last executing test programs:

749.45628ms ago: executing program 0 (id=1708):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast1, 0x6}, 0x1c)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0}, 0x14)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000280)=@newtaction={0x1c8, 0x30, 0x9, 0x0, 0x0, {}, [{0x1b4, 0x1, [@m_sample={0x1b0, 0xe, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x80, 0x10000000, 0x2, 0x101}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xfffffffb, 0x5, 0x400, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9fe4, 0x10000000, 0x3, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xda7, 0x7, 0x7, 0xf61, 0x2}}]}, {0xf1, 0x6, "d4bbe8b3b7e862d27dd86b070a91905f62aaec578830ca60b00f092cafcc3f223e40ba6159ed4e278074e548d6b40e012a69bedc3f8e8d021173ccfabdf3c06cadcf5afebbe0beb47259732d0d865cfd9396856e1b09ea0b953cc71904918ad7a11b770f53f895cf39615fbc44fdaba9d1badee08db6d8cfbf2c662c28058d5e1a2bdd0d17fca7bb4e40b5c56c191c85dfc3c62f8138ee1d491ba243f054d7026cebbecb4b16d009b0d68b0ae1f0dc0c913c38ec331c240745fdd225066fe17da5b3b1678dde24cb44977ecdc41f09093e812920be3b110e34a285c9932eefc34feed3017394eb747f1629d839"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1c8}}, 0x2000)

748.449895ms ago: executing program 2 (id=1709):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_80211_inject_frame(&(0x7f0000000700)=@broadcast, &(0x7f0000000740)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @random="cc16207dd50e", {0x5, 0x9}}, 0x9193, 0x61, @random=0x7f, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x7ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x5, 0xa}}, [{0xdd, 0x80, "76266dce82cb699307b2fb83da8acf18ae609a371512df7f896a6e9edd6810efd63e40f37fd85b2709fad3ec419797af519af12af0ee17246be913ced98a3c4b6aeaf7ad405cf307d451311cff443b3dfb9a82a36ef8e7b48ba2df3d5e9ad01225de36cbf7a0ec8c01d24cef7534fe88fcaaf634fc749653479d6b2691ea1d79"}]}, 0xbc)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000100)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x21, 0x14, 0x64, 0x0, 0x0, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x9}, @multicast1}}}}}}, 0x26)
r4 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000098c294ccbd8256dab0a88110a010100000000000000000a00000409"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

702.284685ms ago: executing program 0 (id=1710):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3) (async)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) (async)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, 0x0)
recvmmsg$unix(r8, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400}) (async)
recvmmsg$unix(r8, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2400000018000109000000000000000002180000000000082000000008000100ac1414"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2400000018000109000000000000000002180000000000082000000008000100ac1414"], 0x24}}, 0x0)

701.181266ms ago: executing program 0 (id=1711):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delchain={0x2c, 0x65, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xd, 0xfff3}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x6}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32)
r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

612.503946ms ago: executing program 0 (id=1712):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xfffffffffffffff8)
close(r1) (async)
close(r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'macvlan0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="c7a0c61abaff"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a31000000001400078005001500820000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

611.725474ms ago: executing program 0 (id=1713):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000000009a0095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x4}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x54, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x80000001}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_INGRESS={0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x54}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6tnl0\x00', <r9=>0x0, 0x29, 0xfa, 0x0, 0x6, 0x7c, @private0={0xfc, 0x0, '\x00', 0x5}, @private0, 0x40, 0x7, 0x5, 0xffffffff}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', <r10=>0x0, 0x4, 0x1, 0x2, 0x35, 0x2b, @private2, @dev={0xfe, 0x80, '\x00', 0x31}, 0x10, 0x80, 0xfffffffe, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'ip_vti0\x00', &(0x7f0000000980)={'syztnl2\x00', <r11=>0x0, 0x8000, 0x7c0, 0x4, 0x10001, {{0x27, 0x4, 0x3, 0x3e, 0x9c, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @remote, {[@generic={0x82, 0x6, "4058a766"}, @timestamp_prespec={0x44, 0x34, 0x16, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@local, 0x7}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0x8000}, {@private=0xa010100, 0xe68}, {@broadcast}]}, @cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "34ef229aa81daca558f0"}]}, @timestamp={0x44, 0x4, 0x4d, 0x0, 0xc}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x26, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100, @broadcast]}, @timestamp={0x44, 0x18, 0x1b, 0x0, 0x0, [0x9, 0x49, 0x193d1e9f, 0xc5e, 0xc65]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000ac0))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000b00)={'erspan0\x00', <r12=>0x0, 0x700, 0x8000, 0x1, 0x3, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x65, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x23, 0x2d, [@remote, @local, @loopback, @rand_addr=0x64010102, @broadcast, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xb5, 0x3, 0x7, [{@broadcast, 0x8}]}, @ra={0x94, 0x4}]}}}}})
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r15, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r15, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="cc020000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d001028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff0f000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000c00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008a0e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000104", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="180202803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="8801028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r5, @ANYBLOB="280202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="08000700000000003800010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r10, @ANYBLOB="38000100030001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="08000700000000003c000100000001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000000004007f000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x998}, 0x1, 0x0, 0x0, 0x800}, 0x4080)
r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r16, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r16, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xeb, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x54}}, 0x0)

442.437324ms ago: executing program 0 (id=1714):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000010000104000000000000000000480dbabfd0af0c00000000462c4d9c9888f078f415449b6a2820ae7af642a7c4f22294b6f0f0ceb5d161c12734932c8fe6b1811e1d96033dba2cb094ee743c53bd6e1811828f30054ac5d8857188671858f4a7c2c5255e8ca5431b71561bdf5241da1bfe04718137912315581973", @ANYRES32=0x0, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94)

340.258697ms ago: executing program 1 (id=1716):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde080045000074fffc000000019078ac1414bbac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300070300443c000364db789b7d2a8e9d5300000000000000ac1414000100000000ac1e010100"/129], 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x13c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}, @TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x86, 0x8, 0x1, 0x0, 0xb5, 0xd, 0x7}}, {0x12, 0x2, [0x7, 0xc, 0x2cef, 0xff, 0x8, 0x2, 0x3]}}, {{0x1c, 0x1, {0x51, 0x0, 0xf, 0x8352, 0x2, 0xffff, 0x0, 0x2}}, {0x8, 0x2, [0x200, 0x9]}}, {{0x1c, 0x1, {0x0, 0x2, 0x5, 0x40, 0x2, 0xfffffc01, 0x1, 0x7}}, {0x12, 0x2, [0x81, 0xb, 0x3, 0xfff7, 0xfff9, 0xff, 0x5]}}, {{0x1c, 0x1, {0x2, 0x9, 0x3, 0x0, 0x2, 0x27, 0xa63, 0x6}}, {0x10, 0x2, [0xdf5, 0x4, 0x10eb, 0x5, 0x3, 0x1]}}, {{0x1c, 0x1, {0x81, 0x4, 0xcb9, 0x0, 0x2, 0xcc2, 0x0, 0x8}}, {0x14, 0x2, [0x1, 0x5, 0x7, 0x101, 0x2, 0x3092, 0x9, 0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x81, 0xe}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

272.996302ms ago: executing program 1 (id=1717):
r0 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="ce07eee378a165", 0x7}, {&(0x7f00000000c0)="7c6d31a7468a53b957a0672142d8e4fd4767fb5441bf2a4182682b5a6fda0dceb57b56828004ac18c4e4c47f517f8f15", 0x30}, {&(0x7f0000000100)="0e1afc4aeb6b7116d718496d3aa8a47fdd2d77caf07f153af0", 0x19}, {&(0x7f0000000140)="71d384321d14a961f41fbbfbe1d8c61e728c719b7bcc66ad5b4fe62b9ddc235d7345732ab136455690a9c79a3e7c0bdf049f6c745e207182a4a3c1bae345f486d4a498bf59f3e46a92cf076a07b5c515c40a86850d59c6ca56c74b3abd9720f90d8f6dfce4130d7ef0266cda0cab4a62e176d4e292086127a8189f72a5a59b70311783500d92be68e22994d8f1c1c4ce43b779120d90061c1e79fe14651135e1a6c4209946a4a107c7d0fe077cb38ab812232bedef3559", 0xb7}], 0x4, &(0x7f0000000240)=[{0x30, 0x183, 0x6, "0fc06bfb8c747e70486dc14c1dd423f70a17f1a21eeccb303c7eba62"}, {0x88, 0x10c, 0x4, "3d1538eb788bf744cff8a6bcb861044fa06bb791110b16809609924ca89d143d1f84df9be0559426654a867cec150679431dbab277c13963ff348bd7cefa96e1e3b06e44a0349b87b6f9e8944360386f729daa06851b5210fc190f30235e1e8e153e20bbc63055c52371d5f767593175193fb4c7b4d902"}], 0xb8}, 0x2c0100c1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000340)={0x0, 0x100000000})
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000380), &(0x7f00000003c0)=0xc)
r2 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000400)={0xffffff33}) (async)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000400)={0xffffff33})
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000440)='(\x00', 0x2)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x33, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfcfb, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x1, 0x3, 0x0, 0x7, 0x5, 0x1, 0x4}, @func, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xd, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000780)=[{0x1, 0x1, 0x2, 0x3}, {0x4, 0x1, 0x8, 0x4}, {0xfff, 0x3, 0x0, 0x4}, {0x3, 0x1, 0xe, 0xc}, {0x2, 0x5, 0x10, 0xc}, {0x3, 0x1, 0x8, 0x4}, {0x5, 0x2, 0xf, 0x6}], 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000008c0)=r4}, 0x20)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000940), 0x4)
setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000980)=0x9, 0x4) (async)
setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000980)=0x9, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xb4, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6a93d63c}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x16f6f9b0}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000b80)=@l2tp={0x2, 0x0, @private}, 0x80, 0xfffffffffffffffe}, 0x2) (async)
recvmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000b80)=@l2tp={0x2, 0x0, @private}, 0x80, 0xfffffffffffffffe}, 0x2)
getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000c40)=""/126, &(0x7f0000000cc0)=0x7e)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4)
syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r7) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r7)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r7)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0xee13f55d1d14b170}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x7c, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x7c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0xee13f55d1d14b170}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x7c, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x7c}}, 0x0)
write$rfkill(r6, &(0x7f0000000f00)={0x696, 0x6, 0x2}, 0x8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000f40), 0x80, 0x0) (async)
r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000f40), 0x80, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r10, 0x2, &(0x7f0000000f80)=0x4) (async)
ioctl$RFKILL_IOC_MAX_SIZE(r10, 0x2, &(0x7f0000000f80)=0x4)
r11 = socket$alg(0x26, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) (async)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f0000001000))
listen(r11, 0x0)

191.90644ms ago: executing program 1 (id=1718):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000004c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}}, 0x0)

191.556488ms ago: executing program 1 (id=1719):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
unshare(0x22020400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xf29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0xd}, 0x3c)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)={[{0x2b, 'cpuset'}, {0x2d, 'memory'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2b, 'net_prio'}]}, 0x40)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r7, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r7}, 0x94)
unshare(0x200)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="4128dbde38f7", 0x6}], 0x1}}], 0x1, 0xc010)
shutdown(r10, 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
getsockopt$bt_hci(r10, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
write$cgroup_devices(r9, &(0x7f0000000840)=ANY=[], 0x1000d)

79.328908ms ago: executing program 2 (id=1720):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000002010400000000000000000a0000b8b90004000180180003801400018008000100ac1e010108000200ac1414aa100008800c0002"], 0x40}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000240), &(0x7f0000000280)=@tcp, 0x3}, 0x20) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)

78.333579ms ago: executing program 2 (id=1721):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r3 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000280))
sendfile(r2, r1, 0x0, 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r3, 0x79fc8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x20, 0x70bd2b, 0x3, {}, [{0x4c, 0x1, [@m_mpls={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4e837}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0)

75.669023ms ago: executing program 1 (id=1722):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x93254, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) (async)

74.682782ms ago: executing program 2 (id=1723):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb750e423", 0x38}, {&(0x7f0000001740)="ba733b3229f151bda96b0d7a9951e944755a20662ef250c2939ab8d1dcf0ca6d43c71520c755", 0x26}], 0x2}, 0x24000008)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x89bb853, 0x4, 0x1})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x41)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0)

2.813899ms ago: executing program 2 (id=1724):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @short}, 0xb, &(0x7f0000000080)={0x0}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000c00)="294f28dfe56d2c8ba236", 0xa}], 0x2}, 0x4080)
bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}, 0x3c58c628, 0x2}, 0x20)

1.476257ms ago: executing program 2 (id=1725):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c800}, 0x8000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044010}, 0x0)
recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

0s ago: executing program 1 (id=1726):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff2000000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc4d6a5713bcb949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ef970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000fd00000000000000030006000000000002000000ac1414000000000000000000020001000000000000000000000000200300050000000000020000000000000000000000000000007758c59008e85ed3b5c2147185922942fcd086434f03dbe19777614f9aa0154b65516972b2b863f6f152c7e53c8a4c9477227ff508e423976dfda55efcfe036dfffdba4f7a6e2e5240397cdbb6d366a52fe9f0a7782998d7066eb68ca8ae81309663c31405d1343c695cd39048a4ec4f6be1911a6e6c633b3b00ea6f9d6bf40b3f284b8891350bef0229f9f4b94c9e0638c0560bedf1167d877376e40aa275f7e72dc745f09bb5d1a1b82da20e782cc675a2d48d1d06aed8bc9308ce93e03e33c21d568103a5b2b11af69aa3617a976692b4411f678c0f64cd"], 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000017c0)={{0x2, 0x4e20, @multicast2}, {0x1, @local}, 0x5a, {0x2, 0x4e22, @empty}, 'syzkaller1\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

kernel console output (not intermixed with test programs):

unset [1, 0] type 2 family 0 port 6081 - 0
[   51.833461][ T5705] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.884518][ T6083] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   51.889431][ T6081] syz_tun: refused to change device tx_queue_len
[   51.907172][ T6083] bridge1: entered promiscuous mode
[   51.908882][ T6083] bridge1: entered allmulticast mode
[   51.912297][ T6083] team0: Port device bridge1 added
[   51.917351][ T6086] netlink: 'syz.1.52': attribute type 1 has an invalid length.
[   52.051593][ T6091] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   52.081767][ T6088] block nbd0: server does not support multiple connections per device.
[   52.085109][ T6088] block nbd0: shutting down sockets
[   52.111467][ T6091] veth3: entered promiscuous mode
[   52.327481][ T6131] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[   52.414952][ T6143] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   52.418377][ T6143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.526161][ T6158] netlink: 'syz.1.67': attribute type 1 has an invalid length.
[   52.573099][ T6163] netlink: 'syz.2.68': attribute type 1 has an invalid length.
[   52.615986][ T6167] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   52.619619][ T6166] bond0: (slave bond_slave_1): Releasing backup interface
[   52.644504][ T6167] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   52.653746][ T6167] veth3: entered promiscuous mode
[   52.656587][ T6167] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   52.660251][ T5894] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   52.660620][ T6167] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.783445][ T5705] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   52.903199][ T5851] Bluetooth: hci0: command tx timeout
[   52.905480][ T5846] Bluetooth: hci1: command tx timeout
[   52.913157][ T5851] Bluetooth: hci2: command tx timeout
[   52.917617][ T6195] netlink: 'syz.1.75': attribute type 1 has an invalid length.
[   53.087199][ T6205] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   53.098367][ T6217] tipc: Started in network mode
[   53.099936][ T6217] tipc: Node identity cea881648f6c, cluster identity 4711
[   53.111520][ T6217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.125784][ T6217] tipc: Resetting bearer <eth:syzkaller0>
[   53.153081][ T6216] tipc: Disabling bearer <eth:syzkaller0>
[   53.611032][ T6268] __nla_validate_parse: 24 callbacks suppressed
[   53.611046][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.89'.
[   53.617297][ T6268] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   53.623178][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'.
[   53.626805][ T6268] netdevsim netdevsim0 netdevsim2: left allmulticast mode
[   54.170390][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'.
[   54.173725][ T6311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'.
[   54.195271][ T6313] netlink: 'syz.2.93': attribute type 1 has an invalid length.
[   54.206664][ T6313] sctp: [Deprecated]: syz.2.93 (pid 6313) Use of int in max_burst socket option.
[   54.206664][ T6313] Use struct sctp_assoc_value instead
[   54.618439][ T6344] bridge_slave_0: left allmulticast mode
[   54.620530][ T6344] bridge_slave_0: left promiscuous mode
[   54.623370][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.627340][ T6344] bridge_slave_1: left allmulticast mode
[   54.629196][ T6344] bridge_slave_1: left promiscuous mode
[   54.631087][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.638256][ T6344] bond0: (slave bond_slave_0): Releasing backup interface
[   54.648584][ T6344] bond0: (slave bond_slave_1): Releasing backup interface
[   54.660693][ T6344] team0: Port device team_slave_0 removed
[   54.677191][ T6344] team0: Port device team_slave_1 removed
[   54.682369][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.685697][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.690080][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.693031][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.706132][ T6344] team0: Port device bridge1 removed
[   54.744051][ T6351] netlink: del zone limit has 4 unknown bytes
[   54.796401][ T6355] bridge_slave_0: entered promiscuous mode
[   54.880799][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   54.910445][ T6368] netlink: 'syz.0.99': attribute type 6 has an invalid length.
[   54.991798][ T5851] Bluetooth: hci2: command tx timeout
[   54.994020][ T5851] Bluetooth: hci0: command tx timeout
[   54.996125][ T5851] Bluetooth: hci1: command tx timeout
[   55.093089][   T33] audit: type=1800 audit(1756327349.181:2): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name="memory.events" dev="tmpfs" ino=129 res=0 errno=0
[   55.295769][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'.
[   55.298748][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'.
[   55.309343][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.103'.
[   55.356827][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'.
[   55.425207][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'.
[   55.445640][ T6396] bridge_slave_1: left allmulticast mode
[   55.448084][ T6396] bridge_slave_1: left promiscuous mode
[   55.450811][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.457317][ T6396] bridge_slave_0: left allmulticast mode
[   55.460130][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.844326][ T6403] IPv6: Can't replace route, no match found
[   56.150454][ T6422] netlink: 'syz.1.113': attribute type 3 has an invalid length.
[   56.213813][ T6437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.218920][ T6436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.222061][ T6437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.311291][ T6513] nbd0: detected capacity change from 0 to 127
[   57.323396][   T55] block nbd0: Receive control failed (result -104)
[   57.324653][ T5848] block nbd0: Send control failed (result -32)
[   57.328485][ T5848] block nbd0: Request send failed, requeueing
[   57.333483][ T1116] block nbd0: Dead connection, failed to find a fallback
[   57.336310][ T1116] block nbd0: shutting down sockets
[   57.338455][ T1116] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   57.342366][ T1116] Buffer I/O error on dev nbd0, logical block 3, async page read
[   57.503743][ T6539] validate_nla: 2 callbacks suppressed
[   57.503767][ T6539] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   57.636208][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.729846][ T6550] wg1: entered promiscuous mode
[   57.738586][ T6550] wg1: entered allmulticast mode
[   57.840522][ T6573] tipc: Cannot configure node identity twice
[   58.009572][ T6592] netlink: 'syz.1.160': attribute type 3 has an invalid length.
[   58.207039][ T6608] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   58.207059][ T6609] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   58.215292][ T6608] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.218343][ T6609] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.418184][ T6631] ieee802154 phy0 wpan0: encryption failed: -22
[   58.623149][ T6650] netlink: 'syz.0.176': attribute type 5 has an invalid length.
[   58.688282][ T6654] __nla_validate_parse: 25 callbacks suppressed
[   58.688294][ T6654] netlink: 56 bytes leftover after parsing attributes in process `syz.0.178'.
[   58.692191][ T6656] netlink: 'syz.1.175': attribute type 2 has an invalid length.
[   58.698337][ T6656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.782734][ T6665] macvtap1: entered allmulticast mode
[   58.784503][ T6665] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   58.788052][ T6668] netlink: 1248 bytes leftover after parsing attributes in process `syz.0.179'.
[   58.793046][ T6665] batman_adv: batadv0: Adding interface: macvtap1
[   58.795890][ T6665] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.804353][ T6665] batman_adv: batadv0: Interface activated: macvtap1
[   58.836612][ T6670] veth0_to_hsr: mtu greater than device maximum
[   59.159661][ T6675] nft_compat: unsupported protocol 0
[   59.162061][ T6676] nft_compat: unsupported protocol 0
[   59.244713][ T6681] netlink: 'syz.2.186': attribute type 1 has an invalid length.
[   59.258075][ T6681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.186'.
[   59.588897][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'.
[   59.652150][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'.
[   59.661069][ T6695] ipvlan2: entered promiscuous mode
[   59.665018][ T6695] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   59.825791][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.833486][ T6698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.874921][ T6698] batman_adv: batadv0: Interface deactivated: macvtap1
[   59.877420][ T6698] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   59.879945][ T6698] macvtap1: left allmulticast mode
[   59.895352][ T5705] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.904356][ T5705] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.912715][ T5705] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.917579][ T5705] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.067630][ T6709] netlink: 64 bytes leftover after parsing attributes in process `syz.1.193'.
[   60.073638][ T6709] netlink: 156 bytes leftover after parsing attributes in process `syz.1.193'.
[   60.169448][ T6712] macvlan2: entered allmulticast mode
[   60.178341][ T6712] veth1_vlan: entered allmulticast mode
[   60.179307][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.196'.
[   60.183001][ T6712] veth1_vlan: left allmulticast mode
[   60.214216][ T6716] netlink: 'syz.1.196': attribute type 2 has an invalid length.
[   60.217346][ T6716] netlink: 'syz.1.196': attribute type 1 has an invalid length.
[   60.217393][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   60.224261][ T6716] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   60.265158][ T6725] openvswitch: netlink: Missing key (keys=40, expected=80)
[   60.315312][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'.
[   60.336132][ T6728] tipc: Started in network mode
[   60.338257][ T6728] tipc: Node identity , cluster identity 4711
[   60.340665][ T6728] tipc: Failed to obtain node identity
[   60.344598][ T6728] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   60.368985][ T6728] syzkaller0: entered promiscuous mode
[   60.370909][ T6728] syzkaller0: entered allmulticast mode
[   60.674688][ T1116] block nbd0: Connection timed out, retrying (0/1 alive)
[   60.677541][ T1116] block nbd0: Connection timed out, retrying (0/1 alive)
[   60.680289][ T1116] block nbd0: Connection timed out, retrying (0/1 alive)
[   60.683507][ T1116] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.687074][ T1116] Buffer I/O error on dev nbd0, logical block 2, async page read
[   60.690147][ T1116] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.694024][ T1116] Buffer I/O error on dev nbd0, logical block 1, async page read
[   60.697139][ T1116] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.700759][ T1116] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.704164][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.707693][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.710818][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.714905][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[   60.718258][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.722177][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read
[   60.725338][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.728917][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read
[   60.732607][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.736135][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[   60.739255][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   60.743047][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[   60.747534][ T5848] ldm_validate_partition_table(): Disk read failed.
[   60.751003][ T5848] Dev nbd0: unable to read RDB block 0
[   60.754413][ T5848]  nbd0: unable to read partition table
[   60.759936][ T5848] ldm_validate_partition_table(): Disk read failed.
[   60.763720][ T5848] Dev nbd0: unable to read RDB block 0
[   60.766862][ T5848]  nbd0: unable to read partition table
[   71.143754][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   81.392012][   T51] cfg80211: failed to load regulatory.db
[   84.292613][ T6758] openvswitch: netlink: Multiple metadata blocks provided
[   84.302721][ T6760] netlink: 'syz.0.206': attribute type 1 has an invalid length.
[   84.305832][ T6760] netlink: 'syz.0.206': attribute type 3 has an invalid length.
[   84.308735][ T6760] __nla_validate_parse: 1 callbacks suppressed
[   84.308746][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.206'.
[   84.385458][ T6769] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.504981][ T6785] netlink: 'syz.0.215': attribute type 3 has an invalid length.
[   84.573271][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.217'.
[   84.634483][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'.
[   84.668473][ T6805] netlink: 'syz.1.220': attribute type 39 has an invalid length.
[   84.683304][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'.
[   84.686744][ T6807] openvswitch: netlink: EtherType 0 is less than min 600
[   84.727741][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.220'.
[   84.796103][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'.
[   84.799761][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'.
[   85.157200][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'.
[   85.577067][ T6836] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.730414][ T6844] netlink: 256 bytes leftover after parsing attributes in process `syz.2.232'.
[   85.737298][ T6842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.792211][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'.
[   85.805062][ T6851] bridge1: port 1(veth5) entered blocking state
[   85.807550][ T6851] bridge1: port 1(veth5) entered disabled state
[   85.809640][ T6851] veth5: entered allmulticast mode
[   85.812556][ T6851] veth5: entered promiscuous mode
[   85.817653][ T6842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.830687][ T6852] bridge1: port 2(veth0_to_bond) entered blocking state
[   85.833852][ T6852] bridge1: port 2(veth0_to_bond) entered disabled state
[   85.837432][ T6852] veth0_to_bond: entered allmulticast mode
[   85.840708][ T6852] veth0_to_bond: entered promiscuous mode
[   85.857214][ T6842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.870371][ T6854] team0 (unregistering): Port device team_slave_0 removed
[   85.873728][ T6854] team0 (unregistering): Port device team_slave_1 removed
[   85.903488][ T6842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.992063][ T6867] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   85.997094][ T5705] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.999835][ T5705] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.007722][ T5705] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.013848][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.046619][ T6875] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   86.197814][ T6887] netlink: 'syz.2.247': attribute type 1 has an invalid length.
[   86.206290][ T6887] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.213252][ T6887] bond3: (slave geneve2): making interface the new active one
[   86.216159][ T6887] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   86.218861][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.224682][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.228373][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.233201][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.243477][ T6887] bond3: entered promiscuous mode
[   86.246913][ T6887] geneve2: entered promiscuous mode
[   86.386815][ T6899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.398277][ T6899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.876173][ T5894] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.879198][ T5894] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.882583][ T5894] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.885967][ T5894] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.886045][ T6906] netlink: 'syz.1.253': attribute type 1 has an invalid length.
[   86.914793][ T6910] netlink: 'syz.1.254': attribute type 4 has an invalid length.
[   86.918775][ T6910] netlink: 'syz.1.254': attribute type 12 has an invalid length.
[   86.985663][   T33] audit: type=1800 audit(1756327381.081:3): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.256" name="blkio.bfq.time_recursive" dev="tmpfs" ino=464 res=0 errno=0
[   86.995773][   T33] audit: type=1800 audit(1756327381.091:4): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.256" name="blkio.bfq.time_recursive" dev="tmpfs" ino=464 res=0 errno=0
[   87.055889][ T6922] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.059675][ T6922] bond4: (slave bond5): Enslaving as an active interface with an up link
[   87.070547][ T6922] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.149603][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.156710][ T6930] bond0: (slave rose0): Enslaving as an active interface with an up link
[   87.283423][ T6948] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   87.580264][ T6979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.027729][ T7001] vlan2: entered allmulticast mode
[   88.029755][ T7001] bond0: entered allmulticast mode
[   88.033202][ T7001] bond_slave_0: entered allmulticast mode
[   88.034948][ T7001] bond_slave_1: entered allmulticast mode
[   88.106724][ T7011] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   88.503673][ T7036] tipc: Started in network mode
[   88.505391][ T7036] tipc: Node identity e2e25bcd26bb, cluster identity 4711
[   88.508134][ T7036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.510805][ T7036] syzkaller0: entered promiscuous mode
[   88.512915][ T7036] syzkaller0: entered allmulticast mode
[   88.515976][ T7036] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   88.519888][ T7036] tipc: Resetting bearer <eth:syzkaller0>
[   88.523025][ T7034] tipc: Resetting bearer <eth:syzkaller0>
[   88.526551][ T7034] tipc: Disabling bearer <eth:syzkaller0>
[   88.745332][ T7049] bond0: entered promiscuous mode
[   88.747216][ T7049] bond_slave_0: entered promiscuous mode
[   88.750624][ T7049] bond_slave_1: entered promiscuous mode
[   88.762769][ T7049] batadv0: entered promiscuous mode
[   88.765445][ T7049] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   88.769240][ T7049] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   88.773035][ T7049] hsr1: entered allmulticast mode
[   88.778296][ T7049] batadv0: entered allmulticast mode
[   88.780643][ T7049] 8021q: adding VLAN 0 to HW filter on device hsr1
[   88.789946][ T7049] bond0: left promiscuous mode
[   88.793274][ T7049] bond_slave_0: left promiscuous mode
[   88.795446][ T7049] bond_slave_1: left promiscuous mode
[   88.798125][ T7049] batadv0: left promiscuous mode
[   88.979754][ T7076] hsr_slave_0: left promiscuous mode
[   88.983120][ T7076] hsr_slave_1: left promiscuous mode
[   89.308492][ T7100] bridge_slave_1: left allmulticast mode
[   89.310782][ T7100] bridge_slave_1: left promiscuous mode
[   89.314808][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.319413][ T7100] bridge_slave_0: left allmulticast mode
[   89.321763][ T7100] bridge_slave_0: left promiscuous mode
[   89.324088][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.844746][ T7105] __nla_validate_parse: 30 callbacks suppressed
[   89.844759][ T7105] netlink: 84 bytes leftover after parsing attributes in process `syz.1.302'.
[   89.871076][ T7109] netlink: 320 bytes leftover after parsing attributes in process `syz.1.303'.
[   89.906964][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'.
[   89.910062][ T7114] openvswitch: netlink: Flow actions attr not present in new flow.
[   89.987351][ T7119] validate_nla: 7 callbacks suppressed
[   89.987365][ T7119] netlink: 'syz.1.306': attribute type 1 has an invalid length.
[   89.998742][ T7119] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.085678][ T7127] netlink: 'syz.1.309': attribute type 7 has an invalid length.
[   90.088488][ T7127] netlink: 'syz.1.309': attribute type 8 has an invalid length.
[   90.125648][ T7130] netlink: 48 bytes leftover after parsing attributes in process `syz.1.310'.
[   90.190192][ T7130] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   90.195510][   T51] IPVS: starting estimator thread 0...
[   90.282095][ T7138] IPVS: using max 92 ests per chain, 220800 per kthread
[   90.294890][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'.
[   90.306478][ T7162] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   90.373709][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'.
[   90.400530][ T7180] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.488173][ T7196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.490894][ T7196] syzkaller0: entered promiscuous mode
[   90.501255][ T7196] syzkaller0: entered allmulticast mode
[   90.512172][ T7196] tipc: Resetting bearer <eth:syzkaller0>
[   90.515663][ T7196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'.
[   90.520326][ T7196] bond0: entered promiscuous mode
[   90.522958][ T7196] bond_slave_0: entered promiscuous mode
[   90.529869][ T7196] bond0: left promiscuous mode
[   90.532588][ T7196] bond_slave_0: left promiscuous mode
[   90.620091][ T7204] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   90.632745][ T7214] syzkaller0: entered promiscuous mode
[   90.634531][ T7214] syzkaller0: entered allmulticast mode
[   91.501268][ T5310] tipc: Node number set to 311149969
[   91.517100][ T7221] vlan2: entered promiscuous mode
[   91.518918][ T7221] vlan2: entered allmulticast mode
[   91.532124][ T7221] hsr_slave_1: entered allmulticast mode
[   91.552562][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.334'.
[   91.579686][ T7225] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.599509][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'.
[   91.637407][ T7238] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[   91.644789][ T7238] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[   91.763196][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'.
[   91.769604][ T7270] netlink: 'syz.0.344': attribute type 5 has an invalid length.
[   91.769685][ T7267] batman_adv: batadv0: Adding interface: dummy0
[   91.773470][ T7269] netlink: 'syz.0.344': attribute type 5 has an invalid length.
[   91.774746][ T7267] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.785487][ T7267] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   91.796066][ T7267] batman_adv: batadv0: Adding interface: ip6gretap3
[   91.800504][ T7267] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.812402][ T7267] batman_adv: batadv0: Interface activated: ip6gretap3
[   91.887992][ T7279] netlink: 'syz.2.348': attribute type 3 has an invalid length.
[   92.103429][ T7308] macvlan2: entered allmulticast mode
[   92.110739][ T7308] veth1_vlan: entered allmulticast mode
[   92.119835][ T7308] veth1_vlan: left allmulticast mode
[   92.286413][ T7331] netlink: 'syz.1.364': attribute type 3 has an invalid length.
[   92.289591][ T7332] netlink: 'syz.1.364': attribute type 3 has an invalid length.
[   92.302530][ T7331] syz_tun: entered allmulticast mode
[   92.309719][ T7331] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   92.317255][ T7331] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   92.350433][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.363066][ T7331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.372885][ T7330] syz_tun: left allmulticast mode
[   92.374945][ T7331] syz.1.364 (7331) used greatest stack depth: 19824 bytes left
[   93.177150][ T7363] pimreg: entered allmulticast mode
[   93.324339][ T7381] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   93.327860][ T7381] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   93.375061][ T7384] vlan0: entered promiscuous mode
[   93.377029][ T7384] veth1_to_hsr: entered promiscuous mode
[   93.639396][ T7407] syzkaller0: entered promiscuous mode
[   93.642672][ T7407] syzkaller0: entered allmulticast mode
[   93.806933][ T7420] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   94.666107][ T7438] netlink: 'syz.2.395': attribute type 4 has an invalid length.
[   94.809692][ T7449] netlink: 'syz.1.398': attribute type 2 has an invalid length.
[   94.888057][ T7458] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.965339][ T7465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.968593][ T7465] syzkaller0: entered promiscuous mode
[   94.975358][ T7465] syzkaller0: entered allmulticast mode
[   94.991092][ T7465] tipc: Resetting bearer <eth:syzkaller0>
[   94.996233][ T7454] tipc: Resetting bearer <eth:syzkaller0>
[   94.999844][ T7454] tipc: Disabling bearer <eth:syzkaller0>
[   95.166437][ T7493] __nla_validate_parse: 33 callbacks suppressed
[   95.166447][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'.
[   95.253769][ T7500] netlink: 48 bytes leftover after parsing attributes in process `syz.2.410'.
[   95.316032][ T7500] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   95.392765][ T5705] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.402181][ T5705] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.404898][ T5705] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.418850][ T5705] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.520634][ T7518] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[   95.716283][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'.
[   95.741006][ T7532] netlink: 204 bytes leftover after parsing attributes in process `syz.2.418'.
[   95.745049][ T7532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.418'.
[   95.779324][ T7537] Bluetooth: MGMT ver 1.23
[   95.801112][ T7537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'.
[   95.985427][ T7560] syz.1.428: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   95.991035][ T7562] syzkaller0: entered promiscuous mode
[   95.995156][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(full) 
[   95.995174][ T7560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.995182][ T7560] Call Trace:
[   95.995202][ T7560]  <TASK>
[   95.995207][ T7560]  dump_stack_lvl+0x189/0x250
[   95.995230][ T7560]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.995245][ T7560]  ? __pfx__printk+0x10/0x10
[   95.995260][ T7560]  ? lock_release+0x4b/0x3e0
[   95.995280][ T7560]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   95.995296][ T7560]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   95.995310][ T7560]  warn_alloc+0x214/0x310
[   95.995332][ T7560]  ? __pfx_warn_alloc+0x10/0x10
[   95.995352][ T7560]  ? __get_vm_area_node+0x28f/0x300
[   95.995368][ T7560]  ? xskq_create+0xbf/0x170
[   95.995388][ T7560]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   95.995413][ T7560]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   95.995430][ T7560]  ? xsk_setsockopt+0x502/0x8d0
[   95.995445][ T7560]  ? __kasan_kmalloc+0x93/0xb0
[   95.995463][ T7560]  vmalloc_user_noprof+0xad/0xf0
[   95.995479][ T7560]  ? xskq_create+0xbf/0x170
[   95.995495][ T7560]  xskq_create+0xbf/0x170
[   95.995516][ T7560]  xsk_init_queue+0xb0/0x110
[   95.995531][ T7560]  xsk_setsockopt+0x57b/0x8d0
[   95.995546][ T7560]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.995561][ T7560]  ? __pfx_aa_sk_perm+0x10/0x10
[   95.995580][ T7560]  ? lock_release+0x4b/0x3e0
[   95.995596][ T7560]  ? __se_sys_futex+0x36f/0x400
[   95.995612][ T7560]  ? aa_sock_opt_perm+0xff/0x1b0
[   95.995624][ T7560]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   95.995638][ T7560]  ? __pfx_xsk_setsockopt+0x10/0x10
[   95.995653][ T7560]  do_sock_setsockopt+0x17c/0x1b0
[   95.995667][ T7560]  __x64_sys_setsockopt+0x13f/0x1b0
[   95.995681][ T7560]  do_syscall_64+0xfa/0x3b0
[   95.995692][ T7560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.995705][ T7560]  ? exc_page_fault+0x9f/0xf0
[   95.995722][ T7560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.995734][ T7560] RIP: 0033:0x7fa64cf8ebe9
[   95.995745][ T7560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.995755][ T7560] RSP: 002b:00007fa64b1d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   95.995768][ T7560] RAX: ffffffffffffffda RBX: 00007fa64d1b6090 RCX: 00007fa64cf8ebe9
[   95.995777][ T7560] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006
[   95.995784][ T7560] RBP: 00007fa64d011e19 R08: 0000000000000004 R09: 0000000000000000
[   95.995791][ T7560] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   95.995799][ T7560] R13: 00007fa64d1b6128 R14: 00007fa64d1b6090 R15: 00007ffe90d7e1c8
[   95.995840][ T7560]  </TASK>
[   95.995846][ T7560] Mem-Info:
[   96.005905][ T7562] syzkaller0: entered allmulticast mode
[   96.009530][ T7560] active_anon:5699 inactive_anon:0 isolated_anon:0
[   96.009530][ T7560]  active_file:1291 inactive_file:38220 isolated_file:0
[   96.009530][ T7560]  unevictable:1768 dirty:89 writeback:0
[   96.009530][ T7560]  slab_reclaimable:9927 slab_unreclaimable:54030
[   96.009530][ T7560]  mapped:18259 shmem:2455 pagetables:1009
[   96.009530][ T7560]  sec_pagetables:0 bounce:0
[   96.009530][ T7560]  kernel_misc_reclaimable:0
[   96.009530][ T7560]  free:288166 free_pcp:21944 free_cma:0
[   96.014596][ T7562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.015355][ T7560] Node 0 active_anon:13264kB inactive_anon:0kB active_file:3752kB inactive_file:132464kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38348kB dirty:180kB writeback:0kB shmem:4988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4844kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   96.019178][ T7562] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   96.019560][ T7560] Node 1 active_anon:9532kB inactive_anon:0kB active_file:1412kB inactive_file:20416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34756kB dirty:176kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6844kB pagetables:1936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   96.143575][ T7560] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   96.154594][ T7569] tipc: Resetting bearer <eth:syzkaller0>
[   96.158195][ T7561] tipc: Resetting bearer <eth:syzkaller0>
[   96.161766][ T7561] tipc: Disabling bearer <eth:syzkaller0>
[   96.162697][ T7560] lowmem_reserve[]: 0 811 811 811 811
[   96.165788][ T7560] Node 0 DMA32 free:277144kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13264kB inactive_anon:0kB active_file:3752kB inactive_file:132464kB unevictable:3536kB writepending:180kB present:1556484kB managed:830916kB mlocked:0kB bounce:0kB free_pcp:31044kB local_pcp:16396kB free_cma:0kB
[   96.177679][ T7560] lowmem_reserve[]: 0 0 0 0 0
[   96.179547][ T7560] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   96.192324][ T7560] lowmem_reserve[]: 0 0 854 854 854
[   96.194431][ T7560] Node 1 Normal free:401668kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9396kB inactive_anon:0kB active_file:1412kB inactive_file:20416kB unevictable:3536kB writepending:176kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:56968kB local_pcp:19840kB free_cma:0kB
[   96.208408][ T7560] lowmem_reserve[]: 0 0 0 0 0
[   96.210361][ T7560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   96.216140][ T7560] Node 0 DMA32: 860*4kB (UME) 645*8kB (UME) 240*16kB (UME) 221*32kB (UME) 50*64kB (UM) 86*128kB (UM) 29*256kB (UM) 15*512kB (UM) 11*1024kB (UM) 8*2048kB (UM) 49*4096kB (M) = 277176kB
[   96.231551][ T7560] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   96.237181][ T7560] Node 1 Normal: 7*4kB (UE) 164*8kB (UME) 642*16kB (UME) 543*32kB (UME) 239*64kB (UME) 84*128kB (UME) 28*256kB (UM) 15*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 80*4096kB (UM) = 401660kB
[   96.245273][ T7560] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   96.248830][ T7560] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[   96.252623][ T7560] 41966 total pagecache pages
[   96.254089][ T7560] 0 pages in swap cache
[   96.255546][ T7560] Free swap  = 124996kB
[   96.257135][ T7560] Total swap = 124996kB
[   96.258656][ T7560] 786301 pages RAM
[   96.259960][ T7560] 0 pages HighMem/MovableOnly
[   96.260276][ T7572] netlink: 'syz.2.431': attribute type 1 has an invalid length.
[   96.262413][ T7560] 241340 pages reserved
[   96.266552][ T7560] 0 pages cma reserved
[   96.280432][ T7575] netlink: 'syz.0.432': attribute type 1 has an invalid length.
[   96.292112][ T7572] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.318880][ T7572] bond6: entered promiscuous mode
[   96.325195][ T7575] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   96.329189][ T7575] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   96.337508][ T7575] bond1: (slave vti0): making interface the new active one
[   96.340914][ T7575] bond1: (slave vti0): Enslaving as an active interface with an up link
[   96.390670][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'.
[   96.573122][ T7596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.439'.
[   96.576282][ T7596] openvswitch: netlink: Flow actions attr not present in new flow.
[   96.580801][ T7595] tipc: Failed to remove unknown binding: 66,1,1/0:3949236266/3949236269
[   96.584717][ T7596] tipc: Failed to remove unknown binding: 66,1,1/0:3949236266/3949236269
[   96.589730][ T7595] netlink: 788 bytes leftover after parsing attributes in process `syz.2.439'.
[   96.633177][ T7598] netlink: 'syz.2.440': attribute type 12 has an invalid length.
[   96.635647][ T7598] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.440'.
[   96.763046][ T7613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.975534][ T7637] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   96.998674][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.004295][ T7637] 8021q: adding VLAN 0 to HW filter on device team0
[   97.009590][ T7637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.137532][ T7645] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[   97.140540][ T7645] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[   97.273108][ T7652] lo speed is unknown, defaulting to 1000
[   97.275500][ T7652] lo speed is unknown, defaulting to 1000
[   97.278150][ T7652] lo speed is unknown, defaulting to 1000
[   97.286895][ T7652] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   97.290503][ T7655] netlink: 'syz.1.457': attribute type 1 has an invalid length.
[   97.314103][ T7654] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   97.314526][ T7652] lo speed is unknown, defaulting to 1000
[   97.320774][ T7652] lo speed is unknown, defaulting to 1000
[   97.326887][ T7652] lo speed is unknown, defaulting to 1000
[   97.343023][ T7664] 8021q: VLANs not supported on ipvlan1
[   97.352876][ T7664] macsec1: entered promiscuous mode
[   97.354963][ T7664] macsec1: entered allmulticast mode
[   97.378483][ T7667] openvswitch: netlink: Actions may not be safe on all matching packets
[   97.673037][ T7681] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   97.820331][ T7712] Driver unsupported XDP return value 0 on prog  (id 124) dev N/A, expect packet loss!
[   98.514263][ T7732] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   98.654802][ T7742] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[   98.709750][ T7747] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.729172][ T7747] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   98.733116][ T7747] bond4: (slave macvlan2): Enslaving as a backup interface with an up link
[   98.745180][ T7747] bond0: (slave bond_slave_0): Releasing backup interface
[   98.749327][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.754275][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.757007][ T7747] batman_adv: batadv0: Removing interface: macvtap1
[   98.760566][ T7747] bond4: (slave macvlan2): Releasing backup interface
[   98.800996][ T7762] netlink: 'syz.0.489': attribute type 1 has an invalid length.
[   98.856337][ T7762] netlink: 'syz.0.489': attribute type 1 has an invalid length.
[   98.981542][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[   99.120909][ T7810] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   99.178792][ T7814] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.206111][ T7821] lo speed is unknown, defaulting to 1000
[   99.209454][ T7787] vlan2: entered allmulticast mode
[   99.211643][ T7787] veth1: entered allmulticast mode
[   99.213708][ T7787] bond5: (slave vlan2): Opening slave failed
[   99.228727][ T7822] lo speed is unknown, defaulting to 1000
[   99.239838][ T7819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.242329][ T7823] syzkaller0: entered promiscuous mode
[   99.246005][ T7823] syzkaller0: entered allmulticast mode
[   99.279481][ T7823] tipc: Resetting bearer <eth:syzkaller0>
[   99.288725][ T7823] tipc: Disabling bearer <eth:syzkaller0>
[   99.413251][ T7847] bridge0: port 1(vlan3) entered blocking state
[   99.415483][ T7847] bridge0: port 1(vlan3) entered disabled state
[   99.417704][ T7847] vlan3: entered allmulticast mode
[   99.419466][ T7847] bridge0: entered allmulticast mode
[   99.425540][ T7847] vlan3: left allmulticast mode
[   99.427141][ T7847] bridge0: left allmulticast mode
[   99.452344][ T7849] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20002
[   99.514220][ T7859] tipc: Can't bind to reserved service type 0
[   99.577134][ T7861] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   99.593872][ T7861] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   99.648725][ T7872] vlan2: entered promiscuous mode
[   99.658634][ T7872] vlan2: entered allmulticast mode
[   99.660344][ T7872] hsr_slave_1: entered allmulticast mode
[   99.789705][ T7884] sch_fq: defrate 0 ignored.
[   99.860038][ T7892] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.032043][ T7919] lo speed is unknown, defaulting to 1000
[  100.198573][ T7926] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  100.204759][ T7926] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  100.227907][ T7930] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.257023][ T7932] __nla_validate_parse: 42 callbacks suppressed
[  100.257041][ T7932] netlink: 56 bytes leftover after parsing attributes in process `syz.2.535'.
[  100.280309][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'.
[  100.289968][ T7934] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  100.329085][ T7938] netlink: 156 bytes leftover after parsing attributes in process `syz.1.538'.
[  100.333254][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'.
[  100.367738][ T7938] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.372131][ T7938] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  100.400477][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.540'.
[  100.606929][ T7976] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  100.743311][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[  100.885646][ T8000] vlan3: entered promiscuous mode
[  100.887316][ T8000] macvtap0: entered promiscuous mode
[  100.926666][ T8000] netlink: 104 bytes leftover after parsing attributes in process `syz.1.555'.
[  100.963291][ T8008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.996270][ T8016] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.000778][ T8016] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  101.007293][ T8016] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) !
[  101.124791][ T8024] netlink: del zone limit has 4 unknown bytes
[  101.283724][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[  101.287055][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[  101.291671][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'.
[  101.422129][ T8060] validate_nla: 10 callbacks suppressed
[  101.422146][ T8060] netlink: 'syz.0.575': attribute type 4 has an invalid length.
[  101.429569][   T51] lo speed is unknown, defaulting to 1000
[  101.434868][ T8060] netlink: 'syz.0.575': attribute type 4 has an invalid length.
[  101.437714][   T51] syz2: Port: 1 Link DOWN
[  101.451635][   T51] lo speed is unknown, defaulting to 1000
[  101.454073][   T51] syz2: Port: 1 Link ACTIVE
[  101.457293][   T51] lo speed is unknown, defaulting to 1000
[  101.459259][   T51] syz2: Port: 1 Link DOWN
[  101.482816][ T8068] netlink: 'syz.1.577': attribute type 4 has an invalid length.
[  101.602658][ T8082] netlink: 'syz.1.580': attribute type 8 has an invalid length.
[  101.690947][ T8096] netlink: 'syz.1.582': attribute type 4 has an invalid length.
[  101.699627][ T8094] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.704251][ T8094] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.674996][ T8166] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[  103.688463][ T8166] bond7: entered promiscuous mode
[  103.690429][ T8166] 8021q: adding VLAN 0 to HW filter on device bond7
[  103.707094][ T8166] 8021q: adding VLAN 0 to HW filter on device bond7
[  103.709608][ T8166] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  103.713902][ T8166] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  103.719751][ T8166] bond7: (slave wireguard0): making interface the new active one
[  103.722913][ T8166] wireguard0: entered promiscuous mode
[  103.726638][ T8166] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  103.747065][ T8166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.749825][ T8166] IPv6: NLM_F_CREATE should be set when creating new route
[  103.752327][ T8166] IPv6: NLM_F_CREATE should be set when creating new route
[  103.762219][ T8166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.766026][ T8166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.776709][ T8166] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  103.794316][ T8166] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[  103.952744][ T8211] netlink: 'syz.2.613': attribute type 1 has an invalid length.
[  103.955491][ T8211] netlink: 'syz.2.613': attribute type 11 has an invalid length.
[  104.028194][ T8219] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  104.955051][ T8290] netlink: 'syz.2.620': attribute type 2 has an invalid length.
[  104.958694][ T8290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.214654][ T8326] tipc: Failed to remove unknown binding: 66,1,1/311149969:2432517490/2432517492
[  105.221773][ T8326] tipc: Failed to remove unknown binding: 66,1,1/311149969:2432517490/2432517492
[  105.224584][ T8326] tipc: Failed to remove unknown binding: 66,1,1/311149969:2432517490/2432517492
[  105.293063][ T8329] __nla_validate_parse: 26 callbacks suppressed
[  105.293080][ T8329] netlink: 44 bytes leftover after parsing attributes in process `syz.0.633'.
[  105.333442][ T8338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.354375][ T8338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.413337][ T8347] syzkaller1: entered promiscuous mode
[  105.415211][ T8347] syzkaller1: entered allmulticast mode
[  105.436264][ T8350] lo speed is unknown, defaulting to 1000
[  105.579190][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'.
[  105.584538][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'.
[  105.621005][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[  105.633455][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[  105.967234][ T8377] netlink: 76 bytes leftover after parsing attributes in process `syz.1.646'.
[  106.034227][ T8377] vlan0: entered promiscuous mode
[  106.108009][ T8387] IPVS: Error connecting to the multicast addr
[  106.110498][ T8387] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  106.120750][ T8387] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.124807][ T8387] netlink: 116 bytes leftover after parsing attributes in process `syz.1.648'.
[  106.230079][ T8405] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  106.254543][ T8403] netlink: 112 bytes leftover after parsing attributes in process `syz.1.653'.
[  106.263447][ T8411] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.293558][ T8411] bond2: (slave ip6gretap1): making interface the new active one
[  106.296653][ T8411] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  106.309784][ T8411] veth3: entered promiscuous mode
[  106.317480][ T8411] bond2: (slave veth3): Enslaving as an active interface with a down link
[  106.324688][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'.
[  106.330212][ T8411] erspan0: entered allmulticast mode
[  106.408888][ T8428] netlink: 108 bytes leftover after parsing attributes in process `syz.2.659'.
[  106.440779][ T8433] validate_nla: 1 callbacks suppressed
[  106.440789][ T8433] netlink: 'syz.2.662': attribute type 4 has an invalid length.
[  106.706056][ T8446] vlan3: entered allmulticast mode
[  106.858853][ T8450] syzkaller1: entered allmulticast mode
[  107.312693][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.360817][ T8469] netlink: 'syz.2.672': attribute type 3 has an invalid length.
[  107.365174][ T8470] pimreg: left allmulticast mode
[  107.393192][ T8470] siw: device registration error -23
[  107.430087][ T8483] bond8: entered promiscuous mode
[  107.436654][ T8483] 8021q: adding VLAN 0 to HW filter on device bond8
[  107.446109][ T8483] bond8 (unregistering): Released all slaves
[  107.467151][ T8486] lo speed is unknown, defaulting to 1000
[  107.559760][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.569264][ T8494] batman_adv: batadv0: Removing interface: dummy0
[  107.573838][ T8494] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  107.576522][ T8494] batman_adv: batadv0: Removing interface: ip6gretap3
[  107.675480][ T8506] lo speed is unknown, defaulting to 1000
[  107.888771][ T8533] vlan0: entered promiscuous mode
[  107.890576][ T8533] macvtap0: entered promiscuous mode
[  107.940629][ T8534] hsr_slave_0: left promiscuous mode
[  108.050176][ T8542] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  108.054302][ T8542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.185749][ T8553] netlink: 'syz.0.691': attribute type 17 has an invalid length.
[  108.296458][ T5894] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.300085][ T5894] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.304726][ T5894] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.307469][ T5894] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.378685][ T8571] netlink: 'syz.0.695': attribute type 11 has an invalid length.
[  108.501494][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  108.624210][ T8582] netlink: 'syz.0.699': attribute type 10 has an invalid length.
[  108.627603][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.630439][ T8582] team0: Device bond0 failed to register rx_handler
[  108.674895][ T8586] netlink: 'syz.0.700': attribute type 5 has an invalid length.
[  108.702482][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.705067][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.710823][ T8590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  108.718223][ T8590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.748917][ T8595] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  108.921115][ T8608] lo speed is unknown, defaulting to 1000
[  109.256309][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.303758][ T8622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.610054][ T8636] unknown channel width for channel at 909000KHz?
[  109.647510][ T8656] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.665354][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.672061][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.686899][ T8662] IPVS: Error connecting to the multicast addr
[  109.696958][ T8656] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.705738][ T8662] netlink: 'syz.1.721': attribute type 2 has an invalid length.
[  109.720726][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.724225][ T8663] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  109.748634][ T8656] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.775379][ T8665] netlink: 'syz.1.722': attribute type 12 has an invalid length.
[  109.813021][ T8656] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.824831][ T8674] syzkaller1: entered promiscuous mode
[  109.826598][ T8674] syzkaller1: entered allmulticast mode
[  109.864930][ T8679] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  109.972324][ T5894] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  109.972844][ T8691] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  110.097533][ T5894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.104142][ T5894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.111741][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.124675][ T5894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.133954][ T8693] netlink: 'syz.0.730': attribute type 1 has an invalid length.
[  110.148016][ T8693] 8021q: adding VLAN 0 to HW filter on device bond3
[  110.156842][ T8693] bond3: (slave geneve2): making interface the new active one
[  110.161974][ T8693] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  110.165332][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.168427][ T5872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.175101][ T8696] lo: entered allmulticast mode
[  110.179827][ T8696] dvmrp8: entered allmulticast mode
[  110.183733][ T5872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.186895][ T5872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.190874][ T8693] bond3: entered promiscuous mode
[  110.193473][ T8693] geneve2: entered promiscuous mode
[  110.211087][ T8696] lo speed is unknown, defaulting to 1000
[  110.248015][ T8694] lo: left allmulticast mode
[  110.249828][ T8694] dvmrp8: left allmulticast mode
[  111.239613][ T8734] __nla_validate_parse: 24 callbacks suppressed
[  111.239630][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'.
[  111.244450][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'.
[  111.416804][ T8761] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  111.418989][ T8761] tipc: Enabled bearer <udp:syz2>, priority 10
[  111.502095][ T8767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.505142][ T8767] syzkaller0: entered promiscuous mode
[  111.507326][ T8767] syzkaller0: entered allmulticast mode
[  111.511437][ T8767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  111.516367][ T8767] tipc: Resetting bearer <eth:syzkaller0>
[  111.520282][ T8767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.752'.
[  111.526167][ T8767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.752'.
[  111.530437][ T8766] tipc: Resetting bearer <eth:syzkaller0>
[  111.547419][ T8766] tipc: Disabling bearer <eth:syzkaller0>
[  111.551267][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  111.615366][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[  111.618126][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[  111.622759][ T8779] netem: change failed
[  111.653584][ T8782] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.757'.
[  111.663683][ T8782] netlink: 76 bytes leftover after parsing attributes in process `syz.1.757'.
[  111.676191][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[  111.679935][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[  111.733696][ T8792] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.778747][ T8796] netlink: 'syz.1.762': attribute type 12 has an invalid length.
[  111.843404][ T8800] netlink: 'syz.1.764': attribute type 1 has an invalid length.
[  111.857221][ T8800] bond7: entered promiscuous mode
[  111.859433][ T8800] 8021q: adding VLAN 0 to HW filter on device bond7
[  111.918667][ T8806] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  111.932938][ T8806] bond8: entered promiscuous mode
[  111.935101][ T8806] 8021q: adding VLAN 0 to HW filter on device bond8
[  111.948023][ T8806] 8021q: adding VLAN 0 to HW filter on device bond8
[  111.950829][ T8806] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  111.956802][ T8806] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  111.963043][ T8806] bond8: (slave vxcan3): making interface the new active one
[  111.965991][ T8806] vxcan3: entered promiscuous mode
[  111.968781][ T8806] bond8: (slave vxcan3): Enslaving as an active interface with an up link
[  112.043454][ T8819] lo speed is unknown, defaulting to 1000
[  112.060306][ T8822] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  112.076744][ T8818] lo speed is unknown, defaulting to 1000
[  112.132461][ T8833] netlink: 'syz.0.771': attribute type 9 has an invalid length.
[  112.259949][ T8848] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  112.338816][ T8857] tap0: tun_chr_ioctl cmd 1074025673
[  112.341088][ T8854] tap0: tun_chr_ioctl cmd 1074025677
[  112.344832][ T8854] tap0: linktype set to 0
[  112.351838][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  112.371244][    C1] net_ratelimit: 2 callbacks suppressed
[  112.371258][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  112.537420][ T8863] tap0: tun_chr_ioctl cmd 2147767521
[  112.574225][ T8868] netlink: 'syz.1.784': attribute type 3 has an invalid length.
[  112.580456][ T8868] lo: entered allmulticast mode
[  112.601540][ T8868] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.605014][ T8868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.619905][ T8868] lo: left allmulticast mode
[  112.765400][ T8881] netlink: 'syz.2.787': attribute type 3 has an invalid length.
[  112.854076][ T8894] netlink: 'syz.0.792': attribute type 11 has an invalid length.
[  113.220582][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.224980][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.299948][ T8940] netlink: 'syz.2.806': attribute type 9 has an invalid length.
[  113.330590][ T8948] netlink: 'syz.2.809': attribute type 11 has an invalid length.
[  113.381262][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  113.386329][ T8958] netlink: 'syz.1.812': attribute type 30 has an invalid length.
[  113.388109][ T8957] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  113.392511][ T8958] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  113.395822][ T8958] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  113.494028][ T8971] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  113.513607][ T8970] lo speed is unknown, defaulting to 1000
[  113.648293][ T8976] 8021q: adding VLAN 0 to HW filter on device bond9
[  113.663349][ T8976] macvlan3: entered promiscuous mode
[  113.665486][ T8976] macvlan3: entered allmulticast mode
[  113.670378][ T8976] bond9: entered promiscuous mode
[  113.673989][ T8976] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  113.677337][ T8976] bond9: left promiscuous mode
[  113.705152][ T8983] syz_tun: entered allmulticast mode
[  113.712287][ T8983] 8021q: adding VLAN 0 to HW filter on device team0
[  113.716320][ T8983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.724457][ T8982] syz_tun: left allmulticast mode
[  114.217359][ T9003] syzkaller1: entered promiscuous mode
[  114.219766][ T9003] syzkaller1: entered allmulticast mode
[  114.431308][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  114.482781][ T9009] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  114.790291][ T9007] lo speed is unknown, defaulting to 1000
[  115.227936][ T9040] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  115.453762][ T9070] netlink: 'syz.0.845': attribute type 11 has an invalid length.
[  115.471246][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  115.826550][ T9098] sctp: [Deprecated]: syz.0.855 (pid 9098) Use of int in max_burst socket option.
[  115.826550][ T9098] Use struct sctp_assoc_value instead
[  115.865432][   T51] IPVS: starting estimator thread 0...
[  115.950315][ T9109] IPv6: NLM_F_REPLACE set, but no existing node found!
[  115.951737][ T9106] IPVS: using max 58 ests per chain, 139200 per kthread
[  116.286650][ T9120] __nla_validate_parse: 36 callbacks suppressed
[  116.286665][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  116.317378][ T9122] batadv_slave_1: entered promiscuous mode
[  116.373379][ T9122] netlink: 256 bytes leftover after parsing attributes in process `syz.1.863'.
[  116.378041][ T9121] batadv_slave_1: left promiscuous mode
[  116.573027][ T9141] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  116.680079][ T9154] bond8: (slave bridge2): making interface the new active one
[  116.683669][ T9154] bond8: (slave bridge2): Enslaving as an active interface with an up link
[  117.270853][ T9186] validate_nla: 4 callbacks suppressed
[  117.270866][ T9186] netlink: 'syz.1.880': attribute type 4 has an invalid length.
[  117.275700][ T9185] netlink: 'syz.1.880': attribute type 4 has an invalid length.
[  117.279649][ T9186] netlink: 'syz.1.880': attribute type 12 has an invalid length.
[  117.311118][ T9185] netlink: 'syz.1.880': attribute type 12 has an invalid length.
[  117.466161][ T9198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.884'.
[  117.469763][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.884'.
[  117.510890][ T9202] syzkaller0: left promiscuous mode
[  117.513027][ T9202] syzkaller0: left allmulticast mode
[  117.515485][ T9202] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.594170][ T9211] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  117.701227][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  117.712941][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  117.717943][ T9220] netlink: 'syz.0.891': attribute type 10 has an invalid length.
[  117.743163][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'.
[  117.759639][ T9220] 8021q: adding VLAN 0 to HW filter on device team0
[  117.764229][ T9220] bond0: (slave team0): Enslaving as an active interface with an up link
[  117.770814][ T9220] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  117.792047][ T9220] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.795241][ T9220] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.818357][ T9230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'.
[  117.825100][ T9230] openvswitch: netlink: Flow key attr not present in new flow.
[  117.828727][ T9230] netlink: 'syz.2.894': attribute type 1 has an invalid length.
[  117.833293][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'.
[  118.557060][ T9237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.560247][ T9237] syzkaller0: entered promiscuous mode
[  118.565177][ T9237] syzkaller0: entered allmulticast mode
[  118.639932][ T9238] tipc: Resetting bearer <eth:syzkaller0>
[  118.649198][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'.
[  118.666778][ T9236] tipc: Resetting bearer <eth:syzkaller0>
[  118.669216][ T9240] netlink: 256 bytes leftover after parsing attributes in process `syz.2.897'.
[  118.679912][ T9236] tipc: Disabling bearer <eth:syzkaller0>
[  118.728333][ T9244] syzkaller0: entered promiscuous mode
[  118.730099][ T9244] syzkaller0: entered allmulticast mode
[  118.733396][ T9244] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  118.737837][ T9244] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  118.743082][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'.
[  118.764885][ T9249] netlink: 'syz.0.901': attribute type 4 has an invalid length.
[  118.767975][   T51] lo speed is unknown, defaulting to 1000
[  118.769855][   T51] syz2: Port: 1 Link ACTIVE
[  118.926418][ T9274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.954761][ T9278] netlink: 'syz.2.910': attribute type 1 has an invalid length.
[  118.965933][ T9278] 8021q: adding VLAN 0 to HW filter on device bond9
[  118.981983][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[  118.984448][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  118.987699][ T9278] bond9: entered promiscuous mode
[  119.024579][ T9287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.027301][ T9288] syzkaller0: entered promiscuous mode
[  119.029320][ T9288] syzkaller0: entered allmulticast mode
[  119.040057][ T9287] tipc: Resetting bearer <eth:syzkaller0>
[  119.047130][ T9287] tipc: Disabling bearer <eth:syzkaller0>
[  119.189034][ T9305] netlink: 'syz.0.917': attribute type 10 has an invalid length.
[  119.194985][ T9305] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.288276][ T9325] bond10: entered promiscuous mode
[  119.290299][ T9325] bond10: entered allmulticast mode
[  119.294038][ T9325] 8021q: adding VLAN 0 to HW filter on device bond10
[  119.327281][ T9325] lo speed is unknown, defaulting to 1000
[  119.449644][ T9336] 8021q: adding VLAN 0 to HW filter on device bond11
[  119.461222][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.797066][ T9353] veth3: left promiscuous mode
[  119.810038][ T9353] bond3: left promiscuous mode
[  119.812489][ T9353] geneve2: left promiscuous mode
[  119.820765][ T9353] vlan2: left allmulticast mode
[  119.825620][ T9353] bond6: left promiscuous mode
[  119.831076][ T9353] bond7: left promiscuous mode
[  119.833630][ T9353] wireguard0: left promiscuous mode
[  119.850189][ T9353] bond9: left promiscuous mode
[  119.854152][ T9353] bond10: left promiscuous mode
[  119.856057][ T9353] bond10: left allmulticast mode
[  119.859711][ T5872] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.864318][ T5872] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.867633][ T5872] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.870876][ T5872] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.146593][ T9362] 8021q: adding VLAN 0 to HW filter on device bond10
[  120.188833][ T9372] lo speed is unknown, defaulting to 1000
[  120.318700][ T9391] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.462837][ T9402] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  120.465850][ T9403] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  120.909444][ T9430] bond12: entered promiscuous mode
[  120.914920][ T9430] bond12: entered allmulticast mode
[  120.917315][ T9430] 8021q: adding VLAN 0 to HW filter on device bond12
[  120.952372][ T9438] veth1: entered promiscuous mode
[  120.954291][ T9438] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  120.960267][ T9438] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  121.150931][ T9391] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  121.386252][ T9453] __nla_validate_parse: 24 callbacks suppressed
[  121.386262][ T9453] netlink: 52 bytes leftover after parsing attributes in process `syz.1.957'.
[  121.591046][ T9472] geneve3: entered promiscuous mode
[  121.595399][ T9472] geneve3: entered allmulticast mode
[  121.601022][ T5872] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 45755 - 0
[  121.611203][ T5872] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 40745 - 0
[  121.616018][ T5872] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 45755 - 0
[  121.618671][ T5872] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 40745 - 0
[  121.622489][ T5872] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 45755 - 0
[  121.627140][ T5872] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 40745 - 0
[  121.630114][ T5872] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 45755 - 0
[  121.633111][ T5872] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 40745 - 0
[  121.797088][ T9490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.968'.
[  121.826591][ T9492] netlink: 80 bytes leftover after parsing attributes in process `syz.0.969'.
[  121.846225][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'.
[  122.054726][ T9525] lo speed is unknown, defaulting to 1000
[  122.171640][ T9533] bond6: entered promiscuous mode
[  122.173767][ T9533] 8021q: adding VLAN 0 to HW filter on device bond6
[  122.177464][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.977'.
[  122.266239][ T9533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.977'.
[  122.298700][ T9538] validate_nla: 7 callbacks suppressed
[  122.298710][ T9538] netlink: 'syz.0.978': attribute type 6 has an invalid length.
[  122.304290][ T9538] netlink: 'syz.0.978': attribute type 6 has an invalid length.
[  122.333298][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.979'.
[  122.360682][ T9545] netlink: 'syz.2.981': attribute type 21 has an invalid length.
[  122.363480][ T9545] netlink: 'syz.2.981': attribute type 6 has an invalid length.
[  122.366388][ T9545] netlink: 64 bytes leftover after parsing attributes in process `syz.2.981'.
[  122.409940][ T9554] netlink: 48 bytes leftover after parsing attributes in process `syz.0.983'.
[  122.421343][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  122.479302][ T9562] netlink: 'syz.0.986': attribute type 4 has an invalid length.
[  122.489610][ T4695] lo speed is unknown, defaulting to 1000
[  122.492128][ T9562] netlink: 'syz.0.986': attribute type 4 has an invalid length.
[  122.494019][ T5310] lo speed is unknown, defaulting to 1000
[  122.497971][ T9562] netlink: 'syz.0.986': attribute type 1 has an invalid length.
[  122.501006][ T9562] netlink: 'syz.0.986': attribute type 2 has an invalid length.
[  122.504638][ T9562] netlink: 'syz.0.986': attribute type 8 has an invalid length.
[  122.506981][ T9562] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.986'.
[  122.576797][ T9571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.579721][ T9571] syzkaller0: entered promiscuous mode
[  122.581712][ T9571] syzkaller0: entered allmulticast mode
[  122.588931][ T9571] tipc: Resetting bearer <eth:syzkaller0>
[  122.595244][ T9570] tipc: Resetting bearer <eth:syzkaller0>
[  122.599001][ T9570] tipc: Disabling bearer <eth:syzkaller0>
[  122.633081][ T9573] veth0_to_bridge: entered promiscuous mode
[  122.645509][ T9575] veth0_to_bridge: left promiscuous mode
[  122.665900][ T9578] lo speed is unknown, defaulting to 1000
[  122.785981][ T9578] ip6gretap0: entered promiscuous mode
[  122.788303][ T9578] macsec2: entered promiscuous mode
[  122.791617][ T9578] ip6gretap0: left promiscuous mode
[  122.918779][ T9591] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  122.974591][ T9591] 8021q: adding VLAN 0 to HW filter on device bond11
[  123.193956][ T9545] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  123.437751][ T9613] pim6reg1: entered promiscuous mode
[  123.439740][ T9613] pim6reg1: entered allmulticast mode
[  123.693001][ T9625] pimreg: entered allmulticast mode
[  123.695358][ T9625] pimreg: left allmulticast mode
[  123.805596][ T9631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.966171][ T9631] tipc: Disabling bearer <eth:syzkaller0>
[  124.421296][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  124.699762][ T9711] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.704436][ T9711] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  124.858776][ T9719] batman_adv: batadv0: Adding interface: ip6gretap3
[  124.862310][ T9719] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.870945][ T9719] batman_adv: batadv0: Interface activated: ip6gretap3
[  125.009550][ T9734] delete_channel: no stack
[  125.158884][ T9764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.161256][ T9764] IPv6: NLM_F_CREATE should be set when creating new route
[  125.320797][ T9786] bridge4: entered allmulticast mode
[  125.365309][ T9790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.369313][ T9790] syzkaller0: MTU too low for tipc bearer
[  125.373765][ T9790] tipc: Disabling bearer <eth:syzkaller0>
[  125.439281][ T9796] 8021q: adding VLAN 0 to HW filter on device bond14
[  125.504079][ T9804] Bluetooth: MGMT ver 1.23
[  125.549151][ T9812] syzkaller1: entered promiscuous mode
[  125.550924][ T9812] syzkaller1: entered allmulticast mode
[  125.646640][ T9823] bond4: option mode: unable to set because the bond device is up
[  125.654503][ T9823] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  125.658539][ T9823] bond4: (slave macvlan3): Enslaving as a backup interface with a down link
[  125.670760][ T9823] bond8: (slave vxcan3): Releasing backup interface
[  125.675214][ T9823] vxcan3: left promiscuous mode
[  125.680974][ T9823] bond4: (slave macvlan3): Releasing backup interface
[  125.930755][ T9850] syzkaller0: left promiscuous mode
[  125.937161][ T9850] syzkaller0: left allmulticast mode
[  125.958360][ T9855] 8021q: adding VLAN 0 to HW filter on device bond7
[  126.021925][ T9865] bond7: (slave gretap1): making interface the new active one
[  126.025534][ T9865] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  126.587977][ T9876] __nla_validate_parse: 66 callbacks suppressed
[  126.587992][ T9876] netlink: 200040 bytes leftover after parsing attributes in process `syz.2.1080'.
[  126.782932][ T9865] syz.0.1078 (9865) used greatest stack depth: 19632 bytes left
[  126.857466][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  126.867361][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'.
[  126.880683][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'.
[  126.886592][ T9513] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.890265][ T9513] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.897885][ T9513] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.900389][ T9513] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.004614][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[  127.122834][ T9910] lo speed is unknown, defaulting to 1000
[  127.150193][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'.
[  127.477011][ T9933] tap0: tun_chr_ioctl cmd 1074025680
[  127.480220][ T9933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.483055][ T9933] D: renamed from syzkaller0
[  127.485135][ T9933] tipc: Disabling bearer <eth:syzkaller0>
[  127.789944][ T9956] lo speed is unknown, defaulting to 1000
[  127.916998][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'.
[  127.920070][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'.
[  127.943902][ T9956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'.
[  127.988966][ T9977] siw: device registration error -23
[  128.129282][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'.
[  128.136584][ T9985] macvlan0: entered promiscuous mode
[  128.138445][ T9985] bond0: entered promiscuous mode
[  128.140266][ T9985] bond_slave_0: entered promiscuous mode
[  128.142970][ T9985] bond_slave_1: entered promiscuous mode
[  128.146231][ T9985] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  128.312265][T10006] bond8: (slave geneve4): Enslaving as an active interface with an up link
[  128.315071][ T5894] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 20000 - 0
[  128.317937][ T5894] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 20000 - 0
[  128.320507][ T5894] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 20000 - 0
[  128.324990][ T5894] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 20000 - 0
[  128.350816][T10019] validate_nla: 10 callbacks suppressed
[  128.350826][T10019] netlink: 'syz.0.1117': attribute type 3 has an invalid length.
[  128.418027][T10033] bridge2: entered allmulticast mode
[  128.420079][T10030] syzkaller0: entered promiscuous mode
[  128.422990][T10030] syzkaller0: entered allmulticast mode
[  128.555559][T10018] bridge2: left allmulticast mode
[  128.560093][T10055] gretap1: entered promiscuous mode
[  128.562959][T10055] gretap1: entered allmulticast mode
[  128.608983][T10064] netlink: 'syz.0.1128': attribute type 1 has an invalid length.
[  128.705881][T10072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.782324][T10083] openvswitch: netlink: Flow key attr not present in new flow.
[  128.837222][T10092] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.896873][T10098] lo speed is unknown, defaulting to 1000
[  128.919004][T10108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.937263][T10108] syzkaller0: entered promiscuous mode
[  128.939163][T10108] syzkaller0: entered allmulticast mode
[  128.999982][T10109] tipc: Resetting bearer <eth:syzkaller0>
[  129.525493][T10150] netlink: 'syz.0.1150': attribute type 17 has an invalid length.
[  129.557595][T10150] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  129.569300][ T8562] lo speed is unknown, defaulting to 1000
[  129.569375][ T9513] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.572900][ T8562] syz2: Port: 1 Link DOWN
[  129.574561][ T9513] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.577806][ T9513] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 45755 - 0
[  129.580494][ T9513] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 40745 - 0
[  129.584083][ T9513] netdevsim netdevsim0 eth0: unset [1, 3] type 2 family 0 port 20000 - 0
[  129.587396][ T9513] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.590019][ T9513] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.594982][ T9513] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 45755 - 0
[  129.598417][ T9513] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 40745 - 0
[  129.601440][ T9513] netdevsim netdevsim0 eth1: unset [1, 3] type 2 family 0 port 20000 - 0
[  129.605395][T10153] netlink: 'syz.0.1150': attribute type 17 has an invalid length.
[  129.606170][ T9513] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.611775][ T9513] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.614702][ T9513] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 45755 - 0
[  129.617538][ T9513] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 40745 - 0
[  129.620133][ T9513] netdevsim netdevsim0 eth2: unset [1, 3] type 2 family 0 port 20000 - 0
[  129.623121][ T9513] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.625692][T10146] nbd1: detected capacity change from 0 to 127
[  129.625787][ T9513] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.630585][ T9513] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 45755 - 0
[  129.633495][ T9513] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 40745 - 0
[  129.636091][ T9513] netdevsim netdevsim0 eth3: unset [1, 3] type 2 family 0 port 20000 - 0
[  129.738633][T10107] tipc: Resetting bearer <eth:syzkaller0>
[  129.762341][T10107] tipc: Disabling bearer <eth:syzkaller0>
[  129.791579][T10145] nbd2: detected capacity change from 0 to 127
[  129.803397][   T55] block nbd1: Receive control failed (result -104)
[  129.803402][T10162] block nbd2: Receive control failed (result -32)
[  129.803588][   T56] block nbd2: Receive control failed (result -32)
[  129.805607][ T6519] block nbd1: Receive control failed (result -32)
[  129.831769][T10167] netlink: 'syz.2.1153': attribute type 1 has an invalid length.
[  129.860038][T10167] 8021q: adding VLAN 0 to HW filter on device bond15
[  129.868384][T10168] 8021q: adding VLAN 0 to HW filter on device bond15
[  129.870828][T10168] bond15: (slave vcan1): The slave device specified does not support setting the MAC address
[  129.875522][T10168] bond15: (slave vcan1): Error -95 calling set_mac_address
[  129.892817][T10167] macvlan1: entered promiscuous mode
[  129.894885][T10167] macvlan1: entered allmulticast mode
[  129.897616][T10167] bond15: entered promiscuous mode
[  129.900129][T10167] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  129.907199][T10167] bond15: left promiscuous mode
[  130.031027][T10185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.034462][T10185] syzkaller0: entered promiscuous mode
[  130.036235][T10185] syzkaller0: entered allmulticast mode
[  130.052883][T10185] tipc: Resetting bearer <eth:syzkaller0>
[  130.056500][T10184] tipc: Resetting bearer <eth:syzkaller0>
[  130.065167][T10184] tipc: Disabling bearer <eth:syzkaller0>
[  130.159067][T10199] bond0: (slave team0): Releasing backup interface
[  130.164801][T10199] bond0: (slave wlan1): Releasing backup interface
[  130.169615][T10199] bond1: (slave vti0): Releasing backup interface
[  130.173694][T10199] bond2: (slave ip6gretap1): Releasing active interface
[  130.175860][T10199] bond2: (slave ip6gretap1): the permanent HWaddr of slave - d2:91:c1:2e:d2:58 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  130.182549][T10199] bond2: (slave veth3): Releasing active interface
[  130.200301][T10199] bond3: (slave geneve2): Releasing active interface
[  130.208384][T10199] geneve2: left promiscuous mode
[  130.216374][T10199] batman_adv: batadv0: Removing interface: ip6gretap3
[  130.221103][T10199] bond7: (slave gretap1): Releasing active interface
[  130.224180][T10204] netlink: 'syz.2.1165': attribute type 10 has an invalid length.
[  130.227717][T10199] bond8: (slave geneve4): Releasing backup interface
[  130.248826][T10206] nbd: must specify an index to disconnect
[  130.270650][T10199] netlink: 'syz.0.1162': attribute type 10 has an invalid length.
[  130.275008][T10199] bond0: (slave wlan1): refused to change device type
[  130.963764][T10287] netlink: 'syz.0.1171': attribute type 4 has an invalid length.
[  131.073419][T10305] lo speed is unknown, defaulting to 1000
[  131.289230][T10330] syzkaller1: entered promiscuous mode
[  131.293338][T10330] syzkaller1: entered allmulticast mode
[  131.360875][T10334] : entered promiscuous mode
[  131.443333][T10336] vlan0: entered allmulticast mode
[  131.445009][T10336] bridge0: entered allmulticast mode
[  131.446872][T10336] bridge4: port 1(vlan0) entered blocking state
[  131.449141][T10336] bridge4: port 1(vlan0) entered disabled state
[  131.454396][T10336] vlan0: entered promiscuous mode
[  131.456467][T10336] bridge0: entered promiscuous mode
[  131.463087][T10336] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  131.603542][T10356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.619892][T10345] __nla_validate_parse: 29 callbacks suppressed
[  131.619902][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'.
[  131.635922][T10345] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  131.664388][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'.
[  131.683930][T10358] bridge5: port 1(veth9) entered blocking state
[  131.686961][T10358] bridge5: port 1(veth9) entered disabled state
[  131.689882][T10358] veth9: entered allmulticast mode
[  131.695983][T10358] veth9: entered promiscuous mode
[  131.703945][T10358] veth0_to_bond: left allmulticast mode
[  131.706347][T10358] veth0_to_bond: left promiscuous mode
[  131.708447][T10358] bridge1: port 2(veth0_to_bond) entered disabled state
[  131.712058][T10358] bridge5: port 2(veth0_to_bond) entered blocking state
[  131.714331][T10358] bridge5: port 2(veth0_to_bond) entered disabled state
[  131.716683][T10358] veth0_to_bond: entered allmulticast mode
[  131.719070][T10358] veth0_to_bond: entered promiscuous mode
[  131.805743][T10361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1190'.
[  131.808782][T10361] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1190'.
[  131.811980][T10361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1190'.
[  131.818267][T10361] veth0_to_bond: left allmulticast mode
[  131.820104][T10361] veth0_to_bond: left promiscuous mode
[  131.822225][T10361] bridge5: port 2(veth0_to_bond) entered disabled state
[  131.826084][T10361] bond0: (slave bond_slave_0): Releasing backup interface
[  131.828636][T10361] bond_slave_0: left promiscuous mode
[  131.830505][T10361] bond_slave_0: left allmulticast mode
[  131.835002][T10361] bond0: (slave bond_slave_1): Releasing backup interface
[  131.838843][T10361] bond_slave_1: left promiscuous mode
[  131.841436][T10361] bond_slave_1: left allmulticast mode
[  131.847252][T10361] team0: Port device team_slave_0 removed
[  131.850286][T10361] team0: Port device team_slave_1 removed
[  131.855861][T10361] bond1: (slave ip6gretap1): Removing an active aggregator
[  131.859259][T10361] bond1: (slave ip6gretap1): Releasing backup interface
[  131.862851][T10361] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 5a:a8:0f:47:ed:82 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  131.874757][T10361] bond1: (slave veth3): Releasing backup interface
[  131.877985][T10361] veth5: left allmulticast mode
[  131.879651][T10361] veth5: left promiscuous mode
[  131.881880][T10361] bridge1: port 1(veth5) entered disabled state
[  131.886058][T10361] bond3: (slave geneve2): Releasing active interface
[  131.889177][T10361] bond4: (slave bond5): Releasing backup interface
[  131.894029][T10361] bond7: (slave wireguard0): Releasing backup interface
[  131.896129][T10361] bond7: (slave wireguard1): making interface the new active one
[  131.899733][T10361] bond7: (slave wireguard1): Releasing backup interface
[  131.903086][T10361] bond8: (slave bridge2): Releasing active interface
[  131.907338][T10361] vlan0: left promiscuous mode
[  131.908869][T10361] bridge0: left promiscuous mode
[  131.910579][T10361] bridge4: port 1(vlan0) entered disabled state
[  131.914245][T10361] veth9: left allmulticast mode
[  131.915738][T10361] veth9: left promiscuous mode
[  131.917263][T10361] bridge5: port 1(veth9) entered disabled state
[  132.012926][T10370] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  132.130192][T10384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.134265][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'.
[  132.138168][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1198'.
[  132.273093][T10404] gtp0: entered promiscuous mode
[  132.275992][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'.
[  132.288451][T10406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1203'.
[  132.291572][T10406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1203'.
[  132.363844][T10414] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  132.366617][T10414] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  132.369240][T10410] netlink: 'syz.2.1204': attribute type 1 has an invalid length.
[  132.372033][T10414] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  132.384791][T10414] lo speed is unknown, defaulting to 1000
[  132.574219][T10434] netlink: 'syz.2.1210': attribute type 1 has an invalid length.
[  132.582584][ T1362] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.604297][T10438] pim6reg: entered allmulticast mode
[  132.606874][T10438] pim6reg: left allmulticast mode
[  132.606951][T10434] openvswitch: netlink: Flow actions attr not present in new flow.
[  132.613124][T10434] trusted_key: syz.2.1210 sent an empty control message without MSG_MORE.
[  132.868650][T10467] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.891825][T10462] delete_channel: no stack
[  132.924936][T10467] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.963817][T10467] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.014686][T10467] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.075616][ T5872] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.085246][ T9513] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.096734][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.106954][ T5872] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.140654][T10496] netlink: ct family unspecified
[  133.142722][T10496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.184972][T10497] openvswitch: netlink: Multiple metadata blocks provided
[  133.236201][T10515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.238799][T10515] syzkaller0: entered promiscuous mode
[  133.240714][T10515] syzkaller0: entered allmulticast mode
[  133.246346][T10515] tipc: Resetting bearer <eth:syzkaller0>
[  133.248779][T10514] tipc: Resetting bearer <eth:syzkaller0>
[  133.256506][T10514] tipc: Disabling bearer <eth:syzkaller0>
[  133.361021][T10524] validate_nla: 1 callbacks suppressed
[  133.361031][T10524] netlink: 'syz.0.1235': attribute type 7 has an invalid length.
[  133.385988][T10524] team0: Mode "" not found
[  133.607660][ T5894] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  134.526688][T10580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.610056][T10582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.722871][T10608] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  134.860022][T10629] vlan1: entered promiscuous mode
[  134.864854][T10629] hsr_slave_1: entered promiscuous mode
[  134.867345][T10629] vlan1: entered allmulticast mode
[  134.869383][T10629] hsr_slave_1: entered allmulticast mode
[  135.029994][T10646] lo: entered allmulticast mode
[  135.035280][T10646] dvmrp1: entered allmulticast mode
[  135.038224][T10645] lo: left allmulticast mode
[  135.060270][T10648] netlink: 'syz.1.1273': attribute type 3 has an invalid length.
[  135.065020][T10648] lo: entered allmulticast mode
[  135.067250][T10648] dvmrp1: left allmulticast mode
[  135.115940][T10648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.123609][T10647] lo: left allmulticast mode
[  135.281440][T10663] netlink: 'syz.0.1278': attribute type 10 has an invalid length.
[  135.378846][T10673] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  135.393980][T10675] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.444907][T10675] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.475595][T10675] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.535619][T10675] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.603144][ T5872] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.610309][ T5872] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.618340][ T5894] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.625219][ T5894] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.650544][T10687] netlink: 'syz.1.1284': attribute type 9 has an invalid length.
[  135.653858][T10687] netlink: 'syz.1.1284': attribute type 7 has an invalid length.
[  135.656858][T10687] netlink: 'syz.1.1284': attribute type 8 has an invalid length.
[  135.821405][T10700] batadv3: entered allmulticast mode
[  135.823697][T10700] 8021q: adding VLAN 0 to HW filter on device batadv3
[  135.913249][T10711] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.959124][T10711] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.975686][T10714] 8021q: adding VLAN 0 to HW filter on device bond16
[  135.979178][T10714] bond16: entered promiscuous mode
[  135.980788][T10714] bond16: entered allmulticast mode
[  135.983866][T10714] bond0: (slave bond16): Enslaving as an active interface with an up link
[  136.004098][T10711] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.044425][T10711] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.180351][T10726] delete_channel: no stack
[  136.444368][T10749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.447601][T10749] syzkaller0: entered promiscuous mode
[  136.449725][T10749] syzkaller0: entered allmulticast mode
[  136.457141][T10750] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  136.465783][T10749] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  136.470961][T10748] tipc: Resetting bearer <eth:syzkaller0>
[  136.477946][T10748] tipc: Disabling bearer <eth:syzkaller0>
[  136.741558][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  137.012717][T10786] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  137.114544][T10794] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  137.127374][T10794] 8021q: adding VLAN 0 to HW filter on device bond10
[  137.138496][T10794] bond10: (slave veth9): Enslaving as an active interface with a down link
[  137.144277][T10794] gretap2: entered promiscuous mode
[  137.147524][T10794] bond10: (slave gretap2): making interface the new active one
[  137.150689][T10794] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  137.157489][T10794] macvlan2: entered promiscuous mode
[  137.159537][T10794] macvlan2: entered allmulticast mode
[  137.161895][T10794] bond10: entered promiscuous mode
[  137.163746][T10794] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  137.166100][T10794] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  137.172679][T10794] bond10: left promiscuous mode
[  137.223628][T10801] syzkaller1: entered promiscuous mode
[  137.225523][T10801] syzkaller1: entered allmulticast mode
[  137.230088][T10801] netlink: 'syz.2.1313': attribute type 4 has an invalid length.
[  137.232728][T10803] __nla_validate_parse: 33 callbacks suppressed
[  137.232740][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  137.239535][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'.
[  137.244802][T10803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.269572][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  137.289172][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'.
[  137.417999][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'.
[  137.467466][T10816] syzkaller1: entered allmulticast mode
[  137.520680][T10807] IPv6: NLM_F_CREATE should be specified when creating new route
[  137.722910][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.729522][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.738745][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.745109][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.825561][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'.
[  137.828576][T10834] netlink: 'syz.1.1324': attribute type 1 has an invalid length.
[  137.832584][T10834] netlink: 'syz.1.1324': attribute type 2 has an invalid length.
[  137.835422][T10834] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1324'.
[  137.974062][T10843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.979286][T10843] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  137.993305][ T5894] bond0: (slave batadv0): interface is now down
[  137.997412][ T5894] bond0: now running without any active interface!
[  138.076504][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'.
[  138.153945][T10853] tunl0: entered promiscuous mode
[  138.155855][T10853] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  138.267977][T10871] vlan5: entered allmulticast mode
[  138.269595][T10871] bridge0: entered allmulticast mode
[  138.317279][T10874] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  138.332205][T10876] lo speed is unknown, defaulting to 1000
[  138.355702][ T8562] IPVS: starting estimator thread 0...
[  138.373124][T10880] validate_nla: 1 callbacks suppressed
[  138.373137][T10880] netlink: 'syz.1.1337': attribute type 1 has an invalid length.
[  138.377759][T10880] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1337'.
[  138.385593][T10882] bond0: (slave bond16): Releasing backup interface
[  138.388215][T10882] bond16: left promiscuous mode
[  138.389854][T10882] bond16: left allmulticast mode
[  138.400460][T10884] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1339'.
[  138.427068][T10884] batadv_slave_0: entered promiscuous mode
[  138.442967][T10878] IPVS: using max 92 ests per chain, 220800 per kthread
[  138.506851][T10901] netlink: 'syz.1.1343': attribute type 5 has an invalid length.
[  138.540711][   T13] IPVS: stop unused estimator thread 0...
[  138.549384][T10901] lo speed is unknown, defaulting to 1000
[  138.566548][T10904] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  138.803614][T10924] netlink: 'syz.2.1350': attribute type 1 has an invalid length.
[  138.823745][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  138.839547][T10924] veth11: entered promiscuous mode
[  138.843759][T10924] bond17: (slave veth11): Enslaving as a backup interface with a down link
[  138.852737][T10924] 8021q: adding VLAN 0 to HW filter on device bond17
[  139.224143][T10956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.227274][T10955] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.231824][T10959] syzkaller0: entered promiscuous mode
[  139.233733][T10959] syzkaller0: entered allmulticast mode
[  139.247499][T10955] tipc: Resetting bearer <eth:syzkaller0>
[  139.254647][T10953] tipc: Resetting bearer <eth:syzkaller0>
[  139.259500][T10953] tipc: Disabling bearer <eth:syzkaller0>
[  139.264692][T10958] tipc: Cannot configure node identity twice
[  139.266993][T10958] netlink: 'syz.0.1361': attribute type 4 has an invalid length.
[  139.269956][T10958] netlink: 'syz.0.1361': attribute type 4 has an invalid length.
[  139.274692][ T8562] lo speed is unknown, defaulting to 1000
[  139.276526][ T8562] syz2: Port: 1 Link ACTIVE
[  139.280736][ T8562] lo speed is unknown, defaulting to 1000
[  139.283767][ T8562] syz2: Port: 1 Link DOWN
[  140.042076][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.050192][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.137894][T11010] macvlan2: entered allmulticast mode
[  140.139796][T11010] veth1_vlan: entered allmulticast mode
[  140.142478][T11010] veth1_vlan: left allmulticast mode
[  140.449324][T11047] netlink: 'syz.2.1384': attribute type 1 has an invalid length.
[  140.517651][T11054] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  140.756130][T11082] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.141585][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  160.102196][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  160.105040][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  160.107939][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  160.110829][   T60] block nbd1: Connection timed out, retrying (0/2 alive)
[  160.114519][   T11] block nbd1: Dead connection, failed to find a fallback
[  160.117345][   T11] block nbd1: shutting down sockets
[  160.119480][   T11] blk_print_req_error: 138 callbacks suppressed
[  160.119491][   T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.126338][T11111] block nbd2: Connection timed out, retrying (0/2 alive)
[  160.129114][T11111] block nbd2: Connection timed out, retrying (0/2 alive)
[  160.132446][   T11] buffer_io_error: 138 callbacks suppressed
[  160.132457][   T11] Buffer I/O error on dev nbd1, logical block 2, async page read
[  160.137894][   T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.141827][T11111] block nbd2: Connection timed out, retrying (0/2 alive)
[  160.144741][T11111] block nbd2: Connection timed out, retrying (0/2 alive)
[  160.147718][T11111] block nbd2: Dead connection, failed to find a fallback
[  160.150379][T11111] block nbd2: shutting down sockets
[  160.152460][   T11] Buffer I/O error on dev nbd1, logical block 1, async page read
[  160.155242][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.158305][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[  160.160651][   T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.163802][T11111] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.166598][T11111] Buffer I/O error on dev nbd2, logical block 3, async page read
[  160.168903][T11111] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.171993][   T11] Buffer I/O error on dev nbd1, logical block 3, async page read
[  160.174951][T11111] Buffer I/O error on dev nbd2, logical block 2, async page read
[  160.178016][T11111] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.182011][ T8342] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.182108][T11111] Buffer I/O error on dev nbd2, logical block 1, async page read
[  160.185574][ T8342] Buffer I/O error on dev nbd1, logical block 0, async page read
[  160.185685][ T8342] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.188569][T11111] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  160.193852][ T8342] Buffer I/O error on dev nbd1, logical block 1, async page read
[  160.195731][T11111] Buffer I/O error on dev nbd2, logical block 0, async page read
[  160.200775][ T8342] ldm_validate_partition_table(): Disk read failed.
[  160.203453][ T6988] ldm_validate_partition_table(): Disk read failed.
[  160.206119][ T8342] Dev nbd1: unable to read RDB block 0
[  160.207638][ T6988] Dev nbd2: unable to read RDB block 0
[  160.210684][ T8342]  nbd1: unable to read partition table
[  160.213419][ T6988]  nbd2: unable to read partition table
[  160.219995][ T8342] ldm_validate_partition_table(): Disk read failed.
[  160.224070][ T8342] Dev nbd1: unable to read RDB block 0
[  160.225403][ T6988] ldm_validate_partition_table(): Disk read failed.
[  160.227224][ T8342]  nbd1: unable to read partition table
[  160.228789][ T6988] Dev nbd2: unable to read RDB block 0
[  160.234188][ T6988]  nbd2: unable to read partition table
[  170.501401][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  171.549341][T11121] __nla_validate_parse: 21 callbacks suppressed
[  171.549356][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'.
[  171.555807][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1400'.
[  171.573730][T11119] bridge0: port 1(erspan0) entered blocking state
[  171.579722][T11119] bridge0: port 1(erspan0) entered disabled state
[  171.583010][T11119] erspan0: entered allmulticast mode
[  171.585267][T11119] erspan0: entered promiscuous mode
[  171.589812][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'.
[  171.620456][T11130] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1403'.
[  171.664686][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'.
[  171.670369][T11142] IPVS: set_ctl: invalid protocol: 50 172.20.20.57:20000
[  171.688756][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'.
[  171.703810][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'.
[  171.732323][T11147] netlink: 'syz.1.1410': attribute type 28 has an invalid length.
[  171.735459][T11147] netlink: 'syz.1.1410': attribute type 1 has an invalid length.
[  171.737908][T11147] netlink: 'syz.1.1410': attribute type 2 has an invalid length.
[  171.747504][T11147] nbd: nbd1 already in use
[  171.749069][T11147] block nbd1: NBD_DISCONNECT
[  171.750586][T11147] block nbd1: Send disconnect failed -32
[  171.752630][T11147] block nbd1: Send disconnect failed -32
[  171.773552][T11147] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  171.824138][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1414'.
[  171.837568][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'.
[  171.844203][T11164] vlan5: entered promiscuous mode
[  171.853404][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1417'.
[  172.019152][T11187] lo speed is unknown, defaulting to 1000
[  172.227365][T11226] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  172.461034][T11252] : renamed from pim6reg1
[  172.495576][T11242] lo speed is unknown, defaulting to 1000
[  173.386879][T11278] nbd: must specify at least one socket
[  173.562341][T11290] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  173.653886][T11299] nftables ruleset with unbound chain
[  173.711272][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  174.383752][T11311] pimreg: entered allmulticast mode
[  174.386967][T11311] pimreg: left allmulticast mode
[  174.503655][T11324] syzkaller1: entered promiscuous mode
[  174.505679][T11324] syzkaller1: entered allmulticast mode
[  174.580232][T11330] lo speed is unknown, defaulting to 1000
[  174.624383][T11335] lo speed is unknown, defaulting to 1000
[  174.751219][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  174.955284][T11373] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  174.957880][T11373] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  175.781267][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  175.875430][T11393] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.983948][T11411] netlink: 'syz.0.1485': attribute type 3 has an invalid length.
[  175.998698][T11411] bridge2: entered allmulticast mode
[  176.012115][T11411] siw: device registration error -23
[  176.017511][T11411] erspan0: left allmulticast mode
[  176.027530][T11421] netlink: 'syz.1.1489': attribute type 1 has an invalid length.
[  176.032455][T11411] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.036360][T11411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.043476][  T973] lo speed is unknown, defaulting to 1000
[  176.046738][  T973] syz2: Port: 1 Link ACTIVE
[  176.062291][T11421] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address
[  176.066055][T11421] bond12: (slave vxcan5): Error -95 calling set_mac_address
[  176.072721][T11410] bridge2: left allmulticast mode
[  176.084783][ T5894] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  176.110009][T11427] gretap1: entered promiscuous mode
[  176.113433][T11427] bond12: (slave gretap1): making interface the new active one
[  176.116024][T11427] bond12: (slave gretap1): Enslaving as an active interface with an up link
[  176.278197][T11434] lo speed is unknown, defaulting to 1000
[  176.821469][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  176.969688][T11446] __nla_validate_parse: 27 callbacks suppressed
[  176.969700][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'.
[  176.980015][T11448] sctp: [Deprecated]: syz.2.1496 (pid 11448) Use of int in maxseg socket option.
[  176.980015][T11448] Use struct sctp_assoc_value instead
[  177.035301][T11454] tunl0: left promiscuous mode
[  177.039413][T11454] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1499'.
[  177.246927][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'.
[  177.861322][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  177.877434][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'.
[  177.889837][T11513] erspan0: left allmulticast mode
[  177.893133][T11513] erspan0: left promiscuous mode
[  177.895247][T11513] bridge0: port 1(erspan0) entered disabled state
[  178.046873][T11537] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1524'.
[  178.073497][T11550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'.
[  178.087545][T11550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.095271][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'.
[  178.099033][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'.
[  178.126623][T11553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.230962][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'.
[  178.315737][T11571] batadv_slave_0: left promiscuous mode
[  178.319880][T11571] vlan0: left promiscuous mode
[  178.324810][T11571] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  178.333262][T11571] tipc: Resetting bearer <eth:syzkaller0>
[  178.336809][T11571] syzkaller0: left promiscuous mode
[  178.338924][T11571] syzkaller0: left allmulticast mode
[  178.346283][T11571] macsec1: left promiscuous mode
[  178.348912][T11571] macsec1: left allmulticast mode
[  178.355919][T11571] vlan2: left promiscuous mode
[  178.357525][T11571] hsr_slave_1: left promiscuous mode
[  178.359250][T11571] vlan2: left allmulticast mode
[  178.361056][T11571] hsr_slave_1: left allmulticast mode
[  178.370807][T11571] vlan3: left allmulticast mode
[  178.376941][T11571] bond7: left promiscuous mode
[  178.382074][T11571] bond8: left promiscuous mode
[  178.400100][T11571] bridge4: left allmulticast mode
[  178.406866][T11571] batadv3: left allmulticast mode
[  178.413647][T11571] gretap1: left promiscuous mode
[  178.419445][ T5894] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.430302][ T5894] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.433786][ T5894] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.436604][ T5894] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.460354][T11588] veth11: entered allmulticast mode
[  178.474861][T11590] netlink: 'syz.1.1536': attribute type 3 has an invalid length.
[  178.560417][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'.
[  178.769447][T11620] vxcan2: entered promiscuous mode
[  178.901352][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  178.941824][T11632] IPVS: persistence engine module ip_vs_pe_ not found
[  179.029779][T11641] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.085397][T11641] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.133955][T11641] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.174895][T11641] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.226156][ T9513] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.236433][ T9513] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.239931][ T9513] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.247050][ T9513] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.276000][T11649] netlink: 'syz.1.1555': attribute type 1 has an invalid length.
[  179.355964][T11663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.360093][T11663] syzkaller0: entered promiscuous mode
[  179.363049][T11663] syzkaller0: entered allmulticast mode
[  179.487465][T11671] sctp: [Deprecated]: syz.1.1562 (pid 11671) Use of int in maxseg socket option.
[  179.487465][T11671] Use struct sctp_assoc_value instead
[  179.598983][T11678] team0: entered promiscuous mode
[  179.601083][T11678] team0: entered allmulticast mode
[  179.890240][T11695] netlink: 'syz.1.1569': attribute type 1 has an invalid length.
[  179.899927][T11695] 8021q: adding VLAN 0 to HW filter on device bond13
[  179.910045][T11695] 8021q: adding VLAN 0 to HW filter on device bond13
[  179.913262][T11695] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address
[  179.917158][T11695] bond13: (slave vxcan5): Error -95 calling set_mac_address
[  179.951313][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  179.964447][T11697] bond13: (slave bridge9): Enslaving as an active interface with a down link
[  180.039936][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.043209][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.505266][T11724] netlink: 'syz.1.1578': attribute type 1 has an invalid length.
[  180.524599][T11724] bond14: (slave veth13): Enslaving as an active interface with a down link
[  180.528901][T11724] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  180.533577][T11724] openvswitch: netlink: Message has 1 unknown bytes.
[  180.537073][T11724] 8021q: adding VLAN 0 to HW filter on device bond14
[  180.991307][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  181.154714][T11749] bridge0: port 1(bond19) entered blocking state
[  181.157093][T11749] bridge0: port 1(bond19) entered disabled state
[  181.159201][T11749] bond19: entered allmulticast mode
[  181.162318][T11749] bond19: entered promiscuous mode
[  181.190361][T11753] bond0: Device is already in use.
[  181.425910][T11768] netlink: 'syz.2.1590': attribute type 1 has an invalid length.
[  181.445251][T11768] 8021q: adding VLAN 0 to HW filter on device bond20
[  181.468537][T11768] bond20: (slave bridge9): making interface the new active one
[  181.473784][T11768] bond20: (slave bridge9): Enslaving as an active interface with an up link
[  181.474404][T11773] netlink: 'syz.1.1592': attribute type 1 has an invalid length.
[  181.483330][T11768] bond20: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  181.509847][T11773] 8021q: adding VLAN 0 to HW filter on device bond15
[  181.549469][T11778] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  181.760242][T11800] lo speed is unknown, defaulting to 1000
[  181.784649][T11805] netlink: 'syz.2.1602': attribute type 1 has an invalid length.
[  182.031324][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  182.043661][T11815] siw: device registration error -23
[  182.046857][T11815] __nla_validate_parse: 15 callbacks suppressed
[  182.046870][T11815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1604'.
[  182.259069][T11827] netlink: 'syz.0.1608': attribute type 5 has an invalid length.
[  182.329993][T11833] 8021q: adding VLAN 0 to HW filter on device bond11
[  182.342323][T11833] bond10: (slave veth9): Releasing active interface
[  182.345355][T11833] bond10: (slave veth9): the permanent HWaddr of slave - c6:63:28:d9:b7:57 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  182.356581][T11833] bond10: (slave gretap2): Releasing active interface
[  182.640958][T11868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'.
[  182.657014][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'.
[  182.693721][T11877] tap0: tun_chr_ioctl cmd 1074025677
[  182.695888][T11877] tap0: linktype set to 776
[  182.755541][T11882] netlink: 'syz.2.1624': attribute type 1 has an invalid length.
[  182.774298][T11882] bond21: entered promiscuous mode
[  182.776201][T11882] 8021q: adding VLAN 0 to HW filter on device bond21
[  182.784050][T11882] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1624'.
[  182.801589][T11882] batadv0: entered promiscuous mode
[  182.803798][T11882] batadv0: entered allmulticast mode
[  182.806826][T11882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.813008][T11882] bond21: (slave batadv0): making interface the new active one
[  182.816117][T11882] bond21: (slave batadv0): Enslaving as an active interface with an up link
[  182.823878][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1625'.
[  182.834380][T11888] syzkaller0: left promiscuous mode
[  182.836400][T11888] syzkaller0: left allmulticast mode
[  182.840113][T11888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.890740][T11892] pim6reg: entered allmulticast mode
[  182.910555][T11892] pim6reg: left allmulticast mode
[  182.921099][T11882] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1624'.
[  182.962269][T11885] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1625'.
[  183.071253][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  183.074887][T11915] netlink: 'syz.0.1634': attribute type 1 has an invalid length.
[  183.085028][T11915] bond12: entered promiscuous mode
[  183.087389][T11915] 8021q: adding VLAN 0 to HW filter on device bond12
[  183.092540][T11915] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1634'.
[  183.097383][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'.
[  183.108635][T11915] batadv2: entered promiscuous mode
[  183.110305][T11915] batadv2: entered allmulticast mode
[  183.114137][T11915] 8021q: adding VLAN 0 to HW filter on device batadv2
[  183.118148][T11915] bond12: (slave batadv2): making interface the new active one
[  183.120920][T11915] bond12: (slave batadv2): Enslaving as an active interface with an up link
[  183.180372][T11924] 8021q: adding VLAN 0 to HW filter on device bond22
[  183.250624][T11932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1640'.
[  183.423390][T11968] 8021q: VLANs not supported on ipvlan1
[  183.745449][T12025] validate_nla: 1 callbacks suppressed
[  183.745459][T12025] netlink: 'syz.2.1660': attribute type 21 has an invalid length.
[  183.847804][T12036] syzkaller0: entered promiscuous mode
[  183.849582][T12036] syzkaller0: entered allmulticast mode
[  184.101373][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  184.884833][T12074] tipc: Enabled bearer <ib:caif0>, priority 14
[  184.963502][T12078] lo speed is unknown, defaulting to 1000
[  185.141306][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  185.379050][T12096] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  185.393704][T12096] bond12: (slave batadv2): Releasing active interface
[  185.394555][T12100] sctp: [Deprecated]: syz.2.1679 (pid 12100) Use of int in max_burst socket option deprecated.
[  185.394555][T12100] Use struct sctp_assoc_value instead
[  185.409090][T12097] netlink: 'syz.0.1678': attribute type 10 has an invalid length.
[  185.414756][T12097] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  185.419158][T12097] bond0: (slave wlan1): refused to change device type
[  185.488459][T12109] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  185.642920][T12132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.708656][T12144] syzkaller0: entered promiscuous mode
[  185.710644][T12144] syzkaller0: entered allmulticast mode
[  185.716914][T12144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.745188][T12144] tipc: Resetting bearer <eth:syzkaller0>
[  185.754976][T12142] tipc: Resetting bearer <eth:syzkaller0>
[  185.758222][T12142] tipc: Disabling bearer <eth:syzkaller0>
[  185.816504][T12156] syzkaller1: entered promiscuous mode
[  185.818387][T12156] syzkaller1: entered allmulticast mode
[  185.866820][T12161] netlink: 'syz.0.1695': attribute type 6 has an invalid length.
[  186.181235][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  186.287951][T12170] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  186.779266][T12199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.782499][T12199] syzkaller0: entered promiscuous mode
[  186.784594][T12199] syzkaller0: entered allmulticast mode
[  186.788618][T12197] tipc: Resetting bearer <eth:syzkaller0>
[  186.796591][T12197] tipc: Disabling bearer <eth:syzkaller0>
[  186.807964][T12201] netlink: 'syz.2.1706': attribute type 4 has an invalid length.
[  186.813203][T12201] netlink: 'syz.2.1706': attribute type 12 has an invalid length.
[  186.841563][ T5310] tipc: Node number set to 1103397220
[  186.899825][T12207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.058572][T12222] netlink: 'syz.0.1713': attribute type 15 has an invalid length.
[  187.090978][T12222] netlink: 'syz.0.1713': attribute type 1 has an invalid length.
[  187.221297][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  187.286826][T12236] netlink: 'syz.0.1714': attribute type 10 has an invalid length.
[  187.289268][T12236] bond0: (slave wlan1): refused to change device type
[  187.293659][T12236] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.297084][T12236] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.307428][T12238] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.470112][T12249] netlink: 'syz.1.1719': attribute type 30 has an invalid length.
[  187.525647][T12252] netlink: 'syz.2.1720': attribute type 83 has an invalid length.
[  187.646617][T12268] k*]: entered promiscuous mode
[  187.653111][T12268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.661045][T12268] veth0_to_team: entered promiscuous mode
[  187.665346][T12268] veth0_to_team: entered allmulticast mode
[  187.688233][T12271] __nla_validate_parse: 18 callbacks suppressed
[  187.688249][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'.
[  187.695139][T12271] ==================================================================
[  187.697877][T12271] BUG: KFENCE: use-after-free read in xfrm_alloc_spi+0x3b9/0xf30
[  187.697877][T12271] 
[  187.700968][T12271] Use-after-free read at 0xffff888136502cc4 (in kfence-#128):
[  187.703898][T12271]  xfrm_alloc_spi+0x3b9/0xf30
[  187.706198][T12271]  xfrm_alloc_userspi+0x70b/0xc90
[  187.707876][T12271]  xfrm_user_rcv_msg+0x7a3/0xab0
[  187.709661][T12271]  netlink_rcv_skb+0x208/0x470
[  187.711314][T12271]  xfrm_netlink_rcv+0x79/0x90
[  187.712752][T12271]  netlink_unicast+0x82f/0x9e0
[  187.714175][T12271]  netlink_sendmsg+0x805/0xb30
[  187.715593][T12271]  __sock_sendmsg+0x21c/0x270
[  187.716983][T12271]  ____sys_sendmsg+0x505/0x830
[  187.718426][T12271]  ___sys_sendmsg+0x21f/0x2a0
[  187.719968][T12271]  __x64_sys_sendmsg+0x19b/0x260
[  187.721727][T12271]  do_syscall_64+0xfa/0x3b0
[  187.723327][T12271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.725111][T12271] 
[  187.725829][T12271] kfence-#128: 0xffff888136502000-0xffff88813650257f, size=1408, cache=sock_inode_cache
[  187.725829][T12271] 
[  187.729646][T12271] allocated by task 11819 on cpu 0 at 182.162991s (5.566653s ago):
[  187.732389][T12271]  sock_alloc_inode+0x28/0xc0
[  187.733939][T12271]  alloc_inode+0x6a/0x1b0
[  187.735324][T12271]  __sock_create+0x12d/0x9f0
[  187.736798][T12271]  __sys_socket+0xd7/0x1b0
[  187.738294][T12271]  __x64_sys_socket+0x7a/0x90
[  187.739838][T12271]  do_syscall_64+0xfa/0x3b0
[  187.741363][T12271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.743284][T12271] 
[  187.744158][T12271] freed by task 11828 on cpu 1 at 182.221683s (5.522474s ago):
[  187.747088][T12271]  rcu_core+0xcab/0x1770
[  187.748702][T12271]  handle_softirqs+0x286/0x870
[  187.750534][T12271]  __irq_exit_rcu+0xca/0x1f0
[  187.752467][T12271]  irq_exit_rcu+0x9/0x30
[  187.754116][T12271]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  187.756229][T12271]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  187.758548][T12271]  stack_trace_consume_entry+0x0/0x280
[  187.760663][T12271]  arch_stack_walk+0x110/0x150
[  187.762509][T12271]  stack_trace_save+0x9c/0xe0
[  187.764307][T12271]  save_stack+0xf5/0x1f0
[  187.765883][T12271]  __set_page_owner+0x8d/0x4a0
[  187.767478][T12271]  post_alloc_hook+0x240/0x2a0
[  187.769132][T12271]  get_page_from_freelist+0x21e4/0x22c0
[  187.770821][T12271]  __alloc_frozen_pages_noprof+0x181/0x370
[  187.772625][T12271]  alloc_pages_mpol+0x232/0x4a0
[  187.774131][T12271]  vma_alloc_folio_noprof+0xe4/0x200
[  187.775754][T12271]  folio_prealloc+0x30/0x180
[  187.777182][T12271]  __handle_mm_fault+0x16fd/0x5440
[  187.778751][T12271]  handle_mm_fault+0x40a/0x8e0
[  187.780245][T12271]  do_user_addr_fault+0x764/0x1390
[  187.781864][T12271]  exc_page_fault+0x76/0xf0
[  187.783292][T12271]  asm_exc_page_fault+0x26/0x30
[  187.784798][T12271]  rep_stos_alternative+0x40/0x80
[  187.786364][T12271]  elf_load+0x4d2/0x6c0
[  187.787691][T12271]  load_elf_binary+0x1079/0x2740
[  187.789448][T12271]  bprm_execve+0x99c/0x1450
[  187.790918][T12271]  kernel_execve+0x8f0/0x9f0
[  187.792383][T12271]  call_usermodehelper_exec_async+0x210/0x360
[  187.794257][T12271]  ret_from_fork+0x3fc/0x770
[  187.795680][T12271]  ret_from_fork_asm+0x1a/0x30
[  187.797203][T12271] 
[  187.797973][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.2.1727 Not tainted syzkaller #0 PREEMPT(full) 
[  187.801091][T12271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.804311][T12271] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  187.805941][T12271] Code: c1 08 c1 74 0a e8 47 b9 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 db ba 9d f7 44 39 f3 0f 85 df 00 00 00 49
[  187.811875][T12271] RSP: 0018:ffffc90006b970e0 EFLAGS: 00010246
[  187.814115][T12271] RAX: 0000000000000000 RBX: ffff888136502cc4 RCX: 0000000000080000
[  187.816674][T12271] RDX: ffffc90003832000 RSI: 00000000000001a3 RDI: 00000000000001a4
[  187.819198][T12271] RBP: ffffc90006b97230 R08: 0000000000000000 R09: 0000000000000000
[  187.822052][T12271] R10: dffffc0000000000 R11: fffff52000d72e0c R12: dffffc0000000000
[  187.824692][T12271] R13: ffff888136502c00 R14: 0000000005000000 R15: ffffc90006b976a0
[  187.827477][T12271] FS:  00007f330096d6c0(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  187.830206][T12271] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  187.832255][T12271] CR2: ffff888136502cc4 CR3: 0000000040fe6000 CR4: 00000000000006f0
[  187.835237][T12271] Call Trace:
[  187.836477][T12271]  <TASK>
[  187.837435][T12271]  ? xfrm_alloc_spi+0x2a0/0xf30
[  187.838919][T12271]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  187.840756][T12271]  ? xfrm_find_acq+0x87/0xa0
[  187.842261][T12271]  xfrm_alloc_userspi+0x70b/0xc90
[  187.844049][T12271]  ? apparmor_capable+0x137/0x1b0
[  187.845723][T12271]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  187.847572][T12271]  ? __nla_parse+0x40/0x60
[  187.849032][T12271]  xfrm_user_rcv_msg+0x7a3/0xab0
[  187.850579][T12271]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  187.852377][T12271]  ? __pfx___mutex_trylock_common+0x10/0x10
[  187.854586][T12271]  ? kasan_save_track+0x4f/0x80
[  187.856290][T12271]  ? rcu_is_watching+0x15/0xb0
[  187.858136][T12271]  ? trace_contention_end+0x39/0x120
[  187.860260][T12271]  ? __mutex_lock+0x335/0x1350
[  187.861929][T12271]  netlink_rcv_skb+0x208/0x470
[  187.863721][T12271]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  187.865575][T12271]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.867610][T12271]  ? lock_release+0x4b/0x3e0
[  187.869378][T12271]  ? net_generic+0x1e/0x240
[  187.871055][T12271]  ? net_generic+0x1e/0x240
[  187.872723][T12271]  ? netlink_deliver_tap+0x2e/0x1b0
[  187.874514][T12271]  xfrm_netlink_rcv+0x79/0x90
[  187.876158][T12271]  netlink_unicast+0x82f/0x9e0
[  187.877815][T12271]  ? __pfx_netlink_unicast+0x10/0x10
[  187.879587][T12271]  ? netlink_sendmsg+0x642/0xb30
[  187.881140][T12271]  ? skb_put+0x11b/0x210
[  187.882657][T12271]  netlink_sendmsg+0x805/0xb30
[  187.884128][T12271]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.886022][T12271]  ? futex_unqueue+0x22/0x240
[  187.887716][T12271]  ? aa_sock_msg_perm+0xf1/0x1d0
[  187.889563][T12271]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.891641][T12271]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.893550][T12271]  __sock_sendmsg+0x21c/0x270
[  187.895361][T12271]  ____sys_sendmsg+0x505/0x830
[  187.897264][T12271]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.899320][T12271]  ? import_iovec+0x74/0xa0
[  187.901064][T12271]  ___sys_sendmsg+0x21f/0x2a0
[  187.902749][T12271]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.904410][T12271]  ? futex_wait+0x285/0x360
[  187.905798][T12271]  ? __fget_files+0x2a/0x420
[  187.907456][T12271]  ? __fget_files+0x3a0/0x420
[  187.908954][T12271]  __x64_sys_sendmsg+0x19b/0x260
[  187.910686][T12271]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.912376][T12271]  ? rcu_is_watching+0x15/0xb0
[  187.913805][T12271]  do_syscall_64+0xfa/0x3b0
[  187.915181][T12271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.917129][T12271]  ? exc_page_fault+0x9f/0xf0
[  187.918750][T12271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.920851][T12271] RIP: 0033:0x7f32ffb8ebe9
[  187.922165][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.928528][T12271] RSP: 002b:00007f330096d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.931382][T12271] RAX: ffffffffffffffda RBX: 00007f32ffdb5fa0 RCX: 00007f32ffb8ebe9
[  187.934148][T12271] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000006
[  187.936715][T12271] RBP: 00007f32ffc11e19 R08: 0000000000000000 R09: 0000000000000000
[  187.939276][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.941654][T12271] R13: 00007f32ffdb6038 R14: 00007f32ffdb5fa0 R15: 00007ffc0e4fad48
[  187.944294][T12271]  </TASK>
[  187.945500][T12271] ==================================================================
[  187.948554][T12271] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  187.951177][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.2.1727 Not tainted syzkaller #0 PREEMPT(full) 
[  187.954476][T12271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.957797][T12271] Call Trace:
[  187.959126][T12271]  <TASK>
[  187.960121][T12271]  dump_stack_lvl+0x99/0x250
[  187.961661][T12271]  ? __asan_memcpy+0x40/0x70
[  187.963360][T12271]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.965267][T12271]  ? __pfx__printk+0x10/0x10
[  187.967010][T12271]  vpanic+0x281/0x750
[  187.968584][T12271]  ? __pfx_vpanic+0x10/0x10
[  187.970293][T12271]  ? is_bpf_text_address+0x292/0x2b0
[  187.972293][T12271]  panic+0xb9/0xc0
[  187.973721][T12271]  ? __pfx_panic+0x10/0x10
[  187.975339][T12271]  ? __pfx__printk+0x10/0x10
[  187.977049][T12271]  check_panic_on_warn+0x89/0xb0
[  187.978824][T12271]  kfence_report_error+0x748/0xa40
[  187.980736][T12271]  ? __pfx_kfence_report_error+0x10/0x10
[  187.982850][T12271]  ? __resched_curr+0x202/0x3e0
[  187.984662][T12271]  ? xfrm_alloc_spi+0x3b9/0xf30
[  187.986471][T12271]  ? xfrm_alloc_userspi+0x70b/0xc90
[  187.988398][T12271]  ? xfrm_user_rcv_msg+0x7a3/0xab0
[  187.990313][T12271]  ? netlink_rcv_skb+0x208/0x470
[  187.992187][T12271]  ? xfrm_netlink_rcv+0x79/0x90
[  187.994000][T12271]  ? netlink_unicast+0x82f/0x9e0
[  187.995867][T12271]  ? netlink_sendmsg+0x805/0xb30
[  187.997719][T12271]  ? __sock_sendmsg+0x21c/0x270
[  187.999569][T12271]  ? ____sys_sendmsg+0x505/0x830
[  188.001417][T12271]  ? ___sys_sendmsg+0x21f/0x2a0
[  188.003277][T12271]  ? __x64_sys_sendmsg+0x19b/0x260
[  188.005188][T12271]  ? do_syscall_64+0xfa/0x3b0
[  188.006965][T12271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.009233][T12271]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  188.011208][T12271]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  188.013393][T12271]  kfence_handle_page_fault+0x358/0x4d0
[  188.015456][T12271]  page_fault_oops+0x19f/0xa10
[  188.017241][T12271]  ? stack_depot_save_flags+0x40/0x860
[  188.019300][T12271]  ? __pfx_fixup_exception+0x10/0x10
[  188.021190][T12271]  ? __pfx_page_fault_oops+0x10/0x10
[  188.023094][T12271]  ? is_prefetch+0x403/0x640
[  188.024719][T12271]  ? do_raw_spin_lock+0x121/0x290
[  188.026592][T12271]  ? __pfx_is_prefetch+0x10/0x10
[  188.028586][T12271]  ? do_raw_spin_unlock+0x4d/0x240
[  188.030595][T12271]  __bad_area_nosemaphore+0x11a/0x780
[  188.032574][T12271]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  188.034840][T12271]  ? spurious_kernel_fault+0x1c7/0x6b0
[  188.036817][T12271]  ? do_kern_addr_fault+0x30/0x80
[  188.038621][T12271]  exc_page_fault+0xc3/0xf0
[  188.040327][T12271]  asm_exc_page_fault+0x26/0x30
[  188.042159][T12271] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  188.044177][T12271] Code: c1 08 c1 74 0a e8 47 b9 9d f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 db ba 9d f7 44 39 f3 0f 85 df 00 00 00 49
[  188.051105][T12271] RSP: 0018:ffffc90006b970e0 EFLAGS: 00010246
[  188.053368][T12271] RAX: 0000000000000000 RBX: ffff888136502cc4 RCX: 0000000000080000
[  188.056101][T12271] RDX: ffffc90003832000 RSI: 00000000000001a3 RDI: 00000000000001a4
[  188.058813][T12271] RBP: ffffc90006b97230 R08: 0000000000000000 R09: 0000000000000000
[  188.061398][T12271] R10: dffffc0000000000 R11: fffff52000d72e0c R12: dffffc0000000000
[  188.064005][T12271] R13: ffff888136502c00 R14: 0000000005000000 R15: ffffc90006b976a0
[  188.066722][T12271]  ? xfrm_alloc_spi+0x2a0/0xf30
[  188.068420][T12271]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  188.070050][T12271]  ? xfrm_find_acq+0x87/0xa0
[  188.071668][T12271]  xfrm_alloc_userspi+0x70b/0xc90
[  188.073707][T12271]  ? apparmor_capable+0x137/0x1b0
[  188.075475][T12271]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  188.077249][T12271]  ? __nla_parse+0x40/0x60
[  188.078644][T12271]  xfrm_user_rcv_msg+0x7a3/0xab0
[  188.080320][T12271]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.082138][T12271]  ? __pfx___mutex_trylock_common+0x10/0x10
[  188.084104][T12271]  ? kasan_save_track+0x4f/0x80
[  188.085685][T12271]  ? rcu_is_watching+0x15/0xb0
[  188.087245][T12271]  ? trace_contention_end+0x39/0x120
[  188.088937][T12271]  ? __mutex_lock+0x335/0x1350
[  188.090519][T12271]  netlink_rcv_skb+0x208/0x470
[  188.092123][T12271]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  188.093984][T12271]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.095742][T12271]  ? lock_release+0x4b/0x3e0
[  188.097396][T12271]  ? net_generic+0x1e/0x240
[  188.099119][T12271]  ? net_generic+0x1e/0x240
[  188.100802][T12271]  ? netlink_deliver_tap+0x2e/0x1b0
[  188.102695][T12271]  xfrm_netlink_rcv+0x79/0x90
[  188.104291][T12271]  netlink_unicast+0x82f/0x9e0
[  188.106097][T12271]  ? __pfx_netlink_unicast+0x10/0x10
[  188.107896][T12271]  ? netlink_sendmsg+0x642/0xb30
[  188.109325][T12271]  ? skb_put+0x11b/0x210
[  188.110789][T12271]  netlink_sendmsg+0x805/0xb30
[  188.112476][T12271]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.114285][T12271]  ? futex_unqueue+0x22/0x240
[  188.115899][T12271]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.117675][T12271]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.119559][T12271]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.121319][T12271]  __sock_sendmsg+0x21c/0x270
[  188.122797][T12271]  ____sys_sendmsg+0x505/0x830
[  188.124344][T12271]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.126157][T12271]  ? import_iovec+0x74/0xa0
[  188.127840][T12271]  ___sys_sendmsg+0x21f/0x2a0
[  188.129570][T12271]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.131272][T12271]  ? futex_wait+0x285/0x360
[  188.132909][T12271]  ? __fget_files+0x2a/0x420
[  188.134580][T12271]  ? __fget_files+0x3a0/0x420
[  188.136000][T12271]  __x64_sys_sendmsg+0x19b/0x260
[  188.137428][T12271]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.139115][T12271]  ? rcu_is_watching+0x15/0xb0
[  188.140527][T12271]  do_syscall_64+0xfa/0x3b0
[  188.141824][T12271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.143709][T12271]  ? exc_page_fault+0x9f/0xf0
[  188.145220][T12271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.147020][T12271] RIP: 0033:0x7f32ffb8ebe9
[  188.148418][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.154156][T12271] RSP: 002b:00007f330096d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.156633][T12271] RAX: ffffffffffffffda RBX: 00007f32ffdb5fa0 RCX: 00007f32ffb8ebe9
[  188.159171][T12271] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000006
[  188.161953][T12271] RBP: 00007f32ffc11e19 R08: 0000000000000000 R09: 0000000000000000
[  188.164653][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.167221][T12271] R13: 00007f32ffdb6038 R14: 00007f32ffdb5fa0 R15: 00007ffc0e4fad48
[  188.169592][T12271]  </TASK>
[  188.171280][T12271] Kernel Offset: disabled
[  188.172659][T12271] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:44:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc90002ffe9e8 RCX=0000000000080000 RDX=ffffc90003c33000
RSI=0000000000072e72 RDI=0000000000072e73 RBP=ffffc90002ffea90 RSP=ffffc90002ffe9a0
R8 =ffffffff8fa38637 R9 =1ffffffff1f470c6 R10=dffffc0000000000 R11=ffffffff81705100
R12=1ffff920005ffd3d R13=dffffc0000000000 R14=1ffff920005ffd38 R15=1ffff920005ffd38
RIP=ffffffff81b4360e RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa64b1f66c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c321784 CR3=0000000121876000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000060415abf 0000000000000210
XMM02=0000000000000007 0000000000000005 XMM03=fffffffffffffffd 0000000000000001
XMM04=0000000003030001 0000000600000000 XMM05=00000000000001fb 0000000100000001
XMM06=0000000000000002 0000000000000081 XMM07=fffffffffffffffd 0000000000000001
XMM08=000700ac0101010a ffff000000000000 XMM09=0000000000000000 00007f32ffc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002b RBX=000000000000002b RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000173b RDI=000000000000173c RBP=00000000000003f8 RSP=ffffc90006b96370
R8 =ffff8880216e8237 R9 =1ffff110042dd046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8e7 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f330096d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff888136502cc4 CR3=0000000040fe6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f32ffd87498 00007f32ffd87470 XMM03=00007f32ffd874a8 00007f32ffd874a0
XMM04=00007f33008ed100 00007f32ffd87460 XMM05=00007f32ffd87478 00007f32ffd874c0
XMM06=00007f32ffd874b8 00007f32ffd874b0 XMM07=00007f32ffd874a8 00007f32ffd874a0
XMM08=0000000000000000 00007f32ffc12ee7 XMM09=0000000000000000 00007f32ffc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
