)={0x1, 0x6d1, 0xb, {}, {}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x5, 0x5, 0x0, 0x0, "c84b0f70ed9a476e"}}, 0x48}}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r6}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r8}, 0x20)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'nicvf0\x00', <r9=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001640)='n', 0x1}], 0x1}, 0x4000001)
recvmmsg(r11, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x7}}}}]}, 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4001)

1.312260352s ago: executing program 2 (id=1300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x58}}, 0x0)
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040))

1.098243985s ago: executing program 2 (id=1303):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
socketpair(0x1d, 0x80000, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b405000000000000611088000800000063012e00000000009500000000000000df50dc63598426c10be963528304e6951c27b650827b15b59c62961084f6168a3a9211f2cd1feecdf759eb54d295539960856365cce027fa24b2a4e2eb91662ded82fee0f50b8bfd77f864605ba30fef1bc187ba6f590f208bf87ae35b6c5a2a0c552d60628334e5403e86082eff61a47305c40967a9a8a95e50ba3819fbf75a929f36ccad149f614fff954fec75b35100463c12c28a4d46556c99a410cc02033e361f7ec375b08af3c8a3b7e2c4c728d77d6d43034a89402ecb27acef156afea97e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x572}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000380)="5fb9276768653665efd838f5801f33f541e21d5e78c9b2dff7c4af2ffccaa3cc30a6aac8ed0e0e0f951ec15a265537540ee7e78751459d461719d9e0", 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000f6c303000000000070"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0, <r4=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000740)='%pS    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pK    \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x2, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000a40)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xa, 0xfffffffe, 0x1}, 0x10, 0xdbe0, r2, 0x5, &(0x7f0000000880)=[r3, r4, r5], &(0x7f00000008c0)=[{0x0, 0x3, 0xf, 0x8}, {0x2, 0x3, 0x0, 0xa}, {0x5, 0x5, 0x6, 0x8}, {0x2, 0x5, 0x9, 0x1}, {0x4, 0x2, 0x9, 0x9}], 0x10, 0x1}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r6)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="210827bd7000fddbdf25030000001400010000000001000000000000ffff64010902"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x88efa964645774f0)
r9 = socket(0xa, 0x800, 0x4)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x9, 0x5, r11}, 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r11, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x2, 0x1}, 0xfffffffffffffffd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x23, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xfffffffffffffcb9, 0x10, &(0x7f0000000480)={0x5, 0x4101, 0x18c9d50d, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet(r12, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000a00)={0x64fc, 'syz1\x00'})

579.656852ms ago: executing program 1 (id=1313):
r0 = socket(0x1d, 0x800, 0x1)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0xac}, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip_vti0\x00', <r2=>r1, 0x1, 0x7800, 0xc7, 0x8, {{0xc, 0x4, 0x3, 0x3b, 0x30, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @empty, {[@generic={0x82, 0xd, "1cab10165cc0fff3a1479f"}, @timestamp={0x44, 0xc, 0x36, 0x0, 0x4, [0x9, 0x0]}]}}}}})
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno', 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1f4, r4, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x19a, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="c50e0f064d31", @device_a, @device_b, {0x3, 0x5}, "", @value={0x4, 0x0, 0x1, 0x0, 0x7f}, @value=@ver_80211n={0x0, 0x40, 0x0, 0x0, 0x0, 0x2}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810)
r6 = getpid()
sendmsg$nl_netfilter(r0, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)={0x448, 0xa, 0x1, 0x0, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x7}, [@typed={0x8, 0x61, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xf, 0x0, 0x0, @u32=0x8}, @typed={0x4, 0xdc}, @typed={0x8, 0x11c, 0x0, 0x0, @uid=0xee01}, @nested={0x161, 0xd3, 0x0, 0x1, [@nested={0x4, 0xed}, @nested={0x4, 0xdb}, @generic="49e7bb0d52ac1c1fbd5c1b54929615e51e46bfadfdb0d07dd8ac7311d2b26174cd9d03818a1a316e03f68fb7867f47ed25008e93d8dc1b372f8bea8363a5f9", @nested={0x4, 0x45}, @generic="271525dad7dc5a64f6fbc874afeb5c5b0d6b260d7e39344ca24d2fa8cef25d01565656d5964d643a91da1e0de98742f1836005e78c5b1cd7b9cc2390999376683eb3aeb0978541e70384d8dde28ffc6ea94551db65cffae1d75a1fd286794b9eb985bb9adf37cf057e700eb6ea83ebb2abc1c7fb40ef23ce0372161f6773f7ab2cf4b65b59b240c3c11e9e909b46f07f0c6650", @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x35}, @nested={0x4, 0x3e}, @nested={0x4, 0xb0}, @generic="34c6340b27afd35bfed31716f06767b3a34e959b284ee9b1e8e1cb8f233b60308408e15716daf3a8e57f1eeef7ab4f7ccdc70dc7a5b6548863153de7de7cb39e16cc20e87ec3bd028e2502f4533a0b34cc58f86563c4d6ae965299e6ec3d38887c6a3430787e589bd951d2"]}, @generic="d463faa44239343f262db0b3328d32840919654b06bcf490339c61904afbb9492a659d3381cb84546fc4b1b81f18a5420a686655aaafea9bc898d0eeb7504d4f6059c037e6781cd9daf0f1eecc2b82d4adaf635cda0394a6685be5fc084854b948db4b6e0fc6572007b3d6ea71c538add8d48c0027700fe357533666a140caa46c421c6c1dc054e7bc3cad0015700e1eeb2a15da40567218612d8e310e197e39b563eaf9fa1e0e9e763bf88f361cac840a1c7a995a39352001bb71be469e263cefaf8588578b0a166c04ebc9e5be1a6842c0dc9840fe3b2a2fa757181dc69a5a231ecd049e801a1de2b89809395851f47a", @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xd4}]}, @nested={0x12d, 0x6f, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @ipv4=@loopback}, @typed={0xb, 0x13b, 0x0, 0x0, @str='dvmrp0\x00'}, @typed={0x8, 0xff, 0x0, 0x0, @pid}, @nested={0x4, 0x14b}, @generic, @nested={0x4, 0xb3}, @typed={0x4, 0x93}, @generic="eb3e8ac34ff3e7a33aaf0421802fc2a09d7dd2b6635a4643955ca2f2f0eb5cdbaadb3b479adc2c773f6aa7ef59c1dc6b4e0d0ef8194d5675da8c59d8bb25c575d7ecf626ac1799afa9e567ba04f686e149c8b4d70fa9a8d13dc5a00622336761577b8dc852519591da8e380800394ae7e3cb786b01ca8f6b736e22a58d0a88fa608e2f467cd7fa7eee35f8a8ff71edfba08a167ef71f928464ec374887a8908fde6d540a29558e67cd487fcffeb84c902ebc4b53f66a63d5da5caa674f5d3255603ec8a683a9853cb60470f66994db3c2d898be78e6adce091cd27b75ef7abc28f58acb632613eb4aa8caf09378d65fff9479769d68c4644ac", @nested={0x4, 0x32}, @nested={0x4, 0xf9}]}, @nested={0x88, 0xe5, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0xac, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x78}, @nested={0x4, 0x7f}, @nested={0x4, 0xf3}, @nested={0x4, 0x37}, @generic="68d30ee053ac583da7cda0fd53b4a689c2b0c47928419be599f5292d88de1c1d7205bc05afd93154b286205ef68f26cecd7e8ef2dd62b560a5d4d23448b4bcd3b4d3ee99e493f5a5", @typed={0x10, 0xaf, 0x0, 0x0, @binary="cd4503c3a31f6e9d7a30c2e5"}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000a00)=[@timestamp, @mss, @mss={0x2, 0xc}, @timestamp], 0x4)
writev(r3, &(0x7f0000000ec0)=[{&(0x7f0000000a40)="ac7dde201fe088bef981e9b9edcc3b6cfe6f32c853d6b7651c480197ee853299fe666e13d0e68d9852e0e3868e94d2b01038bbf9940597fd66bd487786581e16aa69bb7e3c81ee6acbb28cd4b80f46c34ee8ca83ebf2043da7", 0x59}, {&(0x7f0000000ac0)="31d6128ae5e7f50695fafbdc9676e206f9a003cd18332679b979791b61afa6eb2540da4b8f7f5de4327e65fe673ab99414588102927827268029f68726480b57442ef7463a330cdb3582ffa4b77f4b5a9bae226019fd272840cd0e10581ba8c589a53f82b2d818169deb1ebd865acd022ae05aaf51eabfffa117a8f8aca5158fd1632b1c7db1c452ddd1258a23d0cffa7f18a81d2bc1b09d561997abf6de00eb6a2a1e7920237b6264b8f0ba2282b18ea9dac86feb7aa4967e178c4a4e512da0eb4e0bef168b1f3bffe13bb65f64df6a6d7acb764532783f28d368e3b47a75fa14", 0xe1}, {&(0x7f0000000bc0)="79dad32a07b36e9820b79906bca0d05b29aaca77bfd556f415d096b535cc5428cf7c155b2c2c2bb079ab847c0f44cf18db15438cc1193eacf695e74dd9168200ab4ea47c59bdf4f8d914e60b2198b09402eb3bae10fdac99b8848f6e9394110c2a", 0x61}, {&(0x7f0000000c40)="cee3270355bfe0053d57d47494526f45f9a6ca6777c5609f06f3ecca2dbafa7adde656d0c11d94d106258bd978db", 0x2e}, {&(0x7f0000000c80)="ba0990c3425f7cdb5b350d357249b68ec8e676763b97f3f187c3d1f150e60d0799a4d95d116ab38e74be3621ae7473226c11242475ebcd306eeec1988ec1f593279ebf71a6b57257d4c7c6f8a29413aee7e5c40bd3f93c3da0fe7434986a3814f9d5503906ec8dafb5cb317d7b3833a47e69081af962f69251d2cf6ce4d5f84084a868bfc7d30af24bf97cd808cae95847934f75ff8983827038539801446931e39148f97b42730142ddcd7e4a2814724eb1918dda1c76e1abc7923966473982f1bb5ab6228c6c633faf5afdbd697730ff67784b4559487dda5760f5f5a65f21d321cfeb5ea112db50e2ba5b8a58043ff48361de59", 0xf5}, {&(0x7f0000000d80)="09c004fd5433b4f45602b7806808ba11e0701a58d5bf391f5bb870cb7dd773d55c5ec7865c98c9df85500cbe8292dc21e9cdfe05fe2b1b8f063e5b59a96b05", 0x3f}, {&(0x7f0000000dc0)="d73348d6b440317c6a40cd3a747370f0a09ab0a55ee1b1e4241a3ea8df53b18319b1b8a1362b57e091692062ca9f69bd7b26f8eb47093984f82108006ba558d2f7f22e198e4d3b2960e61ae4cd20b1cbf3f3e7463ab0303ecaea71567de5bbbbe5f67c9e4801e492e2a1a39f75d18e5f4fdeb83c444a6d9af0acd8e6b0eeccb923fff68a51e7da32660b02d431de920d406d0d914eedf08adc125028480d339ad805c735294d87f37d48e2fa8e14d10226dd0a50d38b4d849a7a6fdab156aa68becf9f171a1e7da079f7c5a7a570c20a6c52a1d0", 0xd4}], 0x7)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44000)
bind$alg(r0, &(0x7f0000001080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x27, 0x5, 0x7)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f0000001140))
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001180)={0xffffffffffffffff, 0x2, 0x10}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000011c0)={'batadv_slave_1\x00', <r11=>0x0})
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0xffff0001, 0x7, 0x1, 0x100, r10, 0x4, '\x00', r11, r12, 0x0, 0x5, 0x4, 0x7}, 0x50)
sendmsg$NFNL_MSG_ACCT_DEL(r12, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
sendmsg$NL80211_CMD_SET_CHANNEL(r12, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r4, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff7a, 0x1b}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}]}, 0x40}}, 0x4000000)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r0)
sendmsg$DEVLINK_CMD_PORT_SET(r8, &(0x7f0000001700)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x15c, r13, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000001740)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000001780)=0x2c)
recvmmsg(r12, &(0x7f000000b280)=[{{&(0x7f00000017c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001840)=""/65, 0x41}, {&(0x7f00000018c0)=""/174, 0xae}, {&(0x7f0000001980)=""/247, 0xf7}, {&(0x7f0000001a80)=""/120, 0x78}, {&(0x7f0000001b00)=""/191, 0xbf}, {&(0x7f0000001bc0)=""/205, 0xcd}, {&(0x7f0000001cc0)=""/198, 0xc6}, {&(0x7f0000001dc0)=""/179, 0xb3}], 0x8, &(0x7f0000001f00)=""/197, 0xc5}}, {{&(0x7f0000002000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/193, 0xc1}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/58, 0x3a}, {&(0x7f0000004280)=""/241, 0xf1}, {&(0x7f0000004380)=""/5, 0x5}, {&(0x7f00000043c0)=""/234, 0xea}], 0x8, &(0x7f0000004540)=""/102, 0x66}, 0x40}, {{&(0x7f00000045c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000007940)=[{&(0x7f0000004640)=""/163, 0xa3}, {&(0x7f0000004700)=""/40, 0x28}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/164, 0xa4}, {&(0x7f0000005800)=""/169, 0xa9}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/93, 0x5d}, {&(0x7f0000006940)=""/4096, 0x1000}], 0x8, &(0x7f00000079c0)=""/153, 0x99}, 0x5}, {{&(0x7f0000007a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f0000008d80)=[{&(0x7f0000007b00)=""/106, 0x6a}, {&(0x7f0000007b80)=""/226, 0xe2}, {&(0x7f0000007c80)=""/4096, 0x1000}, {&(0x7f0000008c80)=""/198, 0xc6}], 0x4, &(0x7f0000008dc0)=""/208, 0xd0}, 0x8}, {{&(0x7f0000008ec0)=@un=@abs, 0x80, &(0x7f000000a200)=[{&(0x7f0000008f40)=""/61, 0x3d}, {&(0x7f0000008f80)=""/4096, 0x1000}, {&(0x7f0000009f80)=""/145, 0x91}, {&(0x7f000000a040)=""/65, 0x41}, {&(0x7f000000a0c0)=""/55, 0x37}, {&(0x7f000000a100)=""/221, 0xdd}], 0x6, &(0x7f000000a280)=""/4096, 0x1000}, 0x80}], 0x5, 0x20, &(0x7f000000b3c0)={0x0, 0x989680})

577.840466ms ago: executing program 1 (id=1315):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x0, 0x10, 0x6, 0x3, 0xfffffffa, 0xc219, 0x1, 0x3ccd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200048e5}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r10, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r11}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'syztnl0\x00', <r12=>0x0, 0x789f, 0x8000, 0x5, 0x8, {{0xc, 0x4, 0x2, 0x9, 0x30, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xaa, [@loopback, @multicast2, @broadcast, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000280)={'gretap0\x00', <r13=>0x0, 0x40, 0x56df93ff99a509ea, 0x10001, 0x38000000, {{0x22, 0x4, 0x0, 0x5, 0x88, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, {[@generic={0x0, 0xa, "40093bd7649a6a75"}, @rr={0x7, 0xb, 0xf, [@dev={0xac, 0x14, 0x14, 0x1c}, @empty]}, @timestamp={0x44, 0x1c, 0xf8, 0x0, 0x5, [0x40, 0x5, 0x101, 0x1, 0x2, 0x8]}, @rr={0x7, 0x13, 0x39, [@multicast1, @multicast1, @empty, @multicast2]}, @ssrr={0x89, 0x17, 0x86, [@remote, @local, @broadcast, @broadcast, @rand_addr=0x64010101]}, @end, @timestamp={0x44, 0x8, 0x9c, 0x0, 0x7, [0x9]}, @rr={0x7, 0xf, 0x97, [@rand_addr=0x64010100, @private=0xa010100, @multicast1]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@remote, <r14=>0x0}, &(0x7f0000000380)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000003c0)={'team0\x00', <r15=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, <r16=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x60, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={<r17=>0x0, @local, @local}, &(0x7f0000000780)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000007c0)={'team0\x00', <r18=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', <r19=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000f00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)={0x65c, r10, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7abf32db}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r18}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x65c}, 0x1, 0x0, 0x0, 0xc000}, 0x800)

346.944953ms ago: executing program 1 (id=1318):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7, 0xa45325ef87d56922}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000b700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

345.270377ms ago: executing program 0 (id=1319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14fff500100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

343.534197ms ago: executing program 1 (id=1320):
r0 = socket$inet(0x2, 0x3, 0x7)
sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="58000000000000000000000001"], 0x58}, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c0012800b0001006970766c616e00000c00028006000100020000000c000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002)

289.651851ms ago: executing program 0 (id=1321):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000008000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000004800000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)

231.934163ms ago: executing program 0 (id=1322):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b00000002"], 0x68}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000001100000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

170.585324ms ago: executing program 2 (id=1323):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "ff918db4b2ea864f5815795e5c517b777bf7d391e3a422329473449b6549c7ed", "1a324626a66fea4c37e166fb9b76dbb0b34a4b52c396450339b98a84de4a9567", "b767d3283bdd19a0bac6fc57d24dc8ec638ab26a47bc5f7cf96061a759cdef6c", "be8aa6a91224f0a70e95e0e200", "bf445359f87c8d9d44597e290cfd1c5ef93ac3eabc63287ff01f140e67ad238a", "7fb9d29063e003eb8f9ca834", 0x8, 0x7fff, 0x6, 0x5, 0x6}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25090000003000038014000200000000000000000000000000000000000800030003000000060007004e2300000800010001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x20000000)

170.1943ms ago: executing program 0 (id=1324):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x38, 0x6, "9494bf7500d7bf1872fd1f38c971c3e502308e18c1333b2c402b190fdf9ca894f3f50e671b21a8856509ef47a861024bffab06f3"}]}, @NFT_MSG_DELSET={0x18c, 0xb, 0xa, 0x603, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x15c, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffdf}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x34}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x79}]}}}, {0x3c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x78, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x278}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

120.777386ms ago: executing program 2 (id=1325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r3, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20)
shutdown(r1, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000400)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x6a, 0x100, 0x8, 0x2f, 0x0, @broadcast, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x12}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7)
sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r8, 0x211, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4885}, 0x40000)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r9 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r10, 0x8b2a, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000800)='cubic', 0x4)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
setsockopt(r9, 0xfffffff8, 0x9, &(0x7f0000000600)="b665e007d4c026affb2b75450c1d79fe761fcdefafdcb98059374be700467c68c70201931228dc46e38d57bf3c3ab511e676a144b127df2b33702b8347924dc168a2cf1be0cb61e23960a676277e177509c43472de9f2bc4f70fdafa221fa9ee57cc59c37be25925c1af74b4f1bc9ceabdad44241de30105d75bc7734153a088a6e5c01bdc1d5e28c0001ff066f5cc6928d648e2a4bb82ef297acbc7bc93ba510a32edc2c77ac4a648b56cb1759d119e5bcf1eb774939ead6fe8437d3818c9545df7836bb5d395adc001d6e766a84ae6bd5efc4e11e78d06b26ae3f26836cd666f9a46c88e6aeecbbb4327f75c00c1dcd8189bb1758e73c424", 0xf9)
sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x110}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "dd7da625128742a9", "98d5cf4b9c42168cf06b183bd84ef02c", "fe6f083a", "6f7b93cfe857dd75"}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2)

118.803617ms ago: executing program 1 (id=1326):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x3, {0x2, 0x1, 0x4}, {0x0, 0xf0}, 0x1}, {0x1, 0x2, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x3}, 0xff}], 0x40)
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x3, {0x2, 0xf0, 0x2}, 0x2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xc, 0x9}, {0xfff1, 0x1}, {0x0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x0)

118.708306ms ago: executing program 0 (id=1327):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000004000000000000000001d71185e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

408.495µs ago: executing program 0 (id=1328):
socket(0x2, 0x80805, 0x0) (async)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x22020400) (async)
unshare(0x22020400)
unshare(0x24020400)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01df2504000000"], 0x14}}, 0x800) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01df2504000000"], 0x14}}, 0x800)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(r5) (async)
close(r5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r10}, &(0x7f0000000700), &(0x7f0000000740)=r6, 0x600}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r10}, &(0x7f0000000700), &(0x7f0000000740)=r6, 0x600}, 0x20)

0s ago: executing program 1 (id=1329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a030000000000000000000100000a0900010073797a30000000000800024000000006"], 0x78}, 0x1, 0x0, 0x2000000, 0x4000884}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1620' (ED25519) to the list of known hosts.
syzkaller login: [   56.957878][ T5831] cgroup: Unknown subsys name 'net'
[   57.081857][ T5831] cgroup: Unknown subsys name 'cpuset'
[   57.088509][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.393087][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.329588][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.336334][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.340313][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.344514][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.375165][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.380922][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.384103][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.389371][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.389885][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.395397][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.399667][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.403596][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.406787][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.447255][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.451058][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.811128][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.923674][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   65.961711][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   66.021966][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.026048][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.030202][ T5854] bridge_slave_0: entered allmulticast mode
[   66.034262][ T5854] bridge_slave_0: entered promiscuous mode
[   66.077444][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.080467][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.083720][ T5854] bridge_slave_1: entered allmulticast mode
[   66.088404][ T5854] bridge_slave_1: entered promiscuous mode
[   66.157317][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.160696][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.164104][ T5850] bridge_slave_0: entered allmulticast mode
[   66.170762][ T5850] bridge_slave_0: entered promiscuous mode
[   66.175835][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.179475][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.182591][ T5850] bridge_slave_1: entered allmulticast mode
[   66.186578][ T5850] bridge_slave_1: entered promiscuous mode
[   66.243618][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.251520][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.255204][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.258440][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.261349][ T5846] bridge_slave_0: entered allmulticast mode
[   66.265111][ T5846] bridge_slave_0: entered promiscuous mode
[   66.272659][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.276740][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.279858][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.283075][ T5846] bridge_slave_1: entered allmulticast mode
[   66.286893][ T5846] bridge_slave_1: entered promiscuous mode
[   66.303414][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.331994][ T5854] team0: Port device team_slave_0 added
[   66.335750][ T5854] team0: Port device team_slave_1 added
[   66.410145][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.415242][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.419639][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.430945][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.439733][ T5850] team0: Port device team_slave_0 added
[   66.442648][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.445445][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.456724][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.465381][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.483703][ T5850] team0: Port device team_slave_1 added
[   66.530436][ T5846] team0: Port device team_slave_0 added
[   66.534648][ T5846] team0: Port device team_slave_1 added
[   66.538260][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.541010][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.551353][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.584383][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.588062][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.598250][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.618001][ T5854] hsr_slave_0: entered promiscuous mode
[   66.620812][ T5854] hsr_slave_1: entered promiscuous mode
[   66.643905][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.646705][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.657607][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.686642][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.690380][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.701811][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.785160][ T5850] hsr_slave_0: entered promiscuous mode
[   66.789117][ T5850] hsr_slave_1: entered promiscuous mode
[   66.792394][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   66.794879][ T5850] Cannot create hsr debugfs directory
[   66.850158][ T5846] hsr_slave_0: entered promiscuous mode
[   66.852634][ T5846] hsr_slave_1: entered promiscuous mode
[   66.855049][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   66.858151][ T5846] Cannot create hsr debugfs directory
[   67.153211][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.164366][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.181479][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.187830][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.252388][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.272549][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.279137][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.288889][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.357499][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.368979][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.376184][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.385382][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.461232][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.498992][ T5853] Bluetooth: hci0: command tx timeout
[   67.501374][ T5849] Bluetooth: hci2: command tx timeout
[   67.502564][   T55] Bluetooth: hci1: command tx timeout
[   67.523647][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   67.542251][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.544916][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.559166][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.561711][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.574307][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.616869][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   67.636888][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.651475][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.653887][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.678944][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.682052][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.702817][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   67.727125][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.730222][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.764133][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.767149][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.921850][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.021189][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.023642][ T5854] veth0_vlan: entered promiscuous mode
[   68.041347][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.050239][ T5854] veth1_vlan: entered promiscuous mode
[   68.120259][ T5854] veth0_macvtap: entered promiscuous mode
[   68.136605][ T5850] veth0_vlan: entered promiscuous mode
[   68.150574][ T5854] veth1_macvtap: entered promiscuous mode
[   68.155605][ T5846] veth0_vlan: entered promiscuous mode
[   68.169045][ T5850] veth1_vlan: entered promiscuous mode
[   68.183535][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.189934][ T5846] veth1_vlan: entered promiscuous mode
[   68.209518][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.231602][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.239880][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.259885][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.263630][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.271198][ T5850] veth0_macvtap: entered promiscuous mode
[   68.281105][ T5850] veth1_macvtap: entered promiscuous mode
[   68.331115][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.335406][ T5846] veth0_macvtap: entered promiscuous mode
[   68.345035][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.368711][ T5846] veth1_macvtap: entered promiscuous mode
[   68.378563][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.399476][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.419592][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.436623][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.458528][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.471326][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.482916][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.496752][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.553489][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.588104][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.591431][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.601281][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.609129][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.630105][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.640821][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.644237][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.724465][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.727532][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.738246][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.792587][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.795736][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.854837][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.867245][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.042540][ T5921] bond1: entered promiscuous mode
[   69.044624][ T5921] bond1: entered allmulticast mode
[   69.047104][ T5921] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.059358][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5'.
[   69.105110][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'.
[   69.117117][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6'.
[   69.123481][ T5930] netlink: 'syz.2.6': attribute type 2 has an invalid length.
[   69.145661][ T5930] : entered promiscuous mode
[   69.275465][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   69.286101][ T5941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'.
[   69.472505][ T5954] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13'.
[   69.578020][   T55] Bluetooth: hci1: command tx timeout
[   69.578287][ T5849] Bluetooth: hci0: command tx timeout
[   69.580888][ T5853] Bluetooth: hci2: command tx timeout
[   69.722694][ T5964] netlink: 'syz.1.17': attribute type 8 has an invalid length.
[   69.752107][ T5965] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET)
[   69.804841][ T5967] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   69.872568][ T5970] Zero length message leads to an empty skb
[   69.956710][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.969654][ T5979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.974978][ T5979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'.
[   69.984277][ T5979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'.
[   70.287259][ T5991] tipc: Started in network mode
[   70.289269][ T5991] tipc: Node identity 4, cluster identity 4711
[   70.291908][ T5991] tipc: Node number set to 4
[   70.540118][ T5995] netlink: 'syz.0.26': attribute type 4 has an invalid length.
[   70.925642][ T6006] tipc: Started in network mode
[   70.929003][ T6006] tipc: Node identity 1a71b205aca4, cluster identity 4711
[   70.932033][ T6006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.951575][ T6006] syzkaller0: entered promiscuous mode
[   70.953673][ T6006] syzkaller0: entered allmulticast mode
[   71.026030][ T6005] tipc: Resetting bearer <eth:syzkaller0>
[   71.068157][ T6005] tipc: Disabling bearer <eth:syzkaller0>
[   71.080563][ T6019] ipvlan2: entered promiscuous mode
[   71.083432][ T6019] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   71.198560][ T6030] netlink: 'syz.1.36': attribute type 11 has an invalid length.
[   71.341976][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.344626][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.393560][ T6048] netlink: 'syz.1.42': attribute type 1 has an invalid length.
[   71.658883][ T5853] Bluetooth: hci2: command tx timeout
[   71.662138][   T55] Bluetooth: hci1: command tx timeout
[   71.662300][ T5849] Bluetooth: hci0: command tx timeout
[   71.847794][ T6072] veth5: entered promiscuous mode
[   72.037576][ T6132] warning: `syz.0.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.063354][ T6132] bridge_slave_0: left allmulticast mode
[   72.065338][ T6132] bridge_slave_0: left promiscuous mode
[   72.073188][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.092206][ T6132] bridge_slave_1: left allmulticast mode
[   72.093975][ T6132] bridge_slave_1: left promiscuous mode
[   72.095737][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.101347][ T6132] bond0: (slave bond_slave_0): Releasing backup interface
[   72.106846][ T6132] bond0: (slave bond_slave_1): Releasing backup interface
[   72.115409][ T6132] team0: Port device team_slave_0 removed
[   72.121943][ T6132] team0: Port device team_slave_1 removed
[   72.126219][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.130202][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.134444][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.139846][ T6132] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.143364][ T6132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   72.165597][ T6132] netlink: 'syz.0.45': attribute type 10 has an invalid length.
[   72.179360][ T6132] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   72.204162][ T6139] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   72.208189][ T6142] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   72.211019][ T6138] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   72.298459][ T6149] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[   72.305023][ T6149] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[   72.366874][ T6153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.371549][ T6153] syzkaller0: entered promiscuous mode
[   72.373692][ T6153] syzkaller0: entered allmulticast mode
[   72.383085][ T6153] tipc: Resetting bearer <eth:syzkaller0>
[   72.386573][ T6152] tipc: Resetting bearer <eth:syzkaller0>
[   72.395712][ T6152] tipc: Disabling bearer <eth:syzkaller0>
[   72.435492][ T5877] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   72.443626][ T6155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.624646][ T6172] Bluetooth: MGMT ver 1.23
[   72.870194][   T47] cfg80211: failed to load regulatory.db
[   72.875970][ T6191] team0: No ports can be present during mode change
[   73.121556][ T6204] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   73.164426][ T6204] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.206357][ T6204] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.213018][ T6204] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   73.218162][ T6204] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   73.223809][ T6202] sctp: [Deprecated]: syz.0.65 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.223809][ T6202] Use struct sctp_sack_info instead
[   73.250060][ T6210] batadv1: entered allmulticast mode
[   73.253187][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv1
[   73.303356][ T6210] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   73.326649][ T6210] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   73.738125][   T55] Bluetooth: hci2: command tx timeout
[   73.740213][   T55] Bluetooth: hci0: command tx timeout
[   73.742050][ T5849] Bluetooth: hci1: command tx timeout
[   74.155867][ T6251] __nla_validate_parse: 16 callbacks suppressed
[   74.155878][ T6251] netlink: 6 bytes leftover after parsing attributes in process `syz.2.82'.
[   74.174520][ T6251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.211137][ T6251] netlink: 216 bytes leftover after parsing attributes in process `syz.2.82'.
[   74.311041][ T6256] openvswitch: netlink: Message has 1 unknown bytes.
[   74.315390][ T6256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.460805][ T6258] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.475961][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'.
[   74.739035][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[   74.746910][ T6271] netlink: 76 bytes leftover after parsing attributes in process `syz.1.91'.
[   74.750307][ T6271] netlink: 'syz.1.91': attribute type 1 has an invalid length.
[   74.846892][ T6277] netlink: 88 bytes leftover after parsing attributes in process `syz.1.93'.
[   74.946509][ T6279] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.118002][ T6279] vlan2: entered allmulticast mode
[   75.328984][ T6297] openvswitch: netlink: Key type 251 is out of range max 32
[   75.419258][ T6299] syzkaller0: entered promiscuous mode
[   75.421421][ T6299] syzkaller0: entered allmulticast mode
[   75.524579][ T6304] macvlan2: entered promiscuous mode
[   75.530236][ T6304] vlan0: entered promiscuous mode
[   75.563280][ T6302] macvlan3: entered promiscuous mode
[   75.652343][ T6307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.700139][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'.
[   75.708017][ T6312] netlink: 88 bytes leftover after parsing attributes in process `syz.2.102'.
[   75.753731][ T6307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.823840][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'.
[   75.827712][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[   75.835733][ T6307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.854191][ T6315] bridge_slave_1: left allmulticast mode
[   75.856356][ T6315] bridge_slave_1: left promiscuous mode
[   75.863205][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.873690][ T6315] bridge_slave_0: left allmulticast mode
[   75.876128][ T6315] bridge_slave_0: left promiscuous mode
[   75.878961][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.000218][ T6307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.012598][ T6320] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   76.018810][ T6320] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   76.141378][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.168088][ T5877] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.190650][ T5877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.203898][ T5877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.207828][ T6330] tipc: Started in network mode
[   76.209902][ T6330] tipc: Node identity 000000000000000007, cluster identity 4711
[   76.309736][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'.
[   76.515027][ T6355] 8021q: VLANs not supported on ip_vti0
[   76.725815][ T6363] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   76.766724][ T6363] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   76.794542][ T5877] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   76.795191][ T6363] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.908061][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   77.166052][ T6403] unknown channel width for channel at 909000KHz?
[   77.172487][ T6403] unknown channel width for channel at 909000KHz?
[   77.175247][ T6403] unknown channel width for channel at 909000KHz?
[   77.530658][ T6424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.535257][ T6424] syzkaller0: entered promiscuous mode
[   77.538728][ T6424] syzkaller0: entered allmulticast mode
[   77.587266][ T6424] tipc: Resetting bearer <eth:syzkaller0>
[   77.610160][ T6423] tipc: Resetting bearer <eth:syzkaller0>
[   77.646679][ T6423] tipc: Disabling bearer <eth:syzkaller0>
[   77.964048][ T6458] gretap0: entered promiscuous mode
[   77.969126][ T6458] gretap0: left promiscuous mode
[   78.251332][ T6466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.299360][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[   78.312263][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.721957][ T6475] netlink: 'syz.1.148': attribute type 16 has an invalid length.
[   78.772192][ T5694] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.776270][ T5694] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.779973][ T5694] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.783034][ T5694] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.832068][ T6479] netlink: 'syz.1.150': attribute type 2 has an invalid length.
[   78.879671][ T6479] k*: entered promiscuous mode
[   79.043309][ T6490] netlink: 'syz.1.153': attribute type 10 has an invalid length.
[   79.073746][ T6490] team0: Port device geneve0 added
[   79.137348][ T6493] netlink: 'syz.0.156': attribute type 6 has an invalid length.
[   79.209867][ T6493] tc_dump_action: action bad kind
[   79.415442][ T6508] __nla_validate_parse: 18 callbacks suppressed
[   79.415461][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'.
[   79.425102][ T6508] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   79.671039][ T6531] nbd: nbd0 already in use
[   79.774797][ T6542] netlink: 'syz.1.171': attribute type 4 has an invalid length.
[   79.798779][ T6544] netlink: 'syz.2.172': attribute type 2 has an invalid length.
[   79.813793][ T6544] k*: entered promiscuous mode
[   79.838695][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.848608][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.858816][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.864918][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.878487][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.888523][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.894403][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.904794][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.910386][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'.
[   79.943532][ T6544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.206690][ T6566] veth0_to_bridge: mtu less than device minimum
[   80.253300][ T6569] netlink: 'syz.1.181': attribute type 4 has an invalid length.
[   80.934878][ T6562] can-isotp: uninit cfecho F5CE5303
[   81.494103][ T6620] geneve2: entered promiscuous mode
[   81.496550][ T6620] geneve2: entered allmulticast mode
[   82.213951][ T6684] netlink: 'syz.0.213': attribute type 7 has an invalid length.
[   82.231541][ T6684] : entered promiscuous mode
[   82.239916][ T6680] netlink: 'syz.2.214': attribute type 1 has an invalid length.
[   82.446301][ T6695] syz.1.218: vmalloc error: size 6000640, failed to allocated page array size 11720, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   82.455342][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.1.218 Not tainted syzkaller #0 PREEMPT(full) 
[   82.455356][ T6695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.455362][ T6695] Call Trace:
[   82.455366][ T6695]  <TASK>
[   82.455372][ T6695]  dump_stack_lvl+0x189/0x250
[   82.455397][ T6695]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.455406][ T6695]  ? __pfx__printk+0x10/0x10
[   82.455419][ T6695]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.455428][ T6695]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.455438][ T6695]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   82.455447][ T6695]  warn_alloc+0x214/0x310
[   82.455463][ T6695]  ? __pfx_warn_alloc+0x10/0x10
[   82.455478][ T6695]  ? __get_vm_area_node+0x28f/0x300
[   82.455490][ T6695]  ? fq_pie_init+0x430/0x840
[   82.455500][ T6695]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   82.455524][ T6695]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   82.455538][ T6695]  ? rcu_is_watching+0x15/0xb0
[   82.455547][ T6695]  ? fq_pie_init+0x430/0x840
[   82.455553][ T6695]  ? fq_pie_init+0x430/0x840
[   82.455560][ T6695]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   82.455571][ T6695]  ? fq_pie_init+0x430/0x840
[   82.455579][ T6695]  ? tcf_block_get+0x67/0xa0
[   82.455588][ T6695]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[   82.455599][ T6695]  fq_pie_init+0x430/0x840
[   82.455608][ T6695]  ? __pfx_fq_pie_init+0x10/0x10
[   82.455616][ T6695]  qdisc_create+0x7ac/0xea0
[   82.455628][ T6695]  tc_modify_qdisc+0x1538/0x20e0
[   82.455643][ T6695]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   82.455664][ T6695]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   82.455671][ T6695]  rtnetlink_rcv_msg+0x77c/0xb70
[   82.455683][ T6695]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   82.455692][ T6695]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.455700][ T6695]  ? ref_tracker_free+0x63a/0x7d0
[   82.455708][ T6695]  ? __asan_memcpy+0x40/0x70
[   82.455723][ T6695]  ? __pfx_ref_tracker_free+0x10/0x10
[   82.455729][ T6695]  ? __skb_clone+0x63/0x7a0
[   82.455745][ T6695]  netlink_rcv_skb+0x208/0x470
[   82.455756][ T6695]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.455766][ T6695]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.455780][ T6695]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.455793][ T6695]  netlink_unicast+0x82f/0x9e0
[   82.455806][ T6695]  ? __pfx_netlink_unicast+0x10/0x10
[   82.455815][ T6695]  ? netlink_sendmsg+0x642/0xb30
[   82.455824][ T6695]  ? skb_put+0x11b/0x210
[   82.455835][ T6695]  netlink_sendmsg+0x805/0xb30
[   82.455850][ T6695]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.455861][ T6695]  ? aa_sock_msg_perm+0xf1/0x1d0
[   82.455869][ T6695]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   82.455878][ T6695]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.455888][ T6695]  __sock_sendmsg+0x21c/0x270
[   82.455898][ T6695]  ____sys_sendmsg+0x505/0x830
[   82.455911][ T6695]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.455926][ T6695]  ? import_iovec+0x74/0xa0
[   82.455938][ T6695]  ___sys_sendmsg+0x21f/0x2a0
[   82.455950][ T6695]  ? __pfx____sys_sendmsg+0x10/0x10
[   82.455978][ T6695]  ? __fget_files+0x2a/0x420
[   82.455984][ T6695]  ? __fget_files+0x3a0/0x420
[   82.455995][ T6695]  __x64_sys_sendmsg+0x19b/0x260
[   82.456007][ T6695]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   82.456026][ T6695]  ? do_syscall_64+0xbe/0x3b0
[   82.456039][ T6695]  do_syscall_64+0xfa/0x3b0
[   82.456047][ T6695]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.456055][ T6695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.456063][ T6695]  ? exc_page_fault+0x9f/0xf0
[   82.456072][ T6695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.456079][ T6695] RIP: 0033:0x7f9678b8ec29
[   82.456087][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.456094][ T6695] RSP: 002b:00007f96799f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.456124][ T6695] RAX: ffffffffffffffda RBX: 00007f9678dd5fa0 RCX: 00007f9678b8ec29
[   82.456130][ T6695] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007
[   82.456150][ T6695] RBP: 00007f9678c11e41 R08: 0000000000000000 R09: 0000000000000000
[   82.456154][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.456158][ T6695] R13: 00007f9678dd6038 R14: 00007f9678dd5fa0 R15: 00007fff95008d78
[   82.456171][ T6695]  </TASK>
[   82.456245][ T6695] Mem-Info:
[   82.595520][ T6695] active_anon:5609 inactive_anon:0 isolated_anon:0
[   82.595520][ T6695]  active_file:1362 inactive_file:38244 isolated_file:0
[   82.595520][ T6695]  unevictable:1768 dirty:1540 writeback:0
[   82.595520][ T6695]  slab_reclaimable:9755 slab_unreclaimable:52510
[   82.595520][ T6695]  mapped:18191 shmem:2433 pagetables:937
[   82.595520][ T6695]  sec_pagetables:0 bounce:0
[   82.595520][ T6695]  kernel_misc_reclaimable:0
[   82.595520][ T6695]  free:295603 free_pcp:21316 free_cma:0
[   82.610224][ T6695] Node 0 active_anon:12660kB inactive_anon:0kB active_file:3496kB inactive_file:146800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29560kB dirty:4632kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7952kB pagetables:1916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.621684][ T6695] Node 1 active_anon:9708kB inactive_anon:0kB active_file:1952kB inactive_file:6176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43204kB dirty:1528kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4108kB pagetables:1832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.633515][ T6695] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.644499][ T6695] lowmem_reserve[]: 0 811 811 811 811
[   82.646647][ T6695] Node 0 DMA32 free:252436kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12592kB inactive_anon:0kB active_file:3496kB inactive_file:146800kB unevictable:3536kB writepending:4632kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:50084kB local_pcp:32068kB free_cma:0kB
[   82.667125][ T6695] lowmem_reserve[]: 0 0 0 0 0
[   82.669274][ T6695] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   82.685293][ T6695] lowmem_reserve[]: 0 0 854 854 854
[   82.687821][ T6695] Node 1 Normal free:456124kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9572kB inactive_anon:0kB active_file:1952kB inactive_file:6176kB unevictable:3536kB writepending:1528kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35132kB local_pcp:15196kB free_cma:0kB
[   82.698907][ T6695] lowmem_reserve[]: 0 0 0 0 0
[   82.700509][ T6695] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   82.705133][ T6695] Node 0 DMA32: 277*4kB (UM) 152*8kB (UME) 100*16kB (ME) 66*32kB (UM) 32*64kB (UM) 13*128kB (ME) 10*256kB (M) 9*512kB (M) 8*1024kB (ME) 7*2048kB (UM) 52*4096kB (M) = 252436kB
[   82.711259][ T6695] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   82.716419][ T6695] Node 1 Normal: 851*4kB (UME) 790*8kB (UME) 346*16kB (UME) 137*32kB (UME) 26*64kB (UME) 14*128kB (UME) 14*256kB (UM) 7*512kB (UM) 4*1024kB (ME) 2*2048kB (ME) 102*4096kB (M) = 456252kB
[   82.722571][ T6695] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.725335][ T6695] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.737085][ T6695] 42039 total pagecache pages
[   82.738939][ T6695] 0 pages in swap cache
[   82.740249][ T6695] Free swap  = 124996kB
[   82.741795][ T6695] Total swap = 124996kB
[   82.743212][ T6695] 786301 pages RAM
[   82.744591][ T6695] 0 pages HighMem/MovableOnly
[   82.746219][ T6695] 241367 pages reserved
[   82.747777][ T6695] 0 pages cma reserved
[   82.819302][ T6711] ip6tnl2: entered promiscuous mode
[   82.821328][ T6711] ip6tnl2: entered allmulticast mode
[   82.824770][ T6711] team0: Device ip6tnl2 is of different type
[   83.350567][ T6740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.434958][ T6740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.510954][ T6740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.540190][ T6750] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   83.601912][ T6740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.689432][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.702799][ T5694] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.714110][ T5694] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.728681][ T5694] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.760644][ T6724] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   83.830655][ T6754] netlink: 'syz.2.233': attribute type 29 has an invalid length.
[   83.985153][ T6765] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   83.990190][ T6765] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.285267][ T6781] syzkaller0: entered promiscuous mode
[   84.290439][ T6781] syzkaller0: entered allmulticast mode
[   84.370809][ T5897] IPVS: starting estimator thread 0...
[   84.451437][ T6793] __nla_validate_parse: 32 callbacks suppressed
[   84.451451][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'.
[   84.459398][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'.
[   84.475068][ T6790] IPVS: using max 63 ests per chain, 151200 per kthread
[   84.543638][ T6800] netlink: 'syz.1.243': attribute type 6 has an invalid length.
[   84.583293][ T6800] netlink: 'syz.1.243': attribute type 12 has an invalid length.
[   84.586338][ T6800] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.243'.
[   84.690338][ T6816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'.
[   84.704839][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'.
[   84.891417][ T6836] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   84.894566][ T6836] netlink: 120 bytes leftover after parsing attributes in process `syz.0.252'.
[   85.011161][ T6847] netlink: 'syz.2.256': attribute type 12 has an invalid length.
[   85.016010][ T6847] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.256'.
[   85.142629][ T6857] unsupported nlmsg_type 40
[   85.144355][ T6857] netlink: 284 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.188170][ T6864] netlink: 'syz.2.260': attribute type 1 has an invalid length.
[   85.191027][ T6863] netlink: 'syz.2.260': attribute type 1 has an invalid length.
[   85.402124][ T6875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.262'.
[   85.449256][ T6882] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[   85.515406][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'.
[   86.190618][ T6895] netlink: 'syz.0.266': attribute type 6 has an invalid length.
[   86.425886][ T6924] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[   86.483174][ T6924] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.495335][ T6926] IPv6: sit1: Disabled Multicast RS
[   86.631059][ T6933] ipvlan2: entered promiscuous mode
[   86.715788][ T6935] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   86.718988][ T6935] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   87.031977][ T6951] ..0: renamed from hsr0 (while UP)
[   87.037716][ T6951] ..0: entered allmulticast mode
[   87.039849][ T6951] hsr_slave_0: entered allmulticast mode
[   87.042137][ T6951] hsr_slave_1: entered allmulticast mode
[   87.045745][ T6951] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   87.208066][ T6954] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   87.389518][ T6964] netlink: 'syz.0.292': attribute type 83 has an invalid length.
[   87.575351][ T6979] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   87.575697][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.582835][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.597985][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.601250][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.617653][ T5694] bond0: (slave bond_slave_0): interface is now down
[   87.619878][ T5694] bond0: (slave bond_slave_1): interface is now down
[   87.649501][ T5694] bond0: (slave bond_slave_0): interface is now down
[   87.651820][ T5694] bond0: (slave bond_slave_1): interface is now down
[   87.667371][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.670640][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.687828][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.690551][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.707447][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.710169][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.728150][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.730342][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.732535][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028c45400: rx timeout, send abort
[   87.757764][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.760291][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.797162][   T13] bond0: (slave bond_slave_0): interface is now down
[   87.800005][   T13] bond0: (slave bond_slave_1): interface is now down
[   87.819668][ T5694] bond0: (slave bond_slave_0): interface is now down
[   87.821811][ T5694] bond0: (slave bond_slave_1): interface is now down
[   87.837364][ T5694] bond0: (slave bond_slave_0): interface is now down
[   87.839476][ T5694] bond0: (slave bond_slave_1): interface is now down
[   87.857908][ T5694] bond0: (slave bond_slave_0): interface is now down
[   87.860065][ T5694] bond0: (slave bond_slave_1): interface is now down
[   87.863677][ T5694] bond0: now running without any active interface!
[   88.231046][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028c46800: rx timeout, send abort
[   88.234961][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028c45400: abort rx timeout. Force session deactivation
[   88.331958][ T7004] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[   88.350210][ T7002] batman_adv: batadv0: Adding interface: ipvlan3
[   88.352430][ T7002] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.361643][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.365273][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.369254][ T7002] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[   88.384143][ T7005] batman_adv: batadv0: Adding interface: ipvlan4
[   88.386818][ T7005] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.396559][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.400904][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.404155][ T7005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[   88.408419][ T7005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.412513][ T7005] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active
[   88.734862][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028c46800: abort rx timeout. Force session deactivation
[   88.907493][ T7032] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   89.139434][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881130a6c00: rx timeout, send abort
[   89.275370][ T7034] 0X: renamed from caif0
[   89.337469][ T7034] 0X: entered allmulticast mode
[   89.339712][ T7034] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   89.639518][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881130a6000: rx timeout, send abort
[   89.643175][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881130a6c00: abort rx timeout. Force session deactivation
[   89.745642][ T7045] netlink: 'syz.2.314': attribute type 4 has an invalid length.
[   89.857494][ T7066] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   89.861932][ T5877] bond0: (slave bond_slave_0): interface is now down
[   89.864585][ T5877] bond0: (slave bond_slave_1): interface is now down
[   89.895983][ T5877] bond0: now running without any active interface!
[   89.909254][ T7070] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004
[   89.955425][ T7079] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   89.996353][ T7079] __nla_validate_parse: 18 callbacks suppressed
[   89.996364][ T7079] netlink: 76 bytes leftover after parsing attributes in process `syz.1.321'.
[   89.996500][ T7068] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   90.005503][ T7068] bond1: left promiscuous mode
[   90.010495][ T7068] ipvlan2: left promiscuous mode
[   90.013546][ T7074] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.020041][ T7080] netlink: 76 bytes leftover after parsing attributes in process `syz.0.324'.
[   90.107621][ T7084] syzkaller1: entered allmulticast mode
[   90.134970][ T7094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'.
[   90.143188][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881130a6000: abort rx timeout. Force session deactivation
[   90.289966][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'.
[   90.319989][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.333422][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.435216][ T7084] vlan0: left promiscuous mode
[   90.472513][ T7096] geneve3: entered promiscuous mode
[   90.474799][ T7096] geneve3: entered allmulticast mode
[   90.510313][ T5877] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.515020][ T5877] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[   90.518927][ T5877] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.522296][ T5877] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[   90.557904][ T5877] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.561169][ T5877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[   90.564525][ T5877] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.570234][ T5877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[   90.591974][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[   90.631522][ T7114] netlink: 'syz.1.334': attribute type 13 has an invalid length.
[   90.635332][ T7114] netlink: 'syz.1.334': attribute type 17 has an invalid length.
[   90.643854][ T7114] gretap0: refused to change device tx_queue_len
[   90.646193][ T7114] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   90.681832][ T7119] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[   90.685178][ T7119] netlink: 224 bytes leftover after parsing attributes in process `syz.1.335'.
[   90.691347][ T7119] netlink: 48 bytes leftover after parsing attributes in process `syz.1.335'.
[   90.798790][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'.
[   90.804689][ T7137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.340'.
[   90.838053][ T7145] netlink: 'syz.2.342': attribute type 3 has an invalid length.
[   90.909480][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.346'.
[   90.990353][ T7162] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   90.996921][ T7162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.111017][ T7169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.129713][ T7168] tipc: Disabling bearer <eth:syzkaller0>
[   91.200324][ T7175] netlink: 'syz.1.353': attribute type 2 has an invalid length.
[   91.215598][ T7175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.014138][ T7238] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   92.182635][ T7247] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   92.186571][ T7248] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   92.316748][ T7247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.336107][ T7247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.340650][ T7247] bond0 (unregistering): Released all slaves
[   92.493941][ T7267] bond0: (slave bond_slave_0): Releasing backup interface
[   92.500714][ T7267] bond0: (slave bond_slave_1): Releasing backup interface
[   92.505383][ T7267] team0: Port device team_slave_0 removed
[   92.509265][ T7267] team0: Port device team_slave_1 removed
[   92.511659][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.515592][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.521896][ T7267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   92.547807][ T7271] raw_sendmsg: syz.1.380 forgot to set AF_INET. Fix it!
[   92.553096][ T7267] netlink: 'syz.2.379': attribute type 10 has an invalid length.
[   92.558991][ T7267] bond0: (slave wlan1): Opening slave failed
[   92.580120][ T7267] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.584300][ T7267] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.728327][ T7275] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   93.500953][ T7316] bridge_slave_0: invalid flags given to default FDB implementation
[   93.564942][ T7316] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.818299][ T7337] netlink: 'syz.1.399': attribute type 11 has an invalid length.
[   94.013994][ T7352] netlink: 'syz.2.404': attribute type 2 has an invalid length.
[   94.026273][ T7352] netlink: 'syz.2.404': attribute type 1 has an invalid length.
[   94.030422][ T7352] netlink: 'syz.2.404': attribute type 1 has an invalid length.
[   94.384954][ T7391] netlink: 'syz.2.418': attribute type 21 has an invalid length.
[   94.410690][ T7388] syzkaller0: entered promiscuous mode
[   94.413071][ T7388] syzkaller0: entered allmulticast mode
[   94.492405][ T7405] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   95.106631][ T7421] __nla_validate_parse: 79 callbacks suppressed
[   95.106644][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'.
[   95.756233][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'.
[   95.775629][ T7436] warn_alloc: 1 callbacks suppressed
[   95.775642][ T7436] syz.2.432: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   95.785467][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.2.432 Not tainted syzkaller #0 PREEMPT(full) 
[   95.785482][ T7436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.785489][ T7436] Call Trace:
[   95.785513][ T7436]  <TASK>
[   95.785520][ T7436]  dump_stack_lvl+0x189/0x250
[   95.785543][ T7436]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.785555][ T7436]  ? __pfx__printk+0x10/0x10
[   95.785575][ T7436]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.785588][ T7436]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.785600][ T7436]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   95.785616][ T7436]  warn_alloc+0x214/0x310
[   95.785637][ T7436]  ? __pfx_warn_alloc+0x10/0x10
[   95.785660][ T7436]  ? __get_vm_area_node+0x28f/0x300
[   95.785677][ T7436]  ? xskq_create+0xbf/0x170
[   95.785689][ T7436]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   95.785713][ T7436]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   95.785728][ T7436]  ? __kasan_kmalloc+0x93/0xb0
[   95.785740][ T7436]  vmalloc_user_noprof+0xad/0xf0
[   95.785751][ T7436]  ? xskq_create+0xbf/0x170
[   95.785759][ T7436]  xskq_create+0xbf/0x170
[   95.785769][ T7436]  xsk_init_queue+0xb0/0x110
[   95.785778][ T7436]  xsk_setsockopt+0x57b/0x8d0
[   95.785787][ T7436]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.785795][ T7436]  ? __pfx_aa_sk_perm+0x10/0x10
[   95.785808][ T7436]  ? __fget_files+0x2a/0x420
[   95.785815][ T7436]  ? aa_sock_opt_perm+0xff/0x1b0
[   95.785825][ T7436]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   95.785834][ T7436]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.785842][ T7436]  do_sock_setsockopt+0x17c/0x1b0
[   95.785855][ T7436]  __x64_sys_setsockopt+0x13f/0x1b0
[   95.785868][ T7436]  do_syscall_64+0xfa/0x3b0
[   95.785878][ T7436]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.785887][ T7436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.785895][ T7436]  ? exc_page_fault+0x9f/0xf0
[   95.785904][ T7436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.785911][ T7436] RIP: 0033:0x7f8ea438ec29
[   95.785921][ T7436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.785928][ T7436] RSP: 002b:00007f8ea526d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   95.785937][ T7436] RAX: ffffffffffffffda RBX: 00007f8ea45d5fa0 RCX: 00007f8ea438ec29
[   95.785942][ T7436] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[   95.785946][ T7436] RBP: 00007f8ea4411e41 R08: 0000000000000004 R09: 0000000000000000
[   95.785951][ T7436] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   95.785955][ T7436] R13: 00007f8ea45d6038 R14: 00007f8ea45d5fa0 R15: 00007fff10ba61c8
[   95.785968][ T7436]  </TASK>
[   95.786071][ T7436] Mem-Info:
[   95.801745][ T7437] pim6reg: entered allmulticast mode
[   95.811661][ T7436] active_anon:5672 inactive_anon:0 isolated_anon:0
[   95.811661][ T7436]  active_file:1492 inactive_file:38252 isolated_file:0
[   95.811661][ T7436]  unevictable:1768 dirty:206 writeback:0
[   95.811661][ T7436]  slab_reclaimable:9849 slab_unreclaimable:53890
[   95.811661][ T7436]  mapped:18218 shmem:2466 pagetables:933
[   95.811661][ T7436]  sec_pagetables:0 bounce:0
[   95.811661][ T7436]  kernel_misc_reclaimable:0
[   95.811661][ T7436]  free:294765 free_pcp:20534 free_cma:0
[   95.891236][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'.
[   95.895916][ T7436] Node 0 active_anon:12576kB inactive_anon:0kB active_file:3752kB inactive_file:146800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29488kB dirty:492kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8124kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.909519][ T7436] Node 1 active_anon:10220kB inactive_anon:0kB active_file:2216kB inactive_file:6208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43312kB dirty:332kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4360kB pagetables:1976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   95.910312][ T7449] netlink: 'syz.1.434': attribute type 1 has an invalid length.
[   95.928074][ T7436] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   95.939091][ T7436] lowmem_reserve[]: 0 811 811 811 811
[   95.940919][ T7436] Node 0 DMA32 free:257008kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12576kB inactive_anon:0kB active_file:3752kB inactive_file:146800kB unevictable:3536kB writepending:492kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:40780kB local_pcp:21960kB free_cma:0kB
[   95.952142][ T7436] lowmem_reserve[]: 0 0 0 0 0
[   95.954113][ T7436] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   95.965247][ T7436] lowmem_reserve[]: 0 0 854 854 854
[   95.967352][ T7436] Node 1 Normal free:448008kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10220kB inactive_anon:0kB active_file:2216kB inactive_file:6208kB unevictable:3536kB writepending:332kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40716kB local_pcp:22232kB free_cma:0kB
[   95.978718][ T7436] lowmem_reserve[]: 0 0 0 0 0
[   95.980374][ T7436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   95.984774][ T7436] Node 0 DMA32: 484*4kB (UM) 290*8kB (UME) 157*16kB (UME) 218*32kB (UME) 163*64kB (UM) 51*128kB (UME) 10*256kB (UM) 3*512kB (UME) 5*1024kB (UM) 2*2048kB (M) 52*4096kB (M) = 257008kB
[   95.991214][ T7436] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   95.996812][ T7436] Node 1 Normal: 220*4kB (UE) 845*8kB (UE) 485*16kB (UME) 11*32kB (UM) 62*64kB (UM) 12*128kB (U) 12*256kB (UM) 5*512kB (U) 3*1024kB (UE) 6*2048kB (UME) 99*4096kB (UM) = 447752kB
[   96.003308][ T7436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.006152][ T7436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   96.009429][ T7436] 42189 total pagecache pages
[   96.010998][ T7436] 0 pages in swap cache
[   96.012483][ T7436] Free swap  = 124996kB
[   96.014187][ T7436] Total swap = 124996kB
[   96.015801][ T7436] 786301 pages RAM
[   96.017370][ T7436] 0 pages HighMem/MovableOnly
[   96.019011][ T7436] 241367 pages reserved
[   96.020389][ T7436] 0 pages cma reserved
[   96.587757][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'.
[   96.710199][ T7495] netlink: 88 bytes leftover after parsing attributes in process `syz.1.450'.
[   96.758187][ T7497] netlink: 360 bytes leftover after parsing attributes in process `syz.1.451'.
[   96.806009][ T7499] netlink: 'syz.1.452': attribute type 13 has an invalid length.
[   96.924553][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.927501][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.059736][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.073754][ T7499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.162232][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'.
[   97.166370][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.454'.
[   97.287394][ T5694] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.292942][ T5694] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.296634][ T5694] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.307080][ T5694] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.309861][ T5694] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.323608][ T5694] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.326598][ T5694] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.330076][ T5694] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.356835][ T7507] gtp0: entered promiscuous mode
[   97.376333][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'.
[   97.504234][ T7518] netlink: 'syz.0.460': attribute type 9 has an invalid length.
[   97.510318][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.460'.
[   97.766881][ T7540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.770681][ T7540] syzkaller0: entered promiscuous mode
[   97.772923][ T7540] syzkaller0: entered allmulticast mode
[   97.792897][ T7540] tipc: Resetting bearer <eth:syzkaller0>
[   97.800265][ T7539] tipc: Resetting bearer <eth:syzkaller0>
[   97.815343][ T7539] tipc: Disabling bearer <eth:syzkaller0>
[   97.945893][ T7548] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   97.980975][ T7548] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   98.083113][ T7548] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   98.140815][ T7554] netlink: 'syz.0.472': attribute type 12 has an invalid length.
[   98.153681][ T7548] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[   99.813143][ T5694] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   99.828756][ T5694] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   99.840173][ T7038] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   99.855929][ T5694] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  100.138962][ T7570] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  100.222788][ T7577] __nla_validate_parse: 8 callbacks suppressed
[  100.222800][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'.
[  100.261916][ T5898] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3
[  100.265189][ T5898] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22
[  100.867771][ T7584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.870812][ T7584] syzkaller0: entered promiscuous mode
[  100.872698][ T7584] syzkaller0: entered allmulticast mode
[  100.919826][ T7584] tipc: Resetting bearer <eth:syzkaller0>
[  100.923671][ T7583] tipc: Resetting bearer <eth:syzkaller0>
[  100.933300][ T7583] tipc: Disabling bearer <eth:syzkaller0>
[  101.133932][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'.
[  101.143456][ T7038] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.146142][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'.
[  101.150126][ T7038] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.152618][ T7038] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.155141][ T7038] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.157361][ T7594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'.
[  101.160771][ T7594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.485'.
[  101.196198][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[  101.316802][ T7611] netlink: 'syz.0.492': attribute type 1 has an invalid length.
[  101.320915][ T7611] netlink: 'syz.0.492': attribute type 2 has an invalid length.
[  101.323665][ T7612] netlink: 'syz.0.492': attribute type 1 has an invalid length.
[  101.326270][ T7612] netlink: 'syz.0.492': attribute type 2 has an invalid length.
[  101.410512][ T7619] netlink: 'syz.1.495': attribute type 33 has an invalid length.
[  101.413405][ T7619] netlink: 152 bytes leftover after parsing attributes in process `syz.1.495'.
[  101.423892][ T7621] netlink: 'syz.1.495': attribute type 21 has an invalid length.
[  101.426357][ T7621] netlink: 128 bytes leftover after parsing attributes in process `syz.1.495'.
[  101.430270][ T7621] netlink: 'syz.1.495': attribute type 4 has an invalid length.
[  101.433037][ T7621] netlink: 'syz.1.495': attribute type 5 has an invalid length.
[  101.435717][ T7621] netlink: 3 bytes leftover after parsing attributes in process `syz.1.495'.
[  101.502656][ T7624] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.496'.
[  101.640842][ T7635] Driver unsupported XDP return value 0 on prog  (id 119) dev N/A, expect packet loss!
[  101.656586][ T7635] netlink: 'syz.1.500': attribute type 13 has an invalid length.
[  101.664759][ T7635] netlink: 'syz.1.500': attribute type 17 has an invalid length.
[  101.711345][ T7635] 8021q: adding VLAN 0 to HW filter on device team0
[  101.720753][ T7635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.860401][ T7655] 0X: left allmulticast mode
[  101.869985][ T7655] batadv1: left allmulticast mode
[  101.872212][ T7655] macvlan2: left promiscuous mode
[  101.874561][ T7655] macvlan3: left promiscuous mode
[  101.878492][ T7655] geneve2: left promiscuous mode
[  101.880505][ T7655] geneve2: left allmulticast mode
[  101.884830][ T7655] geneve3: left promiscuous mode
[  101.886863][ T7655] geneve3: left allmulticast mode
[  102.053359][ T7038] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  102.061747][ T7665] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  102.066222][ T7038] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  102.071839][ T7038] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  102.074924][ T7038] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  102.296046][ T7680] unsupported nla_type 58
[  102.405463][ T7635] syz.1.500 (7635) used greatest stack depth: 19488 bytes left
[  102.448003][   T12] bond0: (slave wlan1): interface is now down
[  102.449565][ T7691] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.469737][   T12] bond0: (slave wlan1): interface is now down
[  102.474965][ T7691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.487983][ T7038] bond0: (slave wlan1): interface is now down
[  102.492453][ T7038] bond0: now running without any active interface!
[  103.545783][ T7749] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  103.662572][ T7756] xt_socket: unknown flags 0xfc
[  103.667231][ T7756] IPVS: length: 139 != 8
[  105.184921][ T7825] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  105.243453][ T7829] __nla_validate_parse: 19 callbacks suppressed
[  105.243465][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[  105.251147][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[  105.310748][ T7831] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  105.360793][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'.
[  105.363901][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'.
[  105.490920][ T7843] syzkaller0: entered promiscuous mode
[  105.493226][ T7843] syzkaller0: entered allmulticast mode
[  105.933419][ T7871] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.577'.
[  106.486739][ T7907] validate_nla: 15 callbacks suppressed
[  106.486772][ T7907] netlink: 'syz.1.585': attribute type 1 has an invalid length.
[  106.808414][ T7907] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  107.054008][ T7921] veth1_to_bond: entered allmulticast mode
[  107.112191][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'.
[  107.141963][ T7922] veth1_to_bond (unregistering): left allmulticast mode
[  107.153189][ T7924] netlink: 'syz.2.589': attribute type 1 has an invalid length.
[  107.156088][ T7924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.589'.
[  107.201858][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.590'.
[  107.300664][ T7934] netlink: 'syz.2.592': attribute type 83 has an invalid length.
[  107.305089][ T7934] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.592'.
[  107.375207][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.594'.
[  108.449330][ T7977] netlink: 'syz.1.608': attribute type 83 has an invalid length.
[  108.848751][ T7996] dvmrp8: entered allmulticast mode
[  108.915957][ T7996] netlink: 'syz.2.615': attribute type 23 has an invalid length.
[  108.978679][ T7995] dvmrp8: left allmulticast mode
[  109.752184][ T8019] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  110.199747][ T8024] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  110.202831][ T8024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.424779][ T8031] __nla_validate_parse: 9 callbacks suppressed
[  110.424795][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'.
[  110.459011][ T8031] netlink: 'syz.1.625': attribute type 1 has an invalid length.
[  110.620958][ T8041] netlink: 'syz.2.630': attribute type 10 has an invalid length.
[  110.623868][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[  110.705882][ T8043] netlink: 'syz.2.631': attribute type 56 has an invalid length.
[  110.711373][ T8043] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[  110.820331][ T8048] netlink: 'syz.2.632': attribute type 5 has an invalid length.
[  110.878734][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  110.882639][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.633'.
[  110.896276][ T8050] geneve4: entered promiscuous mode
[  110.900071][ T8050] geneve4: entered allmulticast mode
[  110.906078][ T7038] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.911246][ T7038] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.914665][ T7038] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.925224][ T7038] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.126196][ T8054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.635'.
[  111.129997][ T8054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.635'.
[  111.478743][ T8072] 8021q: adding VLAN 0 to HW filter on device bond4
[  111.504157][ T8071] bond4: (slave gretap1): making interface the new active one
[  111.509892][ T8071] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  111.598516][ T8078] validate_nla: 4 callbacks suppressed
[  111.598529][ T8078] netlink: 'syz.0.644': attribute type 10 has an invalid length.
[  111.602788][ T8078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.644'.
[  111.605688][ T8078] dummy0: entered promiscuous mode
[  111.608758][ T8078] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  111.800485][ T8088] netlink: 'syz.2.646': attribute type 8 has an invalid length.
[  112.627672][ T8123] ipvlan3: entered promiscuous mode
[  112.629683][ T8123] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  112.682408][ T8126] netlink: 44 bytes leftover after parsing attributes in process `syz.0.654'.
[  112.686065][ T8126] netlink: 43 bytes leftover after parsing attributes in process `syz.0.654'.
[  112.689845][ T8126] netlink: 'syz.0.654': attribute type 5 has an invalid length.
[  112.693111][ T8126] netlink: 43 bytes leftover after parsing attributes in process `syz.0.654'.
[  113.572846][ T8149] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.632624][ T8149] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.675617][ T8149] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.720718][ T8149] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.801062][ T5694] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.813954][ T5694] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.828713][ T5694] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.847087][ T5694] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.881782][ T8154] netlink: 'syz.1.663': attribute type 3 has an invalid length.
[  113.884901][ T8154] netlink: 'syz.1.663': attribute type 2 has an invalid length.
[  113.888279][ T8154] netlink: 'syz.1.663': attribute type 2 has an invalid length.
[  114.003923][ T8164] netlink: 'syz.1.667': attribute type 19 has an invalid length.
[  114.007527][ T8164] netlink: 'syz.1.667': attribute type 19 has an invalid length.
[  114.203049][ T8178] netlink: 'syz.1.672': attribute type 1 has an invalid length.
[  114.253738][ T8178] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  114.313577][ T8178] 8021q: adding VLAN 0 to HW filter on device bond5
[  114.317853][ T5694] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  114.419539][ T8178] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  114.424101][ T8178] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface
[  114.429692][ T8178] bond5 (unregistering): Released all slaves
[  114.766395][ T8200] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[  114.810761][ T8201] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.122758][ T8226] syzkaller0: entered promiscuous mode
[  115.124895][ T8226] syzkaller0: entered allmulticast mode
[  116.596603][ T8237] __nla_validate_parse: 20 callbacks suppressed
[  116.596619][ T8237] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.690'.
[  116.746901][ T8256] validate_nla: 3 callbacks suppressed
[  116.746912][ T8256] netlink: 'syz.1.696': attribute type 10 has an invalid length.
[  116.748890][ T8258] : renamed from bond_slave_0
[  116.754213][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.696'.
[  116.824887][ T8268] netlink: 'syz.1.698': attribute type 1 has an invalid length.
[  116.834129][ T8270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.698'.
[  116.840463][ T8271] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  116.841485][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.698'.
[  116.854789][ T8271] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  116.858320][ T8271] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  116.907437][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'.
[  116.993624][ T8285] netlink: 224 bytes leftover after parsing attributes in process `syz.1.703'.
[  116.996837][ T8285] netlink: 888 bytes leftover after parsing attributes in process `syz.1.703'.
[  117.029442][ T8287] vxcan2: entered allmulticast mode
[  117.295528][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'.
[  117.305131][ T8304] batadv_slave_1: entered promiscuous mode
[  117.330280][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'.
[  117.344426][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'.
[  117.350275][ T8303] batadv_slave_1: left promiscuous mode
[  117.422153][ T8308] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[  117.424725][ T8308] netlink: 'syz.0.709': attribute type 2 has an invalid length.
[  117.876408][ T8323] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  117.894759][ T8332] vxcan2: entered promiscuous mode
[  118.196212][ T8345] netlink: 'syz.2.720': attribute type 1 has an invalid length.
[  118.265937][ T8351] tun0: tun_chr_ioctl cmd 2147767521
[  118.269939][ T8348] tun0: tun_chr_ioctl cmd 2147767521
[  119.370090][ T8402] netlink: 'syz.2.737': attribute type 1 has an invalid length.
[  132.779452][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  161.826901][ T8422] __nla_validate_parse: 10 callbacks suppressed
[  161.826912][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'.
[  161.895853][ T8432] sock: sock_set_timeout: `syz.1.744' (pid 8432) tries to set negative timeout
[  161.901195][ T8433] sock: sock_set_timeout: `syz.1.744' (pid 8433) tries to set negative timeout
[  161.905207][ T8432] veth0: entered promiscuous mode
[  161.908558][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[  161.950309][ T8432] veth0 (unregistering): left promiscuous mode
[  161.988043][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'.
[  162.060787][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'.
[  162.064388][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'.
[  162.205562][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  162.209686][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  162.230980][ T8458] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  162.264794][ T8468] netlink: 'syz.1.752': attribute type 10 has an invalid length.
[  162.357301][ T8475] sctp: [Deprecated]: syz.1.754 (pid 8475) Use of int in max_burst socket option.
[  162.357301][ T8475] Use struct sctp_assoc_value instead
[  162.438442][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'.
[  162.442965][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.756'.
[  162.541542][ T8490] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  163.079878][ T8510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.766'.
[  163.149200][ T8511] veth1_macvtap: left promiscuous mode
[  163.520805][ T8534] bridge_slave_0: left promiscuous mode
[  163.526001][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.536426][ T8534] bridge_slave_1: left allmulticast mode
[  163.538871][ T8534] bridge_slave_1: left promiscuous mode
[  163.541233][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.553584][ T8534] team0: Port device team_slave_0 removed
[  163.568947][ T8534] team0: Port device team_slave_1 removed
[  163.571823][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.576383][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.581377][ T8534] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  163.637660][ T8544] geneve4: left promiscuous mode
[  163.688478][ T5694] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.691967][ T5694] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.695300][ T5694] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.717614][ T5694] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.774821][ T8553] netlink: 'syz.0.780': attribute type 1 has an invalid length.
[  163.814601][ T8553] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.841629][ T8553] veth5: entered promiscuous mode
[  163.956098][ T8563] netlink: 'syz.1.783': attribute type 4 has an invalid length.
[  163.960499][ T8565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.007528][ T8563] netlink: 'syz.1.783': attribute type 4 has an invalid length.
[  164.099638][ T8572] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  164.253234][ T8582] netlink: 'syz.0.788': attribute type 10 has an invalid length.
[  164.271375][ T8582] batman_adv: batadv0: Adding interface: netdevsim0
[  164.274286][ T8582] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.286905][ T8582] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  164.416169][ T8592] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[  164.452472][ T8592] 8021q: adding VLAN 0 to HW filter on device bond6
[  164.458822][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  164.468765][ T8592] veth9: entered promiscuous mode
[  164.473130][ T8592] bond6: (slave veth9): Enslaving as a backup interface with a down link
[  164.685183][ T8611] netlink: 'syz.2.803': attribute type 20 has an invalid length.
[  164.689154][ T8611] netlink: 'syz.2.803': attribute type 21 has an invalid length.
[  164.703247][ T8611] netlink: 'syz.2.803': attribute type 4 has an invalid length.
[  164.814500][ T8621] vxcan1: entered allmulticast mode
[  164.872762][ T8620] vxcan1: entered allmulticast mode
[  165.362481][ T8651] netlink: 'syz.0.814': attribute type 1 has an invalid length.
[  165.765030][ T8676] !: renamed from dummy0
[  165.836549][ T8679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.841168][ T8679] syzkaller0: entered promiscuous mode
[  165.843488][ T8679] syzkaller0: entered allmulticast mode
[  165.854471][ T8679] tipc: Resetting bearer <eth:syzkaller0>
[  165.880982][ T8685] tipc: Resetting bearer <eth:syzkaller0>
[  165.896072][ T8685] tipc: Disabling bearer <eth:syzkaller0>
[  166.000796][ T8693] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1, syncid = 4, id = 0
[  166.198443][ T8703] !: entered promiscuous mode
[  166.209843][ T8703] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  166.265552][ T8705] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  166.330498][ T8707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.333647][ T8707] syzkaller0: entered promiscuous mode
[  166.335853][ T8707] syzkaller0: entered allmulticast mode
[  166.350129][ T8707] tipc: Resetting bearer <eth:syzkaller0>
[  166.375373][ T8707] tipc: Resetting bearer <eth:syzkaller0>
[  166.390800][ T8707] tipc: Disabling bearer <eth:syzkaller0>
[  166.563662][ T8729] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  166.788995][ T8740] vxcan3: entered allmulticast mode
[  166.830688][ T8742] __nla_validate_parse: 34 callbacks suppressed
[  166.830705][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'.
[  167.024196][ T8756] syzkaller1: entered promiscuous mode
[  167.026571][ T8756] syzkaller1: entered allmulticast mode
[  167.313378][ T8767] lo speed is unknown, defaulting to 1000
[  167.316155][ T8767] lo speed is unknown, defaulting to 1000
[  167.335076][ T8767] lo speed is unknown, defaulting to 1000
[  167.345333][ T8767] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  167.358719][ T8768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.849'.
[  167.362922][ T8767] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  167.422055][ T8767] lo speed is unknown, defaulting to 1000
[  167.426014][ T8767] lo speed is unknown, defaulting to 1000
[  167.432488][ T8767] lo speed is unknown, defaulting to 1000
[  167.436399][ T8767] lo speed is unknown, defaulting to 1000
[  167.592407][ T8772] can: request_module (can-proto-0) failed.
[  167.621414][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'.
[  167.626705][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'.
[  167.798505][ T8793] validate_nla: 3 callbacks suppressed
[  167.798520][ T8793] netlink: 'syz.0.857': attribute type 1 has an invalid length.
[  167.805323][ T8793] netlink: 232 bytes leftover after parsing attributes in process `syz.0.857'.
[  167.939809][ T8805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.961937][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.1.860'.
[  168.874698][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[  168.922395][ T8847] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  169.091178][ T8858] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  169.145650][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.876'.
[  169.149081][ T8860] netlink: 'syz.2.876': attribute type 7 has an invalid length.
[  169.151866][ T8860] netlink: 'syz.2.876': attribute type 8 has an invalid length.
[  169.154839][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'.
[  169.192874][ T8865] netlink: 72 bytes leftover after parsing attributes in process `syz.1.878'.
[  169.396560][ T8876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.650416][ T8892] netlink: 'syz.1.887': attribute type 12 has an invalid length.
[  169.796606][ T8900] netlink: 'syz.1.890': attribute type 15 has an invalid length.
[  169.812091][ T5877] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0
[  169.812378][ T8900] netlink: 'syz.1.890': attribute type 15 has an invalid length.
[  169.815651][ T5877] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0
[  169.827273][ T5877] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0
[  169.833699][ T5877] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0
[  170.009796][ T8908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.319050][ T8936] ip6erspan0: entered promiscuous mode
[  171.516776][ T8994] IPVS: Error connecting to the multicast addr
[  171.599508][ T8999] netlink: 'syz.1.922': attribute type 2 has an invalid length.
[  171.613871][ T8999] netlink: 'syz.1.922': attribute type 2 has an invalid length.
[  171.627817][ T8999] netlink: 'syz.1.922': attribute type 2 has an invalid length.
[  171.631256][ T8999] netlink: 'syz.1.922': attribute type 2 has an invalid length.
[  171.792332][ T9013] lo speed is unknown, defaulting to 1000
[  172.720103][ T9024] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  172.768366][ T9027] openvswitch: netlink: VXLAN extension 32 out of range max 1
[  172.772390][ T9027] openvswitch: netlink: VXLAN extension 32 out of range max 1
[  172.775888][ T9026] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  172.851835][ T9035] 8021q: adding VLAN 0 to HW filter on device bond7
[  172.914449][ T9039] validate_nla: 61 callbacks suppressed
[  172.914506][ T9039] netlink: 'syz.2.933': attribute type 1 has an invalid length.
[  172.922129][ T9039] netlink: 'syz.2.933': attribute type 4 has an invalid length.
[  172.925188][ T9039] __nla_validate_parse: 49 callbacks suppressed
[  172.925200][ T9039] netlink: 15586 bytes leftover after parsing attributes in process `syz.2.933'.
[  173.004531][ T9043] netlink: 48 bytes leftover after parsing attributes in process `syz.2.935'.
[  173.041100][ T9045] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  173.235973][   T47] IPVS: starting estimator thread 0...
[  173.327502][ T9056] IPVS: using max 41 ests per chain, 98400 per kthread
[  173.367833][ T9060] lo speed is unknown, defaulting to 1000
[  173.994029][ T9083] netlink: 'syz.1.951': attribute type 4 has an invalid length.
[  174.030097][ T9089] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  174.079488][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'.
[  174.087994][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'.
[  174.293771][ T9105] netlink: 'syz.2.960': attribute type 12 has an invalid length.
[  174.296721][ T9105] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.960'.
[  174.364771][ T9114] netlink: 'syz.2.960': attribute type 10 has an invalid length.
[  174.378252][ T9114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.960'.
[  174.385490][ T9114] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  174.402303][ T9126] netlink: 'syz.0.964': attribute type 10 has an invalid length.
[  174.435929][ T9126] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  174.468767][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'.
[  174.469357][ T9127] bridge4: entered promiscuous mode
[  174.474398][ T9127] bridge4: entered allmulticast mode
[  174.491416][ T9133] lo speed is unknown, defaulting to 1000
[  174.529019][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'.
[  174.551133][ T9138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'.
[  174.659516][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'.
[  174.702889][ T9145] netlink: 'syz.2.970': attribute type 46 has an invalid length.
[  175.429167][ T9208] netlink: 'syz.2.988': attribute type 1 has an invalid length.
[  175.463582][ T9208] bond8: (slave veth11): Enslaving as an active interface with a down link
[  175.472472][ T9208] 8021q: adding VLAN 0 to HW filter on device bond8
[  175.579060][ T5877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.581933][ T5877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.607355][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.882914][ T9236] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  175.944104][ T5877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.947946][ T5877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.951755][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.955233][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.187405][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.457330][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.742419][ T9244] netlink: 'syz.0.996': attribute type 10 has an invalid length.
[  176.746132][ T9244] dummy0: left promiscuous mode
[  176.763318][ T9244] team0: Port device dummy0 added
[  176.769566][ T9244] netlink: 'syz.0.996': attribute type 10 has an invalid length.
[  176.798323][ T9244] team0: Port device dummy0 removed
[  176.802782][ T9244] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  176.817855][ T5694] bond0: (slave dummy0): interface is now down
[  176.820553][ T5694] bond0: now running without any active interface!
[  176.900143][ T9253] ieee802154 phy0 wpan0: encryption failed: -22
[  177.145397][ T9262] lo speed is unknown, defaulting to 1000
[  177.649433][ T9274] ip_vti0: entered promiscuous mode
[  177.654764][ T9274] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  177.743622][ T9278] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  178.085917][ T9290] validate_nla: 1 callbacks suppressed
[  178.085933][ T9290] netlink: 'syz.2.1012': attribute type 13 has an invalid length.
[  178.192037][ T5694] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.205419][ T5694] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.212432][ T5694] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.215735][ T5694] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.456730][ T9314] netlink: 'syz.1.1020': attribute type 39 has an invalid length.
[  178.489393][ T9316] __nla_validate_parse: 23 callbacks suppressed
[  178.489408][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'.
[  178.613151][ T9326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1023'.
[  178.616547][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'.
[  178.650830][ T9328] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1024'.
[  178.702956][ T9331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1025'.
[  178.822400][ T9338] netlink: 'syz.0.1027': attribute type 30 has an invalid length.
[  178.826412][ T9338] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  178.833184][ T9338] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  178.996481][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'.
[  179.006620][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'.
[  179.115305][ T9355] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  179.226722][ T9364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.231160][ T9364] syzkaller0: entered promiscuous mode
[  179.233336][ T9364] syzkaller0: entered allmulticast mode
[  179.242524][ T9363] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  179.249996][ T9363] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1035'.
[  179.511529][ T9363] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  179.516788][ T9363] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  179.523950][ T9363] bond0 (unregistering): Released all slaves
[  179.546786][ T9366] tipc: Resetting bearer <eth:syzkaller0>
[  179.551939][ T9362] tipc: Resetting bearer <eth:syzkaller0>
[  179.563919][ T9362] tipc: Disabling bearer <eth:syzkaller0>
[  179.720287][ T9381] veth1: entered promiscuous mode
[  179.747270][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.786883][ T9389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.790502][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  179.803089][ T7038] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.808368][ T7038] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.818490][ T5849] Bluetooth: hci1: command 0x0401 tx timeout
[  179.824733][ T7038] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.828410][ T7038] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.880930][ T9402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1046'.
[  180.067542][ T9414] netlink: 'syz.0.1050': attribute type 4 has an invalid length.
[  180.093699][ T9414] netlink: 'syz.0.1050': attribute type 4 has an invalid length.
[  180.104113][   T47] lo speed is unknown, defaulting to 1000
[  180.108228][   T47] syz1: Port: 1 Link ACTIVE
[  180.481833][ T9423] netlink: 'syz.2.1053': attribute type 1 has an invalid length.
[  180.485217][ T9423] netlink: 'syz.2.1053': attribute type 2 has an invalid length.
[  180.493118][ T9423] netlink: 'syz.2.1053': attribute type 8 has an invalid length.
[  180.555733][ T9427] ip6gre1: entered allmulticast mode
[  180.716472][ T9443] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  181.089694][ T9425] geneve2: entered promiscuous mode
[  181.093332][ T7038] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  181.107398][ T7038] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  181.112473][ T7038] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  181.116657][ T7038] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  181.135060][ T9474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  181.209435][ T9479] netlink: 'syz.2.1068': attribute type 13 has an invalid length.
[  181.211884][ T9479] netlink: 'syz.2.1068': attribute type 17 has an invalid length.
[  181.244992][ T9479] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.251452][ T9479] 8021q: adding VLAN 0 to HW filter on device team0
[  181.255470][ T9479] !: left promiscuous mode
[  181.271347][ T9479] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  181.312831][ T9474] lo speed is unknown, defaulting to 1000
[  181.724882][ T9502] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  181.804280][ T9500] geneve6: entered promiscuous mode
[  181.852200][ T9508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.304061][ T9527] lo speed is unknown, defaulting to 1000
[  182.396625][ T9545] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  182.941361][    C0] vcan0: j1939_tp_rxtimer: 0xffff888025cf0c00: rx timeout, send abort
[  182.944304][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880249d6800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  183.443904][    C0] vcan0: j1939_tp_rxtimer: 0xffff888025cf0c00: abort rx timeout. Force session deactivation
[  183.813289][ T9611] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  183.923754][ T9621] validate_nla: 5 callbacks suppressed
[  183.923769][ T9621] netlink: 'syz.2.1105': attribute type 13 has an invalid length.
[  183.939278][ T9621] netlink: 'syz.2.1105': attribute type 17 has an invalid length.
[  183.952527][ T9621] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  183.990913][ T9613] lo speed is unknown, defaulting to 1000
[  184.019519][ T9624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.023164][ T9627] netlink: 'syz.0.1110': attribute type 4 has an invalid length.
[  184.041198][ T9624] syzkaller0: entered promiscuous mode
[  184.043337][ T9627] netlink: 'syz.0.1110': attribute type 4 has an invalid length.
[  184.043350][ T9624] syzkaller0: entered allmulticast mode
[  184.051844][    T9] lo speed is unknown, defaulting to 1000
[  184.057284][    T9] syz1: Port: 1 Link DOWN
[  184.072532][    T9] lo speed is unknown, defaulting to 1000
[  184.074341][    T9] syz1: Port: 1 Link ACTIVE
[  184.146068][ T9622] tipc: Resetting bearer <eth:syzkaller0>
[  184.170305][ T9622] tipc: Disabling bearer <eth:syzkaller0>
[  184.227576][ T9638] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  184.486612][ T9653] __nla_validate_parse: 20 callbacks suppressed
[  184.486624][ T9653] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1115'.
[  184.540414][ T9658] Unsupported ieee802154 address type: 0
[  184.580580][ T9665] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1119'.
[  184.616141][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  184.620335][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'.
[  184.641452][ T9666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  184.648229][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'.
[  184.700205][ T9674] bond0: (slave rose0): Error: Device can not be enslaved while up
[  184.752131][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'.
[  184.756402][ T9681] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  184.824601][ T9685] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  184.866283][ T9685] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  184.871191][ T9685] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  184.876651][ T9685] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  184.881491][ T9685] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  184.884689][ T9685] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  184.916761][ T9690] bond9: (slave gretap2): making interface the new active one
[  184.921754][ T9690] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  185.273359][ T9707] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1132'.
[  185.345497][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1134'.
[  185.507159][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'.
[  186.159422][ T9748] ipvlan2: entered promiscuous mode
[  186.162388][ T9748] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  186.231552][ T9755] IPVS: sed: FWM 3 0x00000003 - no destination available
[  186.234202][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  186.346582][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.362114][ T9757] bond0: (slave wlan0): Opening slave failed
[  186.373094][ T9757] vlan0: entered allmulticast mode
[  186.376252][ T9757] veth1: entered allmulticast mode
[  186.381871][ T9757] bond0: (slave vlan0): making interface the new active one
[  186.385430][ T9757] bond0: (slave vlan0): Enslaving as an active interface with an up link
[  186.479809][ T9773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'.
[  186.622786][ T9783] syzkaller1: entered promiscuous mode
[  186.625029][ T9783] syzkaller1: entered allmulticast mode
[  186.659943][ T9785] netlink: zone id is out of range
[  186.662125][ T9785] netlink: zone id is out of range
[  186.664114][ T9785] netlink: zone id is out of range
[  186.666315][ T9785] netlink: zone id is out of range
[  186.670629][ T9785] netlink: zone id is out of range
[  186.672424][ T9785] netlink: zone id is out of range
[  186.677091][ T9785] netlink: zone id is out of range
[  186.679162][ T9785] netlink: zone id is out of range
[  186.728015][ T9787] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5)
[  186.839876][ T9797] tun0: tun_chr_ioctl cmd 2148045848
[  186.842623][ T9797] tun0: tun_chr_ioctl cmd 21731
[  187.053077][ T9815] geneve4: left allmulticast mode
[  187.056074][ T9815] veth9: left promiscuous mode
[  187.059513][ T9815] ip6erspan0: left promiscuous mode
[  187.081978][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.088517][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.091933][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.105362][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.117777][ T9817] lo speed is unknown, defaulting to 1000
[  187.635469][ T9833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.210238][ T9849] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.229724][ T9849] bond4: (slave ip6erspan0): making interface the new active one
[  188.235280][ T9849] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  188.457124][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  188.555462][ T9885] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  189.005982][ T9911] geneve6: entered promiscuous mode
[  189.011548][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  189.015133][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  189.020952][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  189.024766][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  189.670189][ T9927] __nla_validate_parse: 48 callbacks suppressed
[  189.670205][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'.
[  189.684614][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'.
[  190.007381][ T9952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'.
[  190.136601][ T9958] validate_nla: 67 callbacks suppressed
[  190.136621][ T9958] netlink: 'syz.2.1209': attribute type 4 has an invalid length.
[  190.203349][ T9961] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  190.284905][ T9961] bond5: entered promiscuous mode
[  190.288004][ T9961] bond5: entered allmulticast mode
[  190.290814][ T9961] 8021q: adding VLAN 0 to HW filter on device bond5
[  190.294946][ T9966] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  190.354481][ T9968] netlink: 'syz.1.1215': attribute type 10 has an invalid length.
[  190.359863][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1215'.
[  190.494287][ T9977] netlink: 'syz.1.1218': attribute type 22 has an invalid length.
[  190.499921][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  190.504724][ T9977] netlink: 'syz.1.1218': attribute type 22 has an invalid length.
[  190.519810][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  190.577471][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'.
[  190.581284][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'.
[  190.621090][ T9985] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  190.923512][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'.
[  190.924667][T10003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1230'.
[  191.153934][T10013] netlink: 'syz.0.1233': attribute type 1 has an invalid length.
[  191.182280][ T5849] Bluetooth: hci1: command 0x0401 tx timeout
[  191.246855][ T5898] IPVS: starting estimator thread 0...
[  191.313035][T10022] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  191.339309][T10025] IPVS: using max 59 ests per chain, 141600 per kthread
[  191.346659][T10024] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  191.357613][T10024] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  191.470801][T10036] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  191.562516][T10040] tipc: Enabled bearer <udp:syz2>, priority 10
[  191.623250][T10047] syzkaller0: entered promiscuous mode
[  191.627875][T10047] syzkaller0: entered allmulticast mode
[  191.636716][T10049] net_ratelimit: 14 callbacks suppressed
[  191.636733][T10049] syzkaller0: mtu greater than device maximum
[  191.861818][T10065] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  192.304704][T10105] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  192.506312][T10120] delete_channel: no stack
[  192.681883][ T5897] tipc: Node number set to 117440512
[  192.788668][T10136] ip_vti0: left promiscuous mode
[  193.113761][T10136] veth5: left promiscuous mode
[  193.121421][T10136] bridge4: left promiscuous mode
[  193.124320][T10136] bridge4: left allmulticast mode
[  193.148205][T10136] geneve2: left promiscuous mode
[  193.165775][T10136] vlan0: left allmulticast mode
[  193.169725][T10136] veth1: left allmulticast mode
[  193.188985][ T5897] lo speed is unknown, defaulting to 1000
[  193.189426][T10139] netlink: 'syz.2.1272': attribute type 1 has an invalid length.
[  193.191359][ T5897] syz1: Port: 1 Link DOWN
[  193.197751][T10139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.207727][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.210912][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.223950][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.228457][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.231875][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.234767][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.241546][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.244343][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  193.267978][T10144] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20004
[  193.418815][T10153] bridge_slave_0: invalid flags given to default FDB implementation
[  193.476315][T10160] syzkaller0: entered promiscuous mode
[  193.479808][T10160] syzkaller0: entered allmulticast mode
[  193.489940][T10165] netlink: 'syz.2.1279': attribute type 30 has an invalid length.
[  193.682111][T10179] vlan2: entered promiscuous mode
[  193.684458][T10179] bond0: entered promiscuous mode
[  193.686853][T10179] vlan2: entered allmulticast mode
[  193.694014][T10179] bond0: entered allmulticast mode
[  193.854725][T10190] netlink: 'syz.1.1283': attribute type 6 has an invalid length.
[  193.863470][T10190] netlink: 'syz.1.1283': attribute type 6 has an invalid length.
[  193.951711][T10193] lo speed is unknown, defaulting to 1000
[  194.121966][T10205] syzkaller1: entered promiscuous mode
[  194.124759][T10204] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  194.126318][T10205] syzkaller1: entered allmulticast mode
[  194.222186][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.499268][T10219] lo speed is unknown, defaulting to 1000
[  194.531470][T10218] syzkaller1: entered promiscuous mode
[  194.534226][T10218] syzkaller1: entered allmulticast mode
[  194.893059][T10234] __nla_validate_parse: 132 callbacks suppressed
[  194.893079][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'.
[  194.904595][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'.
[  194.917893][T10234] netlink: 'syz.0.1296': attribute type 13 has an invalid length.
[  195.014690][T10242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1298'.
[  195.021854][T10242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1298'.
[  195.025439][T10242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.150229][T10251] validate_nla: 1 callbacks suppressed
[  195.150245][T10251] netlink: 'syz.1.1301': attribute type 1 has an invalid length.
[  195.189843][T10254] netlink: 'syz.2.1300': attribute type 5 has an invalid length.
[  195.192221][T10251] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  195.199833][T10251] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  195.294457][T10251] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1301'.
[  195.316603][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'.
[  195.320861][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'.
[  195.417913][T10268] netlink: 'syz.2.1303': attribute type 13 has an invalid length.
[  195.454654][T10272] syzkaller0: entered promiscuous mode
[  195.457170][T10272] syzkaller0: entered allmulticast mode
[  195.646868][T10281] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004
[  195.687952][T10284] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1311'.
[  195.690958][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  195.695322][T10285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1311'.
[  195.837821][T10292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.841461][T10292] syzkaller0: entered promiscuous mode
[  195.850530][T10292] syzkaller0: entered allmulticast mode
[  195.872826][T10292] tipc: Resetting bearer <eth:syzkaller0>
[  195.879421][T10292] team0: No ports can be present during mode change
[  195.889820][T10291] tipc: Resetting bearer <eth:syzkaller0>
[  195.914509][T10291] tipc: Disabling bearer <eth:syzkaller0>
[  196.013899][T10306] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (48)
[  196.416425][    C0] ==================================================================
[  196.419559][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  196.422794][    C0] Write of size 8 at addr ffff888021153630 by task swapper/0/0
[  196.426673][    C0] 
[  196.427964][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  196.427981][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.427991][    C0] Call Trace:
[  196.428025][    C0]  <IRQ>
[  196.428034][    C0]  dump_stack_lvl+0x189/0x250
[  196.428054][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  196.428071][    C0]  ? rcu_is_watching+0x15/0xb0
[  196.428085][    C0]  ? __kasan_check_byte+0x12/0x40
[  196.428103][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.428116][    C0]  ? rcu_is_watching+0x15/0xb0
[  196.428127][    C0]  ? lock_release+0x4b/0x3e0
[  196.428146][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  196.428164][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  196.428179][    C0]  print_report+0xca/0x240
[  196.428190][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  196.428206][    C0]  kasan_report+0x118/0x150
[  196.428221][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  196.428237][    C0]  __xfrm_state_delete+0x696/0xca0
[  196.428257][    C0]  xfrm_timer_handler+0x18f/0xa00
[  196.428274][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  196.428291][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  196.428304][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.428319][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  196.428331][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  196.428346][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  196.428364][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  196.428382][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  196.428401][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  196.428413][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  196.428429][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  196.428444][    C0]  handle_softirqs+0x286/0x870
[  196.428458][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  196.428471][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  196.428485][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  196.428502][    C0]  __irq_exit_rcu+0xca/0x1f0
[  196.428513][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  196.428527][    C0]  irq_exit_rcu+0x9/0x30
[  196.428538][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  196.428551][    C0]  </IRQ>
[  196.428557][    C0]  <TASK>
[  196.428562][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.428578][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  196.428600][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 79 0c 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  196.428611][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  196.428625][    C0] RAX: f1ec5c8a2c9b4c00 RBX: ffffffff819683f8 RCX: f1ec5c8a2c9b4c00
[  196.428636][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba64d RDI: ffffffff8be33f00
[  196.428645][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  196.428655][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa39230
[  196.428664][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  196.428675][    C0]  ? do_idle+0x1e8/0x510
[  196.428692][    C0]  default_idle+0x13/0x20
[  196.428709][    C0]  default_idle_call+0x74/0xb0
[  196.428725][    C0]  do_idle+0x1e8/0x510
[  196.428739][    C0]  ? __pfx_do_idle+0x10/0x10
[  196.428757][    C0]  cpu_startup_entry+0x44/0x60
[  196.428769][    C0]  rest_init+0x2de/0x300
[  196.428788][    C0]  start_kernel+0x3a9/0x410
[  196.428807][    C0]  x86_64_start_reservations+0x24/0x30
[  196.428821][    C0]  x86_64_start_kernel+0x143/0x1c0
[  196.428833][    C0]  common_startup_64+0x13e/0x147
[  196.428853][    C0]  </TASK>
[  196.428857][    C0] 
[  196.561187][    C0] Allocated by task 8716:
[  196.562845][    C0]  kasan_save_track+0x3e/0x80
[  196.564622][    C0]  __kasan_slab_alloc+0x6c/0x80
[  196.566524][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  196.568606][    C0]  xfrm_state_alloc+0x24/0x2f0
[  196.570543][    C0]  __find_acq_core+0x8a7/0x1c00
[  196.572482][    C0]  xfrm_find_acq+0x78/0xa0
[  196.574280][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  196.576253][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  196.578268][    C0]  netlink_rcv_skb+0x208/0x470
[  196.580221][    C0]  xfrm_netlink_rcv+0x79/0x90
[  196.582164][    C0]  netlink_unicast+0x82f/0x9e0
[  196.584095][    C0]  netlink_sendmsg+0x805/0xb30
[  196.586022][    C0]  __sock_sendmsg+0x21c/0x270
[  196.587873][    C0]  ____sys_sendmsg+0x505/0x830
[  196.589770][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  196.591630][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  196.593608][    C0]  do_syscall_64+0xfa/0x3b0
[  196.595426][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.597684][    C0] 
[  196.598604][    C0] Freed by task 9:
[  196.600081][    C0]  kasan_save_track+0x3e/0x80
[  196.602027][    C0]  kasan_save_free_info+0x46/0x50
[  196.604071][    C0]  __kasan_slab_free+0x5b/0x80
[  196.605984][    C0]  kmem_cache_free+0x18f/0x400
[  196.607877][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  196.609836][    C0]  process_scheduled_works+0xae1/0x17b0
[  196.612027][    C0]  worker_thread+0x8a0/0xda0
[  196.613863][    C0]  kthread+0x711/0x8a0
[  196.615501][    C0]  ret_from_fork+0x439/0x7d0
[  196.617378][    C0]  ret_from_fork_asm+0x1a/0x30
[  196.619284][    C0] 
[  196.620219][    C0] The buggy address belongs to the object at ffff888021153600
[  196.620219][    C0]  which belongs to the cache xfrm_state of size 928
[  196.625425][    C0] The buggy address is located 48 bytes inside of
[  196.625425][    C0]  freed 928-byte region [ffff888021153600, ffff8880211539a0)
[  196.630467][    C0] 
[  196.631378][    C0] The buggy address belongs to the physical page:
[  196.633844][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021151b00 pfn:0x21150
[  196.637589][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  196.640898][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  196.643955][    C0] page_type: f5(slab)
[  196.645534][    C0] raw: 00fff00000000040 ffff888105624280 dead000000000122 0000000000000000
[  196.648833][    C0] raw: ffff888021151b00 00000000800e000a 00000000f5000000 0000000000000000
[  196.652024][    C0] head: 00fff00000000040 ffff888105624280 dead000000000122 0000000000000000
[  196.655349][    C0] head: ffff888021151b00 00000000800e000a 00000000f5000000 0000000000000000
[  196.658720][    C0] head: 00fff00000000002 ffffea0000845401 00000000ffffffff 00000000ffffffff
[  196.662104][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  196.665425][    C0] page dumped because: kasan: bad access detected
[  196.667812][    C0] page_owner tracks the page as allocated
[  196.669963][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6248, tgid 6247 (syz.0.81), ts 74001139012, free_ts 73782944357
[  196.677178][    C0]  post_alloc_hook+0x240/0x2a0
[  196.679018][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  196.681181][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  196.683513][    C0]  alloc_pages_mpol+0x232/0x4a0
[  196.685486][    C0]  allocate_slab+0x8a/0x370
[  196.687244][    C0]  ___slab_alloc+0xbeb/0x1420
[  196.689110][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  196.691210][    C0]  xfrm_state_alloc+0x24/0x2f0
[  196.693150][    C0]  xfrm_add_sa+0x17d1/0x4070
[  196.695015][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  196.697009][    C0]  netlink_rcv_skb+0x208/0x470
[  196.698932][    C0]  xfrm_netlink_rcv+0x79/0x90
[  196.700811][    C0]  netlink_unicast+0x82f/0x9e0
[  196.702732][    C0]  netlink_sendmsg+0x805/0xb30
[  196.704637][    C0]  __sock_sendmsg+0x21c/0x270
[  196.706551][    C0]  ____sys_sendmsg+0x505/0x830
[  196.708437][    C0] page last free pid 6245 tgid 6231 stack trace:
[  196.710917][    C0]  __free_frozen_pages+0xbc4/0xd30
[  196.712960][    C0]  stack_depot_save_flags+0x436/0x860
[  196.715113][    C0]  kasan_save_track+0x4f/0x80
[  196.717016][    C0]  __kasan_slab_alloc+0x6c/0x80
[  196.718964][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  196.721318][    C0]  kmalloc_reserve+0xbd/0x290
[  196.723218][    C0]  __alloc_skb+0x142/0x2d0
[  196.725009][    C0]  _sctp_make_chunk+0x5e/0x430
[  196.726909][    C0]  sctp_make_cookie_echo+0x80/0x330
[  196.729011][    C0]  sctp_do_sm+0x570/0x5a20
[  196.730761][    C0]  sctp_assoc_bh_rcv+0x3f2/0x630
[  196.732754][    C0]  sctp_backlog_rcv+0x167/0x3f0
[  196.734723][    C0]  __release_sock+0x297/0x3a0
[  196.736564][    C0]  release_sock+0x5f/0x1f0
[  196.738310][    C0]  sctp_wait_for_connect+0x382/0x680
[  196.740380][    C0]  sctp_sendmsg_to_asoc+0x13c0/0x1810
[  196.742476][    C0] 
[  196.743463][    C0] Memory state around the buggy address:
[  196.745719][    C0]  ffff888021153500: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  196.748894][    C0]  ffff888021153580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  196.752096][    C0] >ffff888021153600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  196.755266][    C0]                                      ^
[  196.757514][    C0]  ffff888021153680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  196.760723][    C0]  ffff888021153700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  196.763886][    C0] ==================================================================
[  196.767242][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  196.770071][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  196.773765][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.777866][    C0] Call Trace:
[  196.779233][    C0]  <IRQ>
[  196.780417][    C0]  dump_stack_lvl+0x99/0x250
[  196.782287][    C0]  ? __asan_memcpy+0x40/0x70
[  196.784174][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.786255][    C0]  ? __pfx__printk+0x10/0x10
[  196.788131][    C0]  vpanic+0x281/0x750
[  196.789750][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  196.791951][    C0]  ? __pfx_vpanic+0x10/0x10
[  196.793860][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.796376][    C0]  panic+0xb9/0xc0
[  196.797944][    C0]  ? __pfx_panic+0x10/0x10
[  196.799734][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  196.802137][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  196.804663][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  196.806780][    C0]  check_panic_on_warn+0x89/0xb0
[  196.808798][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  196.810944][    C0]  end_report+0x78/0x160
[  196.812647][    C0]  kasan_report+0x129/0x150
[  196.814481][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  196.816601][    C0]  __xfrm_state_delete+0x696/0xca0
[  196.818658][    C0]  xfrm_timer_handler+0x18f/0xa00
[  196.820721][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  196.822934][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  196.825327][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.827415][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  196.829813][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  196.832385][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  196.834618][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  196.836970][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  196.839131][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  196.841440][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  196.843777][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  196.845855][    C0]  handle_softirqs+0x286/0x870
[  196.847803][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  196.849733][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  196.851852][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  196.853918][    C0]  __irq_exit_rcu+0xca/0x1f0
[  196.855863][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  196.857942][    C0]  irq_exit_rcu+0x9/0x30
[  196.859647][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  196.861875][    C0]  </IRQ>
[  196.863067][    C0]  <TASK>
[  196.864256][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  196.866624][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  196.868824][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 79 0c 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  196.876330][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  196.878678][    C0] RAX: f1ec5c8a2c9b4c00 RBX: ffffffff819683f8 RCX: f1ec5c8a2c9b4c00
[  196.881681][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba64d RDI: ffffffff8be33f00
[  196.884659][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  196.887652][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa39230
[  196.890640][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  196.893677][    C0]  ? do_idle+0x1e8/0x510
[  196.895353][    C0]  default_idle+0x13/0x20
[  196.897055][    C0]  default_idle_call+0x74/0xb0
[  196.898964][    C0]  do_idle+0x1e8/0x510
[  196.900649][    C0]  ? __pfx_do_idle+0x10/0x10
[  196.902530][    C0]  cpu_startup_entry+0x44/0x60
[  196.904432][    C0]  rest_init+0x2de/0x300
[  196.906163][    C0]  start_kernel+0x3a9/0x410
[  196.907955][    C0]  x86_64_start_reservations+0x24/0x30
[  196.910142][    C0]  x86_64_start_kernel+0x143/0x1c0
[  196.912207][    C0]  common_startup_64+0x13e/0x147
[  196.914213][    C0]  </TASK>
[  196.916143][    C0] Kernel Offset: disabled
[  196.917886][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:08:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888106c28237 R9 =1ffff11020d85046 R10=dffffc0000000000 R11=ffffffff854fb640
R12=dffffc0000000000 R13=ffffffff99b04909 R14=ffffffff99df9480 R15=0000000000000000
RIP=ffffffff854fb6bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000010dea4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8ea4412e7b
XMM06=0000000000000000 00007f8ea4412e75 XMM07=0000000000000000 00007f8ea4412e89
XMM08=0000000000000000 00007f8ea4412f0f XMM09=0000000000000000 00007f8ea4412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff8881a3c11000 RCX=dffffc0000000000 RDX=0000000000000000
RSI=ffffffff8be33ee0 RDI=ffffffff8be33ea0 RBP=ffffc900001e0ca8 RSP=ffffc900001e0be0
R8 =ffffffff8fa39237 R9 =1ffffffff1f47246 R10=dffffc0000000000 R11=fffffbfff1f47247
R12=ffff88813663af80 R13=1ffff11026cc75f4 R14=ffff88801f335640 R15=ffff88813663afa0
RIP=ffffffff81a667c5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f96799f26c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f96799f1fc8 CR3=0000000027f4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7a01c12e7b
XMM06=0000000000000000 00007f7a01c12e75 XMM07=0000000000000000 00007f7a01c12e89
XMM08=0000000000000000 00007f7a01c12f0f XMM09=0000000000000000 00007f7a01c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
