last executing test programs:

1.496854477s ago: executing program 2 (id=1793):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000410000000000000000a00000004000380300002802c00018034000300fc0000aa28ce1b8d7a23a1000000002014000400fc00"/72], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\b\x00', @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20008850)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12132402}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x244, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb45e}, {0x6, 0x11, 0xe}, {0x8, 0x15, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0xeb}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0x6706}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xf6f}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf9}, {0x6, 0x11, 0x82d}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3f}, {0x8, 0x15, 0x23}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffff7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x75}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xff81}, {0x8, 0x15, 0x4}}]}, 0x244}, 0x1, 0x0, 0x0, 0x8040}, 0x40814)

1.367553367s ago: executing program 2 (id=1795):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x1774, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1760, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x11f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x101c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "fdff2691c9b52722b4e6e77dd20d91fd0b5f71fd01b903962d"}, @NFTA_DATA_VALUE={0x38, 0x1, "35f3071e8b91b1e50bdb5b3d08ecb7acf9d38257e420ff9a5010efcf5eb3161487dc8369201a744b5c8cdd12b436219ff0f7a43f"}, @NFTA_DATA_VALUE={0x20, 0x1, "4e21a69bcdc3d51542deefb4f9cb70cdebf7700a9067f2c08a4da2a2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x84, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "134f06f41fc4bbd1c6f785bdc410b7da0700032e8be5e74373ec39ac8d5e5e8ba194246c67aee0c13f526aabe52992cfb0de1a840b1b26977c53e5f000df41fbe3ae749e2dfac3779e7ca38c288eb11feea3f903ea338c69c0624602df03ead56d64ddc12557e592bc50753da925e9f507cd53c08b84295dca38c0dd"}]}]}, {0x4}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "48d9e66127ba1d6e873988b5895dd534010d10fea0484abf507fe321107d783f401cc8b858a049cdaed60593030f84fa6e296ac16c1a680f54"}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "6c987baec185100872b97889752599990552de0b12c48419f2008605a19c8b8c1bd4cca7"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "f515b377ac174f455e9d7679ddb11840f579911fed78090faf06322f1bf1c666eb31a6c1589db223cab28dae777ab24f7c02fd197754b7099993281b539efe97bea3bb6eeb054f5c4c6e78ea00adb980a98579bd12f023899d570fd3ab3bf9803aeee26b6e1eb4ad1dd369c606be8b7d2b79de013fb1d9bfaff6789cb597331580401bb0beaff0bae184df1551bd716ae05556e711a5c3bff32c485a9bee4b7d2d358944bc1b6e77cdec6f68ec3c1825cca6672867575cadaa0e242676f25251888a040a60faff52a0297628b97d2e520a87ca58c2bd940e2a21b23491bcc116813eb1528c874a3072141ef6b7a5a0046a8adb"}]}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "91e48491e1afb0362f7dee4f9fa486313c7e51a9feebd046694d80927bac74cc2b8ec1e8cc3c1772d748577490e818e748b58c886aac3154f7ec50ba07ca2ee5eadc482af99773339f04db2df71b281577379e78659dce6d01dbd49843ed37366e5f955924357cb686e158659f6a6e8922f9e3d05db04e0b8d5d34a57032bfea6775a5fefe4ad97845ed7f39e1144d571ec4f146cd99b59af8792a"}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_USERDATA={0xd4, 0x6, 0x1, 0x0, "9a2907c7d88097d1176b2cb42cdd49e6bc4639720fbccbe84eaf540eeb4423f4bf95915f98ce86605088e415761f08ebbeb028e7321faa3a9db7f2a7fb17c12d304f871361fd67ec55b58394023c84bbe955c5984af8f69a62b0b66b4a5baa84cdbf561fe8005c220ae70d2cac7935651dd5fd806303822dd77251a1d918aaded71005ae5722db96953b01fdb5132e1522d5faf3b9ef03ea238134b8aaffa86dbbcafb81a704a0c28f8c6236e0e2c38518a39e044eb106ee13ecf541dbbc5cf40f05012354fea64c997015e5ad09da25"}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x90}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xce}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9b, 0x1, "beee0886812e64faf709dba0c61130662625f68a57897e1beeb76bdcfb85c2c3527a6db323eeeaa27d704fecb291f0cb5749e7c2a579fa5b8681cf966bae278e4ca607e8a69832f80953d1503fa9de2683a328328e150795cd5670fd274bea65c59edb81bdfdfb133be70cac07bbac4ac7e587495360cbcc550b7755133bf53dcd242f699a9b2aee9f4d84367dff1e8ec5c502f920fd1c"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1830}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="200000000214e3a828bd7000ffdbdf25080044004fc6e17891d04fc1b82e7746fb72536f84207f54bcf23436fece74a1f513c1c7fdd4881cca7923da64c29f58a90b2b790b7efb2fc66c020595309d58cd43f436dacfe3c40b9a5eff75b913e450a63b0006d8deb6553c88c7ec09a67fa529f6229d6b08c20d979da51b8fa3a2", @ANYRES32=r7, @ANYBLOB="0800010000000000"], 0x20}}, 0x20008010)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4) (async)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200ddfd87cccbf3df2d0bc389f16617f352f2790f00000300000001"], 0x50) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000009000000000000000a0f000001040000", @ANYRES64=r6, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32], 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x0, r2}, 0x18)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f000000fc00000009000000060000006c440000", @ANYRES32, @ANYBLOB="6252c21bfa92f2ea01b757bcd6188bc40e", @ANYRESDEC=r12, @ANYRES32, @ANYBLOB="020000000500000004000000000000002000"/28], 0x50) (async)
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x1, @loopback, 0x23f}], 0x1c) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000010000000000000000600000018440000f8ffffff00000000000000001857000009000000000007000000000435382000080000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0xe6, &(0x7f0000000400)=""/230, 0x41100, 0x20, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x1, 0x6, 0xa}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000900)=[{0x3, 0x2, 0x5, 0x1}, {0x1, 0x7, 0xa, 0x5}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x8}, 0x94) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a03000000000000000000020b9f3ba6fcb84e0000090900010073797a31000000000900020073"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000a40)={0x1, &(0x7f0000000a00)=[{0x1b09, 0x9, 0x0, 0x3}]}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r16, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280080001006772650018000280050013000000000006000300090000000400120008000a00", @ANYRES32=r17, @ANYBLOB="dc197a92b1b0af5593b7a78cc06764a81f7e604776da35451cc0f74960f40346"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.268753074s ago: executing program 2 (id=1798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="0100000200004b0401419800000000007a000000d12d44462d7a5d248ee9e7cb51458a5e232594da8277f068041996863c07886e7385fa89dcd4346dc59dcf7e92116057f1d1fa06b37ce88f6a93ccb3f64ba9a3cbbeb8", @ANYRES32=0x0, @ANYBLOB="0000000000a00000"], 0x20}}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x82)
close(r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r7=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000003f000000000000000000f195", @ANYRES16=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000001c00080025bd7000fcdbdf250a000000", @ANYRES32=r7, @ANYBLOB="4000830508000000000000e008000b0003000000140003f41dc7dcc7b8040000000f0000007f00000005000000"], 0x40}}, 0x4008000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x2, 0x0, 0x1, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x32, 0x1, 0x8, 0x6, 0xa35}], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94)
r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
ppoll(&(0x7f00000005c0)=[{r0, 0x4c0}, {r8, 0xc229}, {r10, 0x200}, {r11, 0xa42e1cb9ad85bdcd}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r13, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4)
bind$nfc_llcp(r13, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(r13, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

986.718308ms ago: executing program 2 (id=1803):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000c40)="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", 0xfc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r3=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r3})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000240), 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x2, 0x0, 0x80000003, 0xbc, 0xad75dd0d214466b5, 0x7c35, 0x7}, 0x9c)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003400128008000100736974002800028014000b00ff01000000000000000000000000000106000d00000300e0000002"], 0x54}}, 0x0)

920.162269ms ago: executing program 0 (id=1804):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200))
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005580)=@newtfilter={0x470, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xf00, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x440, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_police={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_POLICE={0xfffffffffffffead, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xffffff81, 0xd, 0x7, 0x3ca0f2a, 0x4, 0x4, 0x7, 0x6, 0x5, 0x6, 0x3, 0x7f, 0x7, 0x3, 0x2, 0x7, 0x6, 0x401, 0x100, 0x4, 0xc7, 0x10001, 0xffff, 0x9, 0x6, 0x7f, 0xfffff990, 0xdf, 0xe, 0x1000, 0x6, 0xff, 0x9, 0x6, 0x6, 0xd50, 0x7, 0x0, 0x28, 0x100, 0x52, 0x8, 0x27fb, 0x5, 0xbe6, 0x9, 0x9, 0xfffffffd, 0x0, 0x6, 0x200, 0x7b7, 0x5, 0x1000, 0xffff, 0x55ed, 0x9, 0x2, 0x6, 0xf, 0x5, 0xff, 0x81, 0x3, 0x8, 0x5, 0xab5, 0x4, 0xc, 0x7, 0x3, 0x9, 0xffffffff, 0xa, 0xee, 0x3, 0x7fff, 0x7ff, 0xffffffff, 0xfffffffd, 0x4, 0x2, 0xfffffffc, 0x9, 0x3, 0xb023, 0x6, 0xd0b, 0x3767, 0x8, 0xfffff800, 0x3, 0x4, 0x13, 0x5, 0xf874, 0x1000, 0x9, 0x8, 0x81, 0x5, 0x7, 0x9, 0x8, 0x57b, 0x8, 0x4, 0x6, 0x3ff, 0xdc19, 0x8, 0xbbd4, 0x9, 0x6, 0x80000001, 0x10001, 0x66dc0, 0x8001, 0x7fffffff, 0x8001, 0xef8, 0x200, 0x7, 0x2, 0x7, 0x40, 0x6, 0x7, 0x2, 0x7, 0xc1, 0x2, 0x4, 0x9, 0x2, 0x3, 0x3, 0x9, 0x3, 0x8, 0x4, 0x3, 0x6, 0x6, 0x3, 0x0, 0x80, 0xff, 0x4, 0x8, 0x7, 0x4, 0x80, 0x7, 0x1, 0xd, 0xfffffffc, 0x3, 0x9, 0x6e3, 0x7, 0x3, 0x5, 0xb74, 0x6, 0x53, 0xf, 0x0, 0x15ec, 0x400, 0xffffffff, 0xfffffff8, 0x243, 0x6, 0x4, 0x7ff, 0xf, 0x2, 0xd, 0x9, 0x2f7e4da3, 0x1, 0x2dfc, 0x8, 0x400, 0xacf, 0xf, 0x6, 0x8, 0xfffffff6, 0x7, 0x0, 0x7b, 0x9, 0x80000001, 0xfffffff8, 0x5ae, 0xc, 0x4, 0x7, 0xab, 0x8, 0x8, 0x4, 0x7fffffff, 0x3, 0x2, 0x0, 0x1, 0x3, 0x1, 0x1, 0x7, 0x0, 0x3, 0x7b2, 0x3, 0x8000, 0x80000000, 0x6, 0x2, 0x0, 0x2dd, 0x2, 0x3ff, 0x3ff, 0xd015, 0xee, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x2, 0x80000000, 0x7f, 0x1, 0x9, 0x5, 0xfff, 0x7fffffff, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x6, 0x4, 0x1, 0x1, 0x0, 0xfffff0a8, 0x5, 0x1ff]}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x814}, 0x40c4)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newaddr={0x0, 0x14, 0x31e, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x18, 0xfe, r4}, [@IFA_TARGET_NETNSID]}, 0x6c}}, 0x0)

841.05217ms ago: executing program 0 (id=1805):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000580)=[{0x0, 0x2, {0x2, 0xff, 0x4}, {0x0, 0xff, 0x1}, 0x1, 0x1}, {0x1, 0xffffffffffffffff, {0x0, 0x0, 0x2}, {0x1, 0x1}, 0x0, 0xfd}, {0x2, 0x2, {0x0, 0x1, 0x4}, {0x2}, 0xff}], 0x60)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

760.62146ms ago: executing program 0 (id=1807):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x100)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a89719"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0xc851)
unshare(0x600)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r1, 0x0, 0x8000)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3], 0x0, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan0\x00'})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r7=>0x0})
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004)

587.50795ms ago: executing program 1 (id=1811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x29, 0x2, 0x0) (async)
r3 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000)) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000))
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210400000000040000000100000008000100"], 0x38}}, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x3)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r6, 0x7f, '\x00', r7, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0)
socket$kcm(0x10, 0x6b3376e39b187539, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)

368.565807ms ago: executing program 0 (id=1812):
unshare(0x22020600)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000077000000020000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0x8001, 0x56a7, 0x1, 0x3}, 0x14)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007111080000000000850000009500c200000020009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="12d06888c92863cb56b4d44e1ac55b56", 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x80000000000}, 0x18)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'pim6reg0\x00', 0x2000})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

367.903874ms ago: executing program 1 (id=1813):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000200)="0f185a4b0a9430506971f105dcd6a41fcfacbfcbb0a2693c8e06637f98e1d5ea13b14fdf264a97969bdbd4336ddfbde04e235ee2c395385c3be9b6c81d170db8dcc2b1a5376b6f5e2bc02a302adc21929df3bbc1c367289a15101df0b7618b28d4", 0x61)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r5, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0) (async)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r5, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) (async)
setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
sendmsg$sock(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
shutdown(r6, 0x1)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0)
socket(0x15, 0x5, 0x0) (async)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x9, 0x101, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xe}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

266.701775ms ago: executing program 1 (id=1814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008010}, 0x44840)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f0000000000000000070000003000028008000200000000000c000400"], 0x44}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000834000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180ffffffff08000140000024000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a111ea87535167bfd5a0ec5c369"], 0x88}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

255.283747ms ago: executing program 1 (id=1815):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0xffff, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00'})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r2, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x48}}], 0x1, 0x8000)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3b193affffffffffff000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES16=r3, @ANYRES64, @ANYRES32=r4], 0x40}}, 0x4008054)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x44, r7, 0x4, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x2, 0x34005, 0x0, 0x24080040}, 0x4044840)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0)
r12 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r12, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d0000000001dcdf251700000008000300", @ANYRES32=r13, @ANYBLOB="2c00308004000400"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x48804)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r14=>0x0})
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r17=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="3f9d0000000001dcdf251700000008000300", @ANYRES32=r17, @ANYBLOB="2c00308004000400"], 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x48804)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r8, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044004}, 0x4001)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0)

138.388426ms ago: executing program 0 (id=1816):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0xb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000001, 0xb, 0x3}}}}]}, 0x40}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={r0, 0x7fff, 0x4, 0x6}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000380)={<r9=>r0, 0x7fff, 0x4, 0x6})
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x4}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0)

79.180516ms ago: executing program 2 (id=1817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
writev(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)="e6daaebcee11ecf0be19cb18777443e2e096e7cf33839b07d5c3", 0x1a}, {&(0x7f0000000440)="64e8b4719285121412d2", 0xa}], 0x2)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x7f, &(0x7f0000000080)="020000000d800000", 0x45)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xcfae, 0x800, 0x102, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r8 = socket$kcm(0x2d, 0x2, 0x0)
sendmmsg(r8, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={<r9=>0x0, 0x3}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={r9, 0x80000001}, 0x8)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x10, 0xb}, {0x9, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7ff, 0x0, 0x10, 0x6, 0x3, 0xfffffffa, 0xc219, 0x1, 0x3ccd}}}}]}, 0x58}}, 0x4048000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

72.12112ms ago: executing program 1 (id=1818):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e73c719d3a554fd3c598a3a58e284629976eb3168de7ea8c77314697fbaa532dd382c03156d2ee627fde0be5036bb1ab3c7d11cda43ec2088c71af51cbd4a58fa47203f319bf31f34fd7fd014dae5c91f8e8c59bbaf91732b6f3f7b79826cfca781332bdc745734dfd5f6d4369d3d66aefd96693f92ab60bc2531ee1155012578964b693702608fe71d0c8daf8b7a7e2c6beac148647645846fcd9d7060bb779e4e57336b0df951ed067ac86a2d7", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2400c800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000001464000000060a010400000000000000000200000038000480340001800c0001006269747769736500240002800800034000000004080001400000001a0800064000000001080002400000001609000100020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xd}, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x2}, 0x2})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth1_macvtap\x00', {0x3}, 0x7fff})

70.650974ms ago: executing program 0 (id=1819):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x38}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
close(r6) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) (async)
accept4(r7, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)

551.319µs ago: executing program 1 (id=1820):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1b}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)

0s ago: executing program 2 (id=1821):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000400000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

leftover after parsing attributes in process `syz.0.584'.
[  107.562065][ T8260] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  107.613196][ T8267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.588'.
[  107.621863][ T8267] geneve1: mtu less than device minimum
[  107.681300][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'.
[  107.689412][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'.
[  107.692973][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'.
[  107.697029][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'.
[  107.700653][ T8271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'.
[  107.709861][ T8269] bridge0: port 1(erspan0) entered blocking state
[  107.712416][ T8269] bridge0: port 1(erspan0) entered disabled state
[  107.715326][ T8273] sctp: [Deprecated]: syz.0.590 (pid 8273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.715326][ T8273] Use struct sctp_sack_info instead
[  107.724474][ T8269] erspan0: entered allmulticast mode
[  107.728557][ T8269] erspan0: entered promiscuous mode
[  107.745059][ T8269] erspan0: left allmulticast mode
[  107.747091][ T8269] erspan0: left promiscuous mode
[  107.750255][ T8269] bridge0: port 1(erspan0) entered disabled state
[  107.820422][ T8277] macvtap1: entered promiscuous mode
[  107.825650][ T8277] vlan0: entered promiscuous mode
[  107.829870][ T8277] macvtap1: entered allmulticast mode
[  107.831644][ T8277] vlan0: entered allmulticast mode
[  107.847794][ T8277] @: entered allmulticast mode
[  107.872756][ T8283] macvtap2: entered promiscuous mode
[  107.877595][ T8283] macvtap2: entered allmulticast mode
[  107.953219][ T8292] netlink: 'syz.0.597': attribute type 1 has an invalid length.
[  107.987621][ T8292] 8021q: adding VLAN 0 to HW filter on device bond15
[  108.038913][ T8292] bond15: (slave gretap4): making interface the new active one
[  108.048101][ T8292] bond15: (slave gretap4): Enslaving as an active interface with an up link
[  108.767805][ T8356] 8021q: adding VLAN 0 to HW filter on device bond13
[  108.770980][ T8356] bridge0: port 1(bond13) entered blocking state
[  108.775008][ T8356] bridge0: port 1(bond13) entered disabled state
[  108.778559][ T8356] bond13: entered allmulticast mode
[  108.795485][ T8356] bond13: entered promiscuous mode
[  108.814523][ T8367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.817988][ T8367] syzkaller0: entered promiscuous mode
[  108.828210][ T8367] syzkaller0: entered allmulticast mode
[  108.839731][ T8367] tipc: Resetting bearer <eth:syzkaller0>
[  108.852540][ T8365] tipc: Resetting bearer <eth:syzkaller0>
[  108.879652][ T8365] tipc: Disabling bearer <eth:syzkaller0>
[  109.151775][ T8384] macvtap1: entered allmulticast mode
[  109.164120][ T8384] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  109.178191][ T8384] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  109.871718][ T8412] sctp: [Deprecated]: syz.2.620 (pid 8412) Use of int in maxseg socket option.
[  109.871718][ T8412] Use struct sctp_assoc_value instead
[  110.149984][ T8437] netlink: 'syz.2.625': attribute type 10 has an invalid length.
[  110.197103][ T8439] netlink: 'syz.2.626': attribute type 1 has an invalid length.
[  110.229746][ T8439] bond14: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  110.233899][ T8439] bond14: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  110.238064][ T8439] bond14: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  110.317587][ T8445] netlink: 'syz.2.627': attribute type 39 has an invalid length.
[  110.755748][ T8459] sctp: [Deprecated]: syz.0.629 (pid 8459) Use of int in maxseg socket option.
[  110.755748][ T8459] Use struct sctp_assoc_value instead
[  110.829952][ T8463] netlink: 'syz.0.630': attribute type 1 has an invalid length.
[  110.854637][ T8463] 8021q: adding VLAN 0 to HW filter on device bond16
[  110.911773][ T8463] veth7: entered promiscuous mode
[  110.917526][ T8463] bond16: (slave veth7): Enslaving as an active interface with a down link
[  110.927149][ T8463] vlan1: entered allmulticast mode
[  110.928890][ T8463] bridge_slave_0: entered allmulticast mode
[  111.189628][ T8478] gretap5: entered promiscuous mode
[  111.973635][ T8507] netlink: 'syz.2.642': attribute type 1 has an invalid length.
[  111.977709][ T8507] __nla_validate_parse: 36 callbacks suppressed
[  111.977722][ T8507] netlink: 208 bytes leftover after parsing attributes in process `syz.2.642'.
[  112.168183][ T8512] vlan2: entered promiscuous mode
[  112.170216][ T8512] vlan2: entered allmulticast mode
[  112.172054][ T8512] hsr_slave_1: entered allmulticast mode
[  112.245481][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[  112.439308][ T8515] pim6reg: entered allmulticast mode
[  112.456372][ T8514] pim6reg: left allmulticast mode
[  112.560446][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'.
[  112.563252][ T8525] bond13: left allmulticast mode
[  112.565827][ T8525] bond13: left promiscuous mode
[  112.567724][ T8525] bridge0: port 1(bond13) entered disabled state
[  112.580522][ T8528] netlink: 'syz.0.648': attribute type 1 has an invalid length.
[  112.590090][ T8525] bridge0 (unregistering): left allmulticast mode
[  112.628989][ T8528] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  112.660493][ T8534] netlink: 'syz.0.649': attribute type 2 has an invalid length.
[  112.706780][ T8536] netlink: 52 bytes leftover after parsing attributes in process `syz.2.650'.
[  112.763658][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'.
[  112.769329][ T8536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'.
[  112.785638][ T8536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.650'.
[  112.877414][ T8548] netlink: 'syz.2.653': attribute type 32 has an invalid length.
[  112.902560][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.654'.
[  113.115513][ T8573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.118518][ T8573] IPv6: NLM_F_CREATE should be set when creating new route
[  113.121392][ T8573] IPv6: NLM_F_CREATE should be set when creating new route
[  113.132289][ T8569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.136175][ T8569] syzkaller0: entered promiscuous mode
[  113.138873][ T8569] syzkaller0: entered allmulticast mode
[  113.151257][ T8569] tipc: Resetting bearer <eth:syzkaller0>
[  113.156646][ T8568] tipc: Resetting bearer <eth:syzkaller0>
[  113.200456][ T8568] tipc: Disabling bearer <eth:syzkaller0>
[  113.245273][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  113.250377][ T8580] netlink: 'syz.2.660': attribute type 1 has an invalid length.
[  113.294143][ T8580] 8021q: adding VLAN 0 to HW filter on device bond15
[  113.362920][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[  113.870817][ T8644] netlink: 'syz.2.676': attribute type 30 has an invalid length.
[  113.882377][ T5871] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.882462][ T8644] netlink: 'syz.2.676': attribute type 30 has an invalid length.
[  113.899440][ T5871] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.906179][ T5871] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.913914][ T5871] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.952877][ T8648] syzkaller0: entered promiscuous mode
[  113.955354][ T8648] syzkaller0: entered allmulticast mode
[  114.344911][ T8665] ip6tnl2: entered promiscuous mode
[  114.347010][ T8665] ip6tnl2: entered allmulticast mode
[  114.385533][ T8670] netlink: 'syz.2.685': attribute type 101 has an invalid length.
[  114.387998][ T8670] netlink: 'syz.2.685': attribute type 7 has an invalid length.
[  114.559498][ T8679] syzkaller0: entered promiscuous mode
[  114.562955][ T8679] syzkaller0: entered allmulticast mode
[  114.817859][ T8695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.821187][ T8695] syzkaller0: entered promiscuous mode
[  114.823403][ T8695] syzkaller0: entered allmulticast mode
[  114.836933][ T8695] tipc: Resetting bearer <eth:syzkaller0>
[  114.841286][ T8694] tipc: Resetting bearer <eth:syzkaller0>
[  114.876953][ T8694] tipc: Disabling bearer <eth:syzkaller0>
[  114.923563][ T8703] veth1_vlan: entered allmulticast mode
[  114.931267][ T8703] team0: Port device macvlan1 added
[  115.242878][ T8726] gretap1: left allmulticast mode
[  115.246011][ T8726] veth3: left promiscuous mode
[  115.248438][ T8726] geneve2: left promiscuous mode
[  115.252967][ T8726] geneve3: left promiscuous mode
[  115.256465][ T8726] geneve3: left allmulticast mode
[  115.270811][ T8726] bond6: left promiscuous mode
[  115.278602][ T8726] geneve0: left promiscuous mode
[  115.283278][ T8726] bond9: left promiscuous mode
[  115.289921][ T8726] veth5: left promiscuous mode
[  115.297897][ T8726] vlan0: left allmulticast mode
[  115.303143][ T8726] bond0: left allmulticast mode
[  115.306907][ T8726] ip6gretap2: left promiscuous mode
[  115.330357][ T8726] xfrm1: left promiscuous mode
[  115.332253][ T8726] xfrm1: left allmulticast mode
[  115.345123][ T8726] veth7: left promiscuous mode
[  115.351409][ T5869] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.357691][ T5869] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 19999 - 0
[  115.362976][ T8732] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  115.369419][ T5869] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.378091][ T5869] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 19999 - 0
[  115.381393][ T5869] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.394721][ T5869] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 19999 - 0
[  115.398251][ T5869] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.404062][ T5869] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 19999 - 0
[  115.532221][ T8756] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5)
[  115.601421][ T8761] sit3: entered promiscuous mode
[  115.800040][ T8766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.809554][ T8766] tipc: Resetting bearer <eth:syzkaller0>
[  115.820096][ T8765] tipc: Disabling bearer <eth:syzkaller0>
[  116.060578][ T8785] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  116.063061][ T8785] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  116.080265][ T8785] syzkaller0: entered promiscuous mode
[  116.082663][ T8785] syzkaller0: entered allmulticast mode
[  116.239940][ T8800] sit2: entered promiscuous mode
[  116.551260][ T8835] pimreg: entered allmulticast mode
[  116.618398][ T8839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.629825][ T8839] syzkaller0: entered promiscuous mode
[  116.632062][ T8839] syzkaller0: entered allmulticast mode
[  116.778069][ T8846] tipc: Resetting bearer <eth:syzkaller0>
[  117.510684][ T8866] vlan1: entered allmulticast mode
[  117.618893][ T8869] lo speed is unknown, defaulting to 1000
[  117.620976][ T8869] lo speed is unknown, defaulting to 1000
[  117.623358][ T8869] lo speed is unknown, defaulting to 1000
[  117.642933][ T8869] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  117.689716][ T8869] lo speed is unknown, defaulting to 1000
[  117.698000][ T8869] lo speed is unknown, defaulting to 1000
[  117.702255][ T8869] lo speed is unknown, defaulting to 1000
[  117.830781][ T8875] tipc: Resetting bearer <eth:team0>
[  117.835658][ T8875] veth1_vlan: left allmulticast mode
[  117.840293][ T8875] team0: Port device macvlan1 removed
[  117.854538][ T8875] bond12: (slave veth9): Releasing active interface
[  117.876490][ T8875] validate_nla: 4 callbacks suppressed
[  117.876505][ T8875] netlink: 'syz.2.730': attribute type 10 has an invalid length.
[  117.881898][ T8875] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  117.947129][ T8877] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000
[  117.951983][ T8877] netlink: 'syz.0.731': attribute type 11 has an invalid length.
[  117.955564][ T8877] netlink: 'syz.0.731': attribute type 4 has an invalid length.
[  117.959044][ T8877] __nla_validate_parse: 22 callbacks suppressed
[  117.959056][ T8877] netlink: 224 bytes leftover after parsing attributes in process `syz.0.731'.
[  118.515145][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'.
[  118.520472][ T8915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.738'.
[  118.571176][ T8919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.739'.
[  118.730488][ T8924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.745963][ T8924] syzkaller0: entered promiscuous mode
[  118.748139][ T8924] syzkaller0: entered allmulticast mode
[  119.279605][ T8969] netlink: 'syz.1.744': attribute type 11 has an invalid length.
[  119.282630][ T8969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.744'.
[  119.366956][ T8969] netlink: 56 bytes leftover after parsing attributes in process `syz.1.744'.
[  119.457084][ T8923] tipc: Resetting bearer <eth:syzkaller0>
[  119.469340][ T8923] tipc: Disabling bearer <eth:syzkaller0>
[  119.615779][ T8973] netlink: 236 bytes leftover after parsing attributes in process `syz.2.745'.
[  119.619476][ T8973] netlink: 1 bytes leftover after parsing attributes in process `syz.2.745'.
[  119.702627][ T8978] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  119.707024][ T8978] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  119.845885][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'.
[  119.894836][ T8992] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  119.910197][ T8992] bond17: entered promiscuous mode
[  119.912109][ T8992] 8021q: adding VLAN 0 to HW filter on device bond17
[  119.916801][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'.
[  120.336790][ T9014] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.552578][ T9040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.558960][ T9042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.567452][ T9040] netlink: 'syz.1.763': attribute type 1 has an invalid length.
[  120.761223][ T9054] netlink: 'syz.2.766': attribute type 2 has an invalid length.
[  120.811623][ T9059] netlink: 'syz.1.767': attribute type 13 has an invalid length.
[  120.818239][ T9059] netlink: 'syz.1.767': attribute type 17 has an invalid length.
[  120.829012][ T9062] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[  120.853646][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.856889][ T9059] 8021q: adding VLAN 0 to HW filter on device team0
[  120.860712][ T9059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.901428][ T9062] 8021q: adding VLAN 0 to HW filter on device bond18
[  120.961844][ T9059] lo speed is unknown, defaulting to 1000
[  121.076020][ T9072] netlink: 'syz.0.770': attribute type 3 has an invalid length.
[  121.178549][ T9078] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.312669][ T9087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.314969][ T9087] IPv6: NLM_F_CREATE should be set when creating new route
[  121.317398][ T9087] IPv6: NLM_F_CREATE should be set when creating new route
[  121.545908][ T9109] bond20: entered promiscuous mode
[  121.547899][ T9109] 8021q: adding VLAN 0 to HW filter on device bond20
[  121.610134][ T9116] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.614556][ T9111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.617998][ T9111] syzkaller0: entered promiscuous mode
[  121.620221][ T9111] syzkaller0: entered allmulticast mode
[  121.631835][ T9111] tipc: Resetting bearer <eth:syzkaller0>
[  121.638235][ T9116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  121.653624][ T9110] tipc: Resetting bearer <eth:syzkaller0>
[  121.666240][ T9110] tipc: Disabling bearer <eth:syzkaller0>
[  121.829178][ T9123] 8021q: adding VLAN 0 to HW filter on device bond16
[  121.888160][ T9131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.050739][ T9133] lo speed is unknown, defaulting to 1000
[  122.198076][ T9156] tipc: Resetting bearer <eth:team0>
[  122.277306][ T9160] tipc: Resetting bearer <eth:team0>
[  122.298517][ T9160] team0: Unable to change to the same mode the team is in
[  122.464224][ T9164] nbd0: detected capacity change from 0 to 127
[  122.785098][ T9176] xt_HMARK: spi-set and port-set can't be combined
[  123.233096][   T57] block nbd0: Receive control failed (result -104)
[  123.347053][ T9199] vti1: entered promiscuous mode
[  123.348660][ T9199] vti1: entered allmulticast mode
[  123.359659][ T9203] pim6reg1: entered promiscuous mode
[  123.362486][ T9203] pim6reg1: entered allmulticast mode
[  123.409992][ T9207] __nla_validate_parse: 153 callbacks suppressed
[  123.410008][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.801'.
[  123.419489][ T9207] netlink: 48 bytes leftover after parsing attributes in process `syz.2.801'.
[  123.438818][ T9207] netlink: 'syz.2.801': attribute type 11 has an invalid length.
[  123.513307][ T9218] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[  123.513307][ T9217] validate_nla: 2 callbacks suppressed
[  123.513320][ T9217] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[  123.566551][ T9219] netlink: 'syz.0.805': attribute type 4 has an invalid length.
[  123.679323][ T9237] netlink: 'syz.2.811': attribute type 1 has an invalid length.
[  123.696834][ T9237] 8021q: adding VLAN 0 to HW filter on device bond17
[  123.716571][ T9237] ipvlan3: entered allmulticast mode
[  123.718301][ T9237] bond17: entered allmulticast mode
[  123.778245][ T9243] ip6tnl1: left allmulticast mode
[  123.793575][ T9243] vlan0: left allmulticast mode
[  123.795881][ T9243] @: left allmulticast mode
[  123.797498][ T9243] vlan0: left promiscuous mode
[  123.802127][ T9243] macvtap1: left promiscuous mode
[  123.806181][ T9243] macvtap1: left allmulticast mode
[  123.817520][ T9243] sit3: left promiscuous mode
[  123.926132][ T9261] netlink: 112 bytes leftover after parsing attributes in process `syz.0.814'.
[  123.926928][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'.
[  123.938590][ T9262] IPv6: NLM_F_REPLACE set, but no existing node found!
[  123.973113][ T9258] lo speed is unknown, defaulting to 1000
[  124.325662][ T9266] lo speed is unknown, defaulting to 1000
[  124.662109][ T9275] netlink: 'syz.2.820': attribute type 1 has an invalid length.
[  124.716065][ T9279] lo speed is unknown, defaulting to 1000
[  124.840249][ T9285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.823'.
[  124.934857][ T9289] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.824'.
[  124.972085][ T9289] lo speed is unknown, defaulting to 1000
[  125.470825][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'.
[  125.523382][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'.
[  125.681584][ T9314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'.
[  125.799823][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  125.805395][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  125.808210][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  125.810901][   T25] block nbd0: Connection timed out, retrying (0/1 alive)
[  125.817708][   T25] block nbd0: Dead connection, failed to find a fallback
[  125.819983][ T9324] tipc: Resetting bearer <eth:team0>
[  125.820735][   T25] block nbd0: shutting down sockets
[  125.826251][   T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.830156][   T25] Buffer I/O error on dev nbd0, logical block 3, async page read
[  125.833316][   T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.838814][   T25] Buffer I/O error on dev nbd0, logical block 2, async page read
[  125.842677][   T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.846351][   T25] Buffer I/O error on dev nbd0, logical block 1, async page read
[  125.849466][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.853355][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[  125.858662][ T7116] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.862217][ T7116] Buffer I/O error on dev nbd0, logical block 0, async page read
[  125.872924][ T7116] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.877431][ T7116] Buffer I/O error on dev nbd0, logical block 1, async page read
[  125.880723][ T7116] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.885477][ T7116] Buffer I/O error on dev nbd0, logical block 2, async page read
[  125.890099][ T7116] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.893681][ T7116] Buffer I/O error on dev nbd0, logical block 3, async page read
[  125.897474][ T7116] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.901127][ T7116] Buffer I/O error on dev nbd0, logical block 0, async page read
[  125.904975][ T7116] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  125.908584][ T7116] Buffer I/O error on dev nbd0, logical block 1, async page read
[  125.917245][ T7116] ldm_validate_partition_table(): Disk read failed.
[  125.917333][ T9326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.921672][ T7116] Dev nbd0: unable to read RDB block 0
[  125.928971][ T7116]  nbd0: unable to read partition table
[  125.944969][ T7116] ldm_validate_partition_table(): Disk read failed.
[  125.949618][ T7116] Dev nbd0: unable to read RDB block 0
[  125.953497][ T7116]  nbd0: unable to read partition table
[  125.966922][ T9319] team0: Mode changed to "loadbalance"
[  126.066863][ T9332] netlink: 'syz.2.835': attribute type 11 has an invalid length.
[  126.102268][ T9339] netlink: 48 bytes leftover after parsing attributes in process `syz.0.837'.
[  126.133075][ T9341] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.225654][ T9346] netlink: 'syz.1.841': attribute type 8 has an invalid length.
[  126.251168][ T9353] syzkaller1: entered promiscuous mode
[  126.253375][ T9353] syzkaller1: entered allmulticast mode
[  126.332989][ T9357] netlink: 'syz.1.844': attribute type 13 has an invalid length.
[  126.337237][ T9358] netlink: 'syz.1.844': attribute type 13 has an invalid length.
[  126.340278][ T9358] netlink: 'syz.1.844': attribute type 17 has an invalid length.
[  126.343482][ T9357] netlink: 'syz.1.844': attribute type 17 has an invalid length.
[  126.399186][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.403132][ T9357] 8021q: adding VLAN 0 to HW filter on device team0
[  126.407607][ T9357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.418471][ T9358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.459139][ T9363] lo speed is unknown, defaulting to 1000
[  127.001667][ T9395] syzkaller0: entered promiscuous mode
[  127.004348][ T9395] syzkaller0: entered allmulticast mode
[  127.016990][ T9395] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  127.030860][ T9394] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  127.177845][ T9407] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  127.306779][ T9426] batadv0: entered promiscuous mode
[  127.308483][ T9426] batadv0: entered allmulticast mode
[  127.457013][ T9431] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  127.475906][ T9431] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  127.547916][ T9443] tipc: Resetting bearer <eth:team0>
[  128.531805][ T9487] __nla_validate_parse: 18 callbacks suppressed
[  128.531817][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.877'.
[  128.561024][ T9487] netlink: 244 bytes leftover after parsing attributes in process `syz.1.877'.
[  128.586442][ T9491] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.593065][ T9489] lo speed is unknown, defaulting to 1000
[  128.640422][ T9494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.878'.
[  128.649350][ T9497] netlink: 'syz.0.881': attribute type 11 has an invalid length.
[  128.707541][ T9502] IPv6: sit5: Disabled Multicast RS
[  128.709896][ T9502] sit5: entered allmulticast mode
[  128.769880][ T9504] bridge0: the hash_elasticity option has been deprecated and is always 16
[  128.840733][ T9511] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.861827][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.890391][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'.
[  129.059704][ T9523] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.069357][ T9523] bond15: (slave gretap4): Releasing active interface
[  129.074886][ T9523] bond16: (slave veth7): Releasing active interface
[  129.190198][ T9529] netlink: 9 bytes leftover after parsing attributes in process `syz.0.891'.
[  129.597475][ T9535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[  129.603315][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'.
[  129.768022][ T9538] validate_nla: 9 callbacks suppressed
[  129.768038][ T9538] netlink: 'syz.1.894': attribute type 10 has an invalid length.
[  129.779862][ T9538] team0: Port device macvlan1 added
[  129.850924][ T9548] team0: Port device macvlan1 removed
[  129.854754][ T9548] bond0: (slave wlan1): Releasing backup interface
[  129.866399][ T9548] team0: Failed to send options change via netlink (err -105)
[  129.874136][ T9548] team0: Failed to send options change via netlink (err -105)
[  129.876744][ T9548] team0: Mode changed to "activebackup"
[  129.902639][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'.
[  129.907766][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'.
[  129.922105][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  130.185774][ T9571] netlink: 'syz.2.904': attribute type 2 has an invalid length.
[  130.488286][ T9589] 8021q: adding VLAN 0 to HW filter on device bond21
[  130.512576][ T9582] ip6gretap3: entered promiscuous mode
[  130.740415][ T9601] netlink: 'syz.2.911': attribute type 1 has an invalid length.
[  130.740419][ T9603] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.793310][ T9601] 8021q: adding VLAN 0 to HW filter on device bond18
[  130.826802][ T9607] bond18: (slave veth13): Enslaving as an active interface with a down link
[  130.843379][ T9601] gretap2: entered promiscuous mode
[  130.850162][ T9601] bond18: (slave gretap2): making interface the new active one
[  130.855716][ T9601] bond18: (slave gretap2): Enslaving as an active interface with an up link
[  130.869794][ T9601] macvlan3: entered promiscuous mode
[  130.871874][ T9601] macvlan3: entered allmulticast mode
[  130.874991][ T9601] bond18: entered promiscuous mode
[  130.877848][ T9601] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  130.881586][ T9601] bond18: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  130.888600][ T9601] bond18: left promiscuous mode
[  131.021694][ T9617] lo: entered allmulticast mode
[  131.032681][ T9617] tunl0: entered allmulticast mode
[  131.036213][ T9617] gre0: entered allmulticast mode
[  131.038897][ T9617] gretap0: entered allmulticast mode
[  131.041870][ T9617] erspan0: entered allmulticast mode
[  131.045768][ T9617] ip_vti0: entered allmulticast mode
[  131.047777][ T9617] ip6_vti0: entered allmulticast mode
[  131.049810][ T9617] sit0: entered allmulticast mode
[  131.052213][ T9617] ip6tnl0: entered allmulticast mode
[  131.055403][ T9617] ip6gre0: entered allmulticast mode
[  131.057955][ T9617] ip6gretap0: entered allmulticast mode
[  131.060623][ T9617] bond0: entered allmulticast mode
[  131.065501][ T9617] team0: entered allmulticast mode
[  131.068403][ T9617] !: entered allmulticast mode
[  131.070558][ T9617] nlmon0: entered allmulticast mode
[  131.073315][ T9617] caif0: entered allmulticast mode
[  131.076220][ T9617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.159317][ T9614] lo speed is unknown, defaulting to 1000
[  131.363456][ T9635] netlink: 'syz.0.919': attribute type 6 has an invalid length.
[  131.405023][ T9637] macvlan3: entered promiscuous mode
[  131.407270][ T9637] bond0: entered promiscuous mode
[  131.409714][ T9637] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  131.434937][ T9638] netlink: 'syz.1.916': attribute type 4 has an invalid length.
[  131.482206][ T9640] netlink: 'syz.0.921': attribute type 3 has an invalid length.
[  131.504562][ T9640] netlink: 'syz.0.921': attribute type 13 has an invalid length.
[  131.507710][ T9640] netlink: 'syz.0.921': attribute type 17 has an invalid length.
[  131.596461][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.602458][ T9640] 8021q: adding VLAN 0 to HW filter on device team0
[  131.618036][ T9640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.631703][   T10] lo speed is unknown, defaulting to 1000
[  131.641211][   T10] syz2: Port: 1 Link ACTIVE
[  132.002095][ T9661] netlink: 'syz.2.926': attribute type 4 has an invalid length.
[  132.206197][ T9681] netlink: 'syz.2.930': attribute type 11 has an invalid length.
[  132.291077][ T9686] 8021q: adding VLAN 0 to HW filter on device bond9
[  132.305544][ T9686] ipvlan1: entered allmulticast mode
[  132.307639][ T9686] bond9: entered allmulticast mode
[  132.329406][ T9687] bond9: (slave gretap2): making interface the new active one
[  132.332455][ T9687] gretap2: entered allmulticast mode
[  132.337471][ T9687] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  132.428944][ T9705] tipc: Resetting bearer <eth:team0>
[  132.431144][ T9705] tipc: Resetting bearer <eth:team0>
[  132.435402][ T9705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.478856][ T9699] lo speed is unknown, defaulting to 1000
[  133.474690][ T9745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.490951][ T9745] syzkaller0: entered promiscuous mode
[  133.497720][ T9745] syzkaller0: entered allmulticast mode
[  133.511946][ T9745] tipc: Resetting bearer <eth:syzkaller0>
[  133.537517][ T9745] tipc: Disabling bearer <eth:syzkaller0>
[  133.545401][ T9751] __nla_validate_parse: 22 callbacks suppressed
[  133.545414][ T9751] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.951'.
[  133.548822][ T9753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.952'.
[  133.556631][ T9753] netlink: 104 bytes leftover after parsing attributes in process `syz.1.952'.
[  133.827244][ T9769] veth0_to_bridge: entered allmulticast mode
[  133.842362][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'.
[  133.928572][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'.
[  133.931230][ T9781] netlink: 136 bytes leftover after parsing attributes in process `syz.2.960'.
[  133.931537][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'.
[  133.941770][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'.
[  133.946267][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'.
[  133.949346][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'.
[  134.038638][ T9789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.092664][ T9798] tipc: Resetting bearer <eth:team0>
[  134.102513][ T9798] bond18: (slave veth13): Releasing active interface
[  134.106095][ T9798] bond18: (slave veth13): the permanent HWaddr of slave - 0a:98:94:41:ff:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  134.116594][ T9798] bond18: (slave gretap2): Releasing active interface
[  134.152879][ T9798] tipc: Resetting bearer <eth:team0>
[  134.162035][ T9798] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check.
[  134.263082][ T9810] openvswitch: netlink: Message has 12 unknown bytes.
[  134.336758][ T9817] tipc: Resetting bearer <eth:team0>
[  134.696893][ T9839] bond22: entered promiscuous mode
[  134.698911][ T9839] 8021q: adding VLAN 0 to HW filter on device bond22
[  134.710925][ T9839] batadv1: entered promiscuous mode
[  134.712741][ T9839] batadv1: entered allmulticast mode
[  134.716034][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv1
[  134.719520][ T9839] bond22: (slave batadv1): making interface the new active one
[  134.722716][ T9839] bond22: (slave batadv1): Enslaving as an active interface with an up link
[  134.934159][ T9852] nbd1: detected capacity change from 0 to 549764202496
[  134.986014][ T9852] validate_nla: 9 callbacks suppressed
[  134.986025][ T9852] netlink: 'syz.0.978': attribute type 8 has an invalid length.
[  134.994964][   T57] block nbd1: Receive control failed (result -104)
[  135.896150][ T9931] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  135.922100][ T9931] 8021q: adding VLAN 0 to HW filter on device bond23
[  135.943515][ T9931] 8021q: adding VLAN 0 to HW filter on device bond23
[  135.947427][ T9931] bond23: (slave vxcan7): The slave device specified does not support setting the MAC address
[  135.953129][ T9931] bond23: (slave vxcan7): Error -95 calling set_mac_address
[  135.994900][ T9933] veth11: entered promiscuous mode
[  135.999575][ T9933] bond23: (slave veth11): Enslaving as an active interface with a down link
[  136.011881][ T3068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.015502][ T3068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.197227][ T9941] erspan0: entered promiscuous mode
[  136.199568][ T9941] macvtap1: entered promiscuous mode
[  136.202245][ T9941] macvtap1: entered allmulticast mode
[  136.206644][ T9941] erspan0: entered allmulticast mode
[  136.668007][ T9983] netlink: 'syz.2.1006': attribute type 2 has an invalid length.
[  136.698990][ T9983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.784629][ T9991] netlink: 'syz.0.1009': attribute type 1 has an invalid length.
[  136.840073][ T9991] 8021q: adding VLAN 0 to HW filter on device bond24
[  136.928388][ T9999] netlink: 'syz.0.1009': attribute type 8 has an invalid length.
[  136.982810][ T9991] vlan2: entered allmulticast mode
[  136.989606][ T9991] veth1: entered allmulticast mode
[  137.033004][T10014] ..0: renamed from hsr0
[  137.037462][T10014] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  137.045348][T10014] ..0: entered allmulticast mode
[  137.052945][T10014] hsr_slave_0: entered allmulticast mode
[  137.063171][T10014] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  137.351772][T10042] syzkaller0: left promiscuous mode
[  137.362301][T10042] syzkaller0: left allmulticast mode
[  137.379939][T10043] netlink: 'syz.2.1018': attribute type 7 has an invalid length.
[  137.382050][T10042] tipc: Resetting bearer <eth:syzkaller0>
[  137.390618][T10044] tipc: Resetting bearer <eth:syzkaller0>
[  137.392239][T10043] netlink: 'syz.2.1018': attribute type 8 has an invalid length.
[  137.561939][T10058] netlink: 'syz.0.1022': attribute type 8 has an invalid length.
[  137.923610][T10088] dvmrp8: entered allmulticast mode
[  137.937095][T10090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.941165][T10090] netlink: 'syz.1.1027': attribute type 1 has an invalid length.
[  138.316669][T10115] netlink: 'syz.2.1033': attribute type 1 has an invalid length.
[  138.339652][T10114] bond19: entered promiscuous mode
[  138.341287][T10114] bond19: entered allmulticast mode
[  138.352302][T10114] bridge6: entered promiscuous mode
[  138.354986][T10114] bridge6: entered allmulticast mode
[  138.360702][T10114] bond19: (slave bridge6): making interface the new active one
[  138.364494][T10114] bond19: (slave bridge6): Enslaving as an active interface with an up link
[  138.704652][T10141] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  138.767193][T10145] tipc: Resetting bearer <eth:team0>
[  138.781144][T10145] bond19: (slave bridge6): Releasing backup interface
[  138.822335][T10143] lo speed is unknown, defaulting to 1000
[  138.826811][T10145] __nla_validate_parse: 74 callbacks suppressed
[  138.826827][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'.
[  139.009294][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  139.189241][T10158] sit2: entered promiscuous mode
[  139.204251][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'.
[  139.300086][T10166] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  139.307154][T10163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1043'.
[  139.309016][T10166] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  139.575220][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1048'.
[  139.606590][T10181] : entered promiscuous mode
[  139.686638][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1050'.
[  139.690244][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1050'.
[  139.739545][T10188] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.743191][T10188] syzkaller0: entered promiscuous mode
[  139.752754][T10188] syzkaller0: entered allmulticast mode
[  139.759446][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'.
[  139.771991][T10188] bond0: entered promiscuous mode
[  139.778485][T10188] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  139.782673][T10188] bond0: left promiscuous mode
[  139.812224][T10194] macvlan1: left allmulticast mode
[  139.814283][T10194] dvmrp8: left allmulticast mode
[  139.859613][T10194] lo speed is unknown, defaulting to 1000
[  139.863058][T10194] lo speed is unknown, defaulting to 1000
[  139.865658][T10194] lo speed is unknown, defaulting to 1000
[  139.919451][T10198] tipc: Resetting bearer <eth:team0>
[  139.921566][T10198] tipc: Resetting bearer <eth:team0>
[  139.939061][T10198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.952109][T10204] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1055'.
[  139.975481][T10204] tipc: Cannot configure node identity twice
[  140.008007][T10206] validate_nla: 2 callbacks suppressed
[  140.008023][T10206] netlink: 'syz.0.1056': attribute type 10 has an invalid length.
[  140.029137][T10206] team0: Cannot enslave team device to itself
[  140.102167][T10212] netlink: 'syz.0.1057': attribute type 1 has an invalid length.
[  140.133109][T10194] infiniband syz0: set active
[  140.137148][  T793] lo speed is unknown, defaulting to 1000
[  140.140273][T10194] infiniband syz0: added lo
[  140.151392][T10214] netlink: 'syz.1.1058': attribute type 10 has an invalid length.
[  140.155770][T10214] macvlan1: entered allmulticast mode
[  140.158282][T10214] veth1_vlan: entered allmulticast mode
[  140.162490][T10214] team0: Port device macvlan1 added
[  140.188902][T10194] RDS/IB: syz0: added
[  140.192195][T10194] smc: adding ib device syz0 with port count 1
[  140.195332][T10194] smc:    ib device syz0 port 1 has pnetid 
[  140.212375][T10212] bond25: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  140.216613][T10194] lo speed is unknown, defaulting to 1000
[  140.224831][ T8254] lo speed is unknown, defaulting to 1000
[  140.235010][   T12] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.248556][T10212] 8021q: adding VLAN 0 to HW filter on device bond25
[  140.342724][T10223] netlink: 'syz.0.1061': attribute type 12 has an invalid length.
[  140.349302][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'.
[  140.355069][   T12] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  140.363097][T10221] bridge0 (unregistering): left allmulticast mode
[  140.399261][T10194] lo speed is unknown, defaulting to 1000
[  140.683385][T10194] lo speed is unknown, defaulting to 1000
[  140.875482][T10246] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  140.933229][T10246] 8021q: adding VLAN 0 to HW filter on device bond26
[  140.955425][T10249] bond26: (slave veth13): Enslaving as an active interface with a down link
[  140.968749][T10246] gretap5: entered promiscuous mode
[  140.972717][T10246] bond26: (slave gretap5): making interface the new active one
[  140.976046][T10246] bond26: (slave gretap5): Enslaving as an active interface with an up link
[  141.011605][T10253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  141.027472][T10255] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.090359][T10261] openvswitch: netlink: Flow actions attr not present in new flow.
[  141.150531][T10265] dvmrp1: tun_chr_ioctl cmd 1074030369
[  141.198976][T10269] pimreg3: entered allmulticast mode
[  141.237966][T10274] netlink: 'syz.2.1074': attribute type 1 has an invalid length.
[  141.281413][T10274] bond20: (slave ip6gretap5): Enslaving as a backup interface with an up link
[  141.286625][T10271] lo speed is unknown, defaulting to 1000
[  141.288278][T10274] 8021q: adding VLAN 0 to HW filter on device bond20
[  141.289243][   T13] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  141.310281][T10271] lo speed is unknown, defaulting to 1000
[  141.403961][ T5871] bond20: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  141.543023][T10287] lo speed is unknown, defaulting to 1000
[  141.622726][T10287] lo speed is unknown, defaulting to 1000
[  141.633176][T10291] netlink: 'syz.2.1078': attribute type 1 has an invalid length.
[  141.717827][T10291] 8021q: adding VLAN 0 to HW filter on device bond21
[  141.774825][T10295] bond21: (slave gretap3): making interface the new active one
[  141.778936][T10295] bond21: (slave gretap3): Enslaving as an active interface with an up link
[  141.882761][T10290] netlink: 'syz.1.1077': attribute type 13 has an invalid length.
[  141.886879][T10290] netlink: 'syz.1.1077': attribute type 17 has an invalid length.
[  141.906900][T10290] lo: left allmulticast mode
[  141.917158][T10290] tunl0: left allmulticast mode
[  141.919136][T10290] gre0: left allmulticast mode
[  141.921151][T10290] gretap0: left allmulticast mode
[  141.927836][T10290] erspan0: left allmulticast mode
[  141.929826][T10290] ip_vti0: left allmulticast mode
[  141.931807][T10290] ip6_vti0: left allmulticast mode
[  141.943193][T10290] sit0: left allmulticast mode
[  141.947273][T10290] ip6tnl0: left allmulticast mode
[  141.949664][T10290] ip6gre0: left allmulticast mode
[  141.952272][T10290] ip6gretap0: left allmulticast mode
[  141.960635][T10290] bond0: left allmulticast mode
[  141.962755][T10290] team0: left allmulticast mode
[  141.966466][T10290] !: left allmulticast mode
[  141.968702][T10290] nlmon0: left allmulticast mode
[  141.971498][T10290] caif0: left allmulticast mode
[  141.973467][T10290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.041900][T10309] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[  142.070870][T10309] 8021q: adding VLAN 0 to HW filter on device bond22
[  142.235224][T10320] team0: Device ipvlan1 failed to enter team mode
[  142.237531][T10320] team0: Device ipvlan1 failed to enter team mode
[  142.267107][T10314] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  142.731511][T10353] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  143.118092][T10371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.121624][T10371] syzkaller0: entered promiscuous mode
[  143.126109][T10371] syzkaller0: entered allmulticast mode
[  143.156528][T10371] tipc: Resetting bearer <eth:syzkaller0>
[  143.162031][T10370] tipc: Resetting bearer <eth:syzkaller0>
[  143.179593][T10370] tipc: Disabling bearer <eth:syzkaller0>
[  143.371604][T10388] bond27: entered promiscuous mode
[  143.373534][T10388] 8021q: adding VLAN 0 to HW filter on device bond27
[  143.396270][T10388] bond28 (unregistering): Released all slaves
[  143.518861][T10398] Bluetooth: MGMT ver 1.23
[  143.678975][T10409] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  143.812524][T10420] lo speed is unknown, defaulting to 1000
[  143.815619][T10420] lo speed is unknown, defaulting to 1000
[  144.095988][T10424] __nla_validate_parse: 30 callbacks suppressed
[  144.096002][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'.
[  144.104228][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'.
[  144.240274][T10424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.265131][T10449] 8021q: adding VLAN 0 to HW filter on device bond29
[  144.453016][T10462] bond3: option mode: unable to set because the bond device is up
[  144.516935][T10462] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  144.532301][T10462] bond3: (slave macvlan4): Enslaving as a backup interface with a down link
[  144.540746][T10465] veth1_vlan: left allmulticast mode
[  144.544638][T10465] team0: Port device macvlan1 removed
[  144.548035][T10465] bond9: (slave gretap2): Releasing active interface
[  144.550174][T10465] gretap2: left allmulticast mode
[  144.560998][T10465] bond3: (slave macvlan4): Releasing backup interface
[  144.620775][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'.
[  144.626356][T10471] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1128'.
[  144.723316][T10474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.730555][T10474] syzkaller0: entered promiscuous mode
[  144.732974][T10474] syzkaller0: entered allmulticast mode
[  144.758014][T10474] tipc: Resetting bearer <eth:syzkaller0>
[  144.762173][T10473] tipc: Resetting bearer <eth:syzkaller0>
[  144.780455][T10473] tipc: Disabling bearer <eth:syzkaller0>
[  144.833524][T10476] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1130'.
[  144.911459][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'.
[  145.002293][T10487] team0: entered promiscuous mode
[  145.005356][T10487] team0: entered allmulticast mode
[  145.008504][T10487] tipc: Resetting bearer <eth:team0>
[  145.031591][T10490] validate_nla: 10 callbacks suppressed
[  145.031603][T10490] netlink: 'syz.1.1134': attribute type 4 has an invalid length.
[  145.032558][T10489] netlink: 'syz.1.1134': attribute type 4 has an invalid length.
[  145.033432][T10490] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1134'.
[  145.040679][T10489] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1134'.
[  145.159196][T10502] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1137'.
[  145.166610][T10502] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  145.173655][T10502] netlink: 'syz.1.1137': attribute type 4 has an invalid length.
[  145.180409][T10502] netlink: 'syz.1.1137': attribute type 4 has an invalid length.
[  145.193179][T10502] netlink: 'syz.1.1137': attribute type 1 has an invalid length.
[  145.221662][T10506] lo speed is unknown, defaulting to 1000
[  145.227174][T10506] lo speed is unknown, defaulting to 1000
[  145.275417][T10510] dvmrp8: entered allmulticast mode
[  145.375769][T10513] syzkaller0: entered promiscuous mode
[  145.378016][T10513] syzkaller0: entered allmulticast mode
[  145.428907][T10507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'.
[  145.710946][T10524] netlink: 'syz.1.1145': attribute type 12 has an invalid length.
[  145.924765][T10537] veth1_to_bond: entered allmulticast mode
[  145.978571][T10537] veth1_to_bond (unregistering): left allmulticast mode
[  146.087498][T10540] lo speed is unknown, defaulting to 1000
[  146.091799][T10540] lo speed is unknown, defaulting to 1000
[  146.752988][T10545] lo speed is unknown, defaulting to 1000
[  146.770102][T10545] lo speed is unknown, defaulting to 1000
[  146.787784][T10546] lo speed is unknown, defaulting to 1000
[  146.961673][T10546] lo speed is unknown, defaulting to 1000
[  147.818074][T10552] bond22: (slave batadv1): Releasing active interface
[  147.835921][T10552] bond23: (slave veth11): Releasing active interface
[  147.843453][T10552] bond25: (slave ip6gretap4): Removing an active aggregator
[  147.853824][T10552] bond25: (slave ip6gretap4): Releasing backup interface
[  147.869607][T10552] bond26: (slave veth13): Releasing active interface
[  147.872452][T10552] bond26: (slave veth13): the permanent HWaddr of slave - 46:f3:bd:65:54:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  147.902281][T10552] bond26: (slave gretap5): Releasing active interface
[  148.315578][T10575] vlan3: entered promiscuous mode
[  148.327858][T10575] macvtap0: entered promiscuous mode
[  149.151637][T10594] __nla_validate_parse: 36 callbacks suppressed
[  149.151650][T10594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1158'.
[  149.290875][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'.
[  149.347260][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'.
[  149.350705][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1161'.
[  149.358295][T10606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1161'.
[  149.361757][T10606] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1161'.
[  149.365720][T10606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1161'.
[  149.370404][T10606] netlink: 'syz.2.1161': attribute type 10 has an invalid length.
[  149.409633][T10614] netlink: 'syz.2.1163': attribute type 1 has an invalid length.
[  149.447671][T10614] bond23: (slave bridge7): making interface the new active one
[  149.450897][T10614] bond23: (slave bridge7): Enslaving as an active interface with an up link
[  149.466638][T10614] bond23: (slave bridge8): Enslaving as an active interface with a down link
[  149.476622][T10614] bond23: (slave bridge9): Enslaving as an active interface with a down link
[  149.486822][T10614] bond23: (slave bridge10): Enslaving as an active interface with a down link
[  149.498724][T10614] bond23: (slave bridge11): Enslaving as an active interface with a down link
[  149.516919][T10614] bond23: (slave bridge12): Enslaving as an active interface with a down link
[  149.532680][T10614] bond23: (slave bridge13): Enslaving as an active interface with a down link
[  149.556958][T10614] bond23: (slave bridge14): Enslaving as an active interface with a down link
[  149.571830][T10614] bond23: (slave bridge15): Enslaving as an active interface with a down link
[  149.590933][T10614] bond23: (slave bridge16): Enslaving as an active interface with a down link
[  149.608963][T10614] bond23: (slave bridge17): Enslaving as an active interface with a down link
[  149.620411][T10614] bond23: (slave bridge18): Enslaving as an active interface with a down link
[  149.631075][T10614] bond23: (slave bridge19): Enslaving as an active interface with a down link
[  149.644555][T10614] bond23: (slave bridge20): Enslaving as an active interface with a down link
[  149.658592][T10614] bond23: (slave bridge21): Enslaving as an active interface with a down link
[  149.672403][T10614] bond23: (slave bridge22): Enslaving as an active interface with a down link
[  149.686197][T10614] bond23: (slave bridge23): Enslaving as an active interface with a down link
[  149.696353][T10614] bond23: (slave bridge24): Enslaving as an active interface with a down link
[  149.707661][T10614] bond23: (slave bridge25): Enslaving as an active interface with a down link
[  149.740985][T10614] bond23: (slave bridge26): Enslaving as an active interface with a down link
[  149.769716][T10614] bond23: (slave bridge27): Enslaving as an active interface with a down link
[  149.793503][T10614] bond23: (slave bridge28): Enslaving as an active interface with a down link
[  149.813528][T10614] bond23: (slave bridge29): Enslaving as an active interface with a down link
[  149.815987][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  149.820318][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'.
[  149.838382][T10614] bond23: (slave bridge30): Enslaving as an active interface with a down link
[  149.847176][T10632] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  149.859667][T10614] bond23: (slave bridge31): Enslaving as an active interface with a down link
[  149.873407][T10614] bond23: (slave bridge32): Enslaving as an active interface with a down link
[  149.886863][T10614] bond23: (slave bridge33): Enslaving as an active interface with a down link
[  149.910066][T10614] bond23: (slave bridge34): Enslaving as an active interface with a down link
[  149.923436][T10614] bond23: (slave bridge35): Enslaving as an active interface with a down link
[  149.932944][T10636] netlink: 'syz.1.1167': attribute type 9 has an invalid length.
[  149.951060][T10614] bond23: (slave bridge36): Enslaving as an active interface with a down link
[  149.961508][T10614] bond23: (slave bridge37): Enslaving as an active interface with a down link
[  150.000067][T10639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1168'.
[  150.000366][T10614] bond23: (slave bridge38): Enslaving as an active interface with a down link
[  150.017250][T10614] bond23: (slave bridge39): Enslaving as an active interface with a down link
[  150.151949][T10654] openvswitch: netlink: IP tunnel TTL not specified.
[  150.154309][T10653] openvswitch: netlink: Multiple metadata blocks provided
[  150.285918][ T5311] lo speed is unknown, defaulting to 1000
[  150.288273][ T5311] syz2: Port: 1 Link DOWN
[  150.344082][T10661] bridge0: entered allmulticast mode
[  150.633325][T10682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.637800][T10682] syzkaller0: entered allmulticast mode
[  150.652704][T10682] tipc: Resetting bearer <eth:syzkaller0>
[  150.669041][T10681] tipc: Disabling bearer <eth:syzkaller0>
[  150.871540][T10642] delete_channel: no stack
[  150.882090][T10688] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  151.605926][T10726] lo speed is unknown, defaulting to 1000
[  151.608564][T10726] lo speed is unknown, defaulting to 1000
[  151.986677][T10740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.990233][T10740] syzkaller0: entered promiscuous mode
[  151.992648][T10740] syzkaller0: entered allmulticast mode
[  152.013116][T10740] tipc: Resetting bearer <eth:syzkaller0>
[  152.026430][T10739] tipc: Resetting bearer <eth:syzkaller0>
[  152.042940][T10739] tipc: Disabling bearer <eth:syzkaller0>
[  152.111392][T10748] tipc: Resetting bearer <ib:erspan0>
[  152.212299][T10748] veth0_to_bridge: left allmulticast mode
[  152.230769][T10748] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  152.243344][T10747] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  152.428385][T10770] netlink: 'syz.1.1204': attribute type 1 has an invalid length.
[  152.448819][T10772] tipc: Resetting bearer <eth:syzkaller0>
[  152.452516][T10772] syzkaller0: left promiscuous mode
[  152.454866][T10772] syzkaller0: left allmulticast mode
[  152.458684][T10772] sit2: left promiscuous mode
[  152.462360][T10772] bond17: left promiscuous mode
[  152.470537][T10772] bond20: left promiscuous mode
[  152.478020][T10772] batadv0: left promiscuous mode
[  152.479775][T10772] batadv0: left allmulticast mode
[  152.496071][T10772] bond22: left promiscuous mode
[  152.499775][T10772] batadv1: left promiscuous mode
[  152.501786][T10772] batadv1: left allmulticast mode
[  152.507327][T10772] veth11: left promiscuous mode
[  152.511328][T10772] erspan0: left allmulticast mode
[  152.515189][T10772] macvtap1: left promiscuous mode
[  152.517329][T10772] macvtap1: left allmulticast mode
[  152.527549][T10772] vlan2: left allmulticast mode
[  152.529561][T10772] veth1: left allmulticast mode
[  152.564700][T10772] gretap5: left promiscuous mode
[  152.567959][T10772] bond27: left promiscuous mode
[  152.715978][T10793] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[  152.838221][T10797] syzkaller0: entered promiscuous mode
[  152.840543][T10797] syzkaller0: entered allmulticast mode
[  154.171767][T10808] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  154.209417][T10822] vlan3: entered allmulticast mode
[  154.211841][T10822] bridge40: port 1(vlan3) entered blocking state
[  154.232788][T10822] bridge40: port 1(vlan3) entered disabled state
[  154.238899][T10822] vlan3: entered promiscuous mode
[  154.240966][T10822] bridge0: entered promiscuous mode
[  154.481496][T10849] __nla_validate_parse: 17 callbacks suppressed
[  154.481508][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1216'.
[  154.516452][T10851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1217'.
[  154.519867][T10851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1217'.
[  154.658541][T10859] netlink: 'syz.1.1220': attribute type 10 has an invalid length.
[  154.669896][T10859] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  154.697054][T10864] netlink: 1968 bytes leftover after parsing attributes in process `syz.0.1222'.
[  154.706178][T10864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1222'.
[  154.821875][T10870] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  154.856032][T10870] bond24: entered promiscuous mode
[  154.858170][T10870] bond24: entered allmulticast mode
[  154.862536][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'.
[  155.198390][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'.
[  155.317331][T10912] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1236'.
[  155.323195][ T3068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.326573][ T3068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.354964][T10912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.367881][T10912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.450739][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'.
[  155.609037][T10926] syzkaller1: entered promiscuous mode
[  155.611292][T10926] syzkaller1: entered allmulticast mode
[  156.110165][T10932] bond3: option mode: unable to set because the bond device is up
[  156.125339][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'.
[  156.147336][T10932] bond0: (slave batadv_slave_0): Releasing backup interface
[  156.308253][T10941] netlink: zone id is out of range
[  156.516750][T10949] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  156.616363][T10954] netlink: 'syz.2.1249': attribute type 1 has an invalid length.
[  156.651900][T10954] 8021q: adding VLAN 0 to HW filter on device bond25
[  156.744555][T10963] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.747958][T10963] syzkaller0: entered promiscuous mode
[  156.760019][T10963] syzkaller0: entered allmulticast mode
[  156.894572][T10973] nbd2: detected capacity change from 0 to 127
[  156.902813][   T56] block nbd2: Receive control failed (result -104)
[  156.950279][T10984] netlink: 'syz.1.1255': attribute type 13 has an invalid length.
[  156.952817][T10984] netlink: 'syz.1.1255': attribute type 17 has an invalid length.
[  156.979811][T10984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.040467][T10984] lo speed is unknown, defaulting to 1000
[  157.051116][T10984] lo speed is unknown, defaulting to 1000
[  157.148931][T10996] netlink: 'syz.2.1259': attribute type 2 has an invalid length.
[  157.366785][T11009] netlink: 'syz.0.1261': attribute type 1 has an invalid length.
[  157.416133][T11009] 8021q: adding VLAN 0 to HW filter on device bond32
[  157.420313][T11009] netlink: 'syz.0.1261': attribute type 1 has an invalid length.
[  157.696003][T11029] netlink: 'syz.0.1264': attribute type 1 has an invalid length.
[  157.708496][T11030] netlink: 'syz.1.1265': attribute type 13 has an invalid length.
[  157.713191][T11030] netlink: 'syz.1.1265': attribute type 17 has an invalid length.
[  157.791027][T11029] 8021q: adding VLAN 0 to HW filter on device bond33
[  157.804155][T11030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.848976][T11035] netlink: 'syz.0.1266': attribute type 1 has an invalid length.
[  157.897784][T11035] 8021q: adding VLAN 0 to HW filter on device bond34
[  157.922562][T11035] netlink: 'syz.0.1266': attribute type 29 has an invalid length.
[  158.047853][T11042] netlink: 'syz.2.1267': attribute type 11 has an invalid length.
[  158.119805][T11051] netlink: 'syz.2.1269': attribute type 4 has an invalid length.
[  158.193409][T11057] netlink: 'syz.0.1270': attribute type 1 has an invalid length.
[  158.405939][T11070] netlink: 'syz.0.1274': attribute type 2 has an invalid length.
[  158.413010][T11070] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  158.736188][T11101] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  158.739402][T11101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.849685][T11110] netlink: 'syz.2.1281': attribute type 13 has an invalid length.
[  158.852786][T11110] netlink: 'syz.2.1281': attribute type 17 has an invalid length.
[  158.884762][T11110] team0: left promiscuous mode
[  158.887116][T11110] team0: left allmulticast mode
[  158.890653][T11110] tipc: Resetting bearer <eth:team0>
[  158.893081][T11110] tipc: Resetting bearer <eth:team0>
[  158.907752][T11110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.931520][  T793] lo speed is unknown, defaulting to 1000
[  158.949297][T11115] wg1: entered promiscuous mode
[  158.951331][T11115] wg1: entered allmulticast mode
[  158.993596][T11114] lo speed is unknown, defaulting to 1000
[  159.008052][T11114] lo speed is unknown, defaulting to 1000
[  159.975108][T11155] __nla_validate_parse: 25 callbacks suppressed
[  159.975123][T11155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1289'.
[  159.981191][T11155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1289'.
[  160.055842][T11162] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  160.537910][T11192] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1300'.
[  160.670219][T11199] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1302'.
[  160.681206][T11199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1302'.
[  160.926129][T11210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.930475][T11211] syzkaller0: entered promiscuous mode
[  160.932923][T11211] syzkaller0: entered allmulticast mode
[  160.952925][T11211] tipc: Resetting bearer <eth:syzkaller0>
[  160.970522][T11211] tipc: Disabling bearer <eth:syzkaller0>
[  161.045393][T11215] syz.0.1307: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  161.072553][T11215] CPU: 0 UID: 0 PID: 11215 Comm: syz.0.1307 Not tainted syzkaller #0 PREEMPT(full) 
[  161.072574][T11215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.072582][T11215] Call Trace:
[  161.072588][T11215]  <TASK>
[  161.072596][T11215]  dump_stack_lvl+0x189/0x250
[  161.072621][T11215]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.072635][T11215]  ? __pfx__printk+0x10/0x10
[  161.072652][T11215]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  161.072669][T11215]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  161.072684][T11215]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  161.072700][T11215]  warn_alloc+0x214/0x310
[  161.072725][T11215]  ? __pfx_warn_alloc+0x10/0x10
[  161.072773][T11215]  ? __get_vm_area_node+0x28f/0x300
[  161.072791][T11215]  ? xskq_create+0xbf/0x170
[  161.072807][T11215]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  161.072844][T11215]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  161.072861][T11215]  ? xskq_create+0x56/0x170
[  161.072875][T11215]  ? __kasan_kmalloc+0x93/0xb0
[  161.072894][T11215]  vmalloc_user_noprof+0xad/0xf0
[  161.072912][T11215]  ? xskq_create+0xbf/0x170
[  161.072924][T11215]  xskq_create+0xbf/0x170
[  161.072937][T11215]  xsk_init_queue+0xb0/0x110
[  161.072959][T11215]  xsk_setsockopt+0x57b/0x8d0
[  161.072981][T11215]  ? __pfx_xsk_setsockopt+0x10/0x10
[  161.072999][T11215]  ? __pfx_aa_sk_perm+0x10/0x10
[  161.073020][T11215]  ? __fget_files+0x2a/0x420
[  161.073031][T11215]  ? aa_sock_opt_perm+0xff/0x1b0
[  161.073046][T11215]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  161.073060][T11215]  ? __pfx_xsk_setsockopt+0x10/0x10
[  161.073078][T11215]  do_sock_setsockopt+0x17c/0x1b0
[  161.073097][T11215]  __x64_sys_setsockopt+0x13f/0x1b0
[  161.073115][T11215]  do_syscall_64+0xfa/0x3b0
[  161.073130][T11215]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.073142][T11215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.073154][T11215]  ? exc_page_fault+0x9f/0xf0
[  161.073168][T11215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.073180][T11215] RIP: 0033:0x7f9afa78ebe9
[  161.073194][T11215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.073234][T11215] RSP: 002b:00007f9afb6d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  161.073249][T11215] RAX: ffffffffffffffda RBX: 00007f9afa9c5fa0 RCX: 00007f9afa78ebe9
[  161.073258][T11215] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  161.073266][T11215] RBP: 00007f9afa811e19 R08: 0000000000000004 R09: 0000000000000000
[  161.073274][T11215] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  161.073281][T11215] R13: 00007f9afa9c6038 R14: 00007f9afa9c5fa0 R15: 00007ffef0304488
[  161.073304][T11215]  </TASK>
[  161.073349][T11215] Mem-Info:
[  161.110461][T11228] lo: entered allmulticast mode
[  161.133961][T11215] active_anon:6283 inactive_anon:0 isolated_anon:0
[  161.133961][T11215]  active_file:1233 inactive_file:38265 isolated_file:0
[  161.133961][T11215]  unevictable:1768 dirty:45 writeback:0
[  161.133961][T11215]  slab_reclaimable:11042 slab_unreclaimable:95881
[  161.133961][T11215]  mapped:18201 shmem:2463 pagetables:1036
[  161.133961][T11215]  sec_pagetables:0 bounce:0
[  161.133961][T11215]  kernel_misc_reclaimable:0
[  161.133961][T11215]  free:247308 free_pcp:22234 free_cma:0
[  161.139536][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'.
[  161.140990][T11215] Node 0 active_anon:14172kB inactive_anon:0kB active_file:2724kB inactive_file:135476kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38744kB dirty:72kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6876kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  161.141028][T11215] Node 1 active_anon:10960kB inactive_anon:0kB active_file:2208kB inactive_file:17584kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34060kB dirty:108kB writeback:0kB shmem:4824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7284kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  161.141059][T11215] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.141094][T11215] lowmem_reserve[]: 0 811 811 811 811
[  161.141118][T11215] Node 0 DMA32 free:228772kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14172kB inactive_anon:0kB active_file:2724kB inactive_file:135476kB unevictable:3536kB writepending:72kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:42436kB local_pcp:24864kB free_cma:0kB
[  161.141156][T11215] lowmem_reserve[]: 0 0 0 0 0
[  161.141184][T11215] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.141254][T11215] lowmem_reserve[]: 0 0 854 854 854
[  161.141293][T11215] Node 1 Normal free:286484kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10960kB inactive_anon:0kB active_file:2208kB inactive_file:17584kB unevictable:3536kB writepending:108kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46500kB local_pcp:22040kB free_cma:0kB
[  161.141334][T11215] lowmem_reserve[]: 0 0 0 0 0
[  161.141364][T11215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB 
[  161.165798][T11228] lo: left allmulticast mode
[  161.183815][T11215] (M) 
[  161.229103][T11231] vlan4: entered allmulticast mode
[  161.238336][T11215] = 15360kB
[  161.263089][T11231] bond0: entered allmulticast mode
[  161.268799][T11215] Node 0 DMA32: 485*4kB (ME) 246*8kB (ME) 309*16kB (UM) 148*32kB (M) 124*64kB (UME) 39*128kB (UME) 12*256kB (UM) 3*512kB (UM) 1*1024kB (E) 4*2048kB (UM) 46*4096kB (M) = 228756kB
[  161.330083][T11215] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  161.338638][T11215] Node 1 Normal: 185*4kB (ME) 68*8kB (UME) 21*16kB (M) 12*32kB (UM) 79*64kB (UM) 60*128kB (UME) 18*256kB (UME) 9*512kB (UME) 7*1024kB (UM) 4*2048kB (UM) 60*4096kB (UM) = 285076kB
[  161.349812][T11215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.353548][T11215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.357668][T11215] 41961 total pagecache pages
[  161.359745][T11215] 0 pages in swap cache
[  161.361806][T11215] Free swap  = 124996kB
[  161.363599][T11215] Total swap = 124996kB
[  161.368914][T11215] 786301 pages RAM
[  161.371635][T11215] 0 pages HighMem/MovableOnly
[  161.378721][T11215] 241344 pages reserved
[  161.380257][T11215] 0 pages cma reserved
[  161.469321][T11239] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.522635][T11239] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.610543][T11239] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.681204][T11239] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.739913][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.750734][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.758743][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.766375][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.172699][T11257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.239824][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  162.326027][T11265] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1318'.
[  162.371581][T11265] 8021q: adding VLAN 0 to HW filter on device bond26
[  162.388122][T11265] bond26: (slave geneve2): making interface the new active one
[  162.392967][T11265] bond26: (slave geneve2): Enslaving as an active interface with an up link
[  162.400934][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.403568][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.416588][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.419815][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.440217][T11276] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  162.511798][T11288] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1322'.
[  162.517191][T11290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.631818][T11302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1326'.
[  162.803489][T11316] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  162.962783][T11324] ip6gre1: entered promiscuous mode
[  163.161289][T11336] 8021q: adding VLAN 0 to HW filter on device bond12
[  163.337093][T11347] validate_nla: 8 callbacks suppressed
[  163.337110][T11347] netlink: 'syz.1.1340': attribute type 4 has an invalid length.
[  163.350659][T11347] netlink: 'syz.1.1340': attribute type 4 has an invalid length.
[  163.393277][T11352] syzkaller1: entered promiscuous mode
[  163.395629][T11352] syzkaller1: entered allmulticast mode
[  163.760010][T11364] IPv6: sit7: Disabled Multicast RS
[  163.909772][T11383] netlink: 'syz.2.1350': attribute type 1 has an invalid length.
[  163.918326][T11383] batadv3: entered promiscuous mode
[  163.920307][T11383] batadv3: entered allmulticast mode
[  164.197183][T11402] netlink: 'syz.2.1355': attribute type 1 has an invalid length.
[  164.232214][T11402] 8021q: adding VLAN 0 to HW filter on device bond27
[  164.497664][ T1089] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  164.514297][T11424] lo speed is unknown, defaulting to 1000
[  164.518346][T11424] lo speed is unknown, defaulting to 1000
[  164.970312][T11443] IPVS: Unknown mcast interface: veth1_to_bridge
[  165.096787][T11450] netlink: 'syz.1.1367': attribute type 1 has an invalid length.
[  165.160788][T11450] bond13: (slave veth9): Enslaving as an active interface with a down link
[  165.167572][T11450] __nla_validate_parse: 17 callbacks suppressed
[  165.167587][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'.
[  165.176921][T11450] 8021q: adding VLAN 0 to HW filter on device bond13
[  165.216422][   T61] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 30 seconds
[  165.270576][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1368'.
[  165.462238][T11475] pim6reg1: entered promiscuous mode
[  165.472686][T11475] pim6reg1: entered allmulticast mode
[  165.480118][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1373'.
[  165.591003][T11482] syzkaller0: entered promiscuous mode
[  165.593246][T11482] syzkaller0: entered allmulticast mode
[  165.757214][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1375'.
[  165.760896][T11495] netlink: 'syz.0.1375': attribute type 7 has an invalid length.
[  165.780849][T11495] netlink: 'syz.0.1375': attribute type 8 has an invalid length.
[  165.785054][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'.
[  165.793446][T11489] netlink: 'syz.0.1375': attribute type 1 has an invalid length.
[  165.805709][T11493] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1376'.
[  165.891616][T11499] vcan0: entered allmulticast mode
[  166.238132][T11532] netlink: 'syz.2.1383': attribute type 1 has an invalid length.
[  166.293536][T11532] 8021q: adding VLAN 0 to HW filter on device bond28
[  166.446958][T11543] lo speed is unknown, defaulting to 1000
[  166.454752][T11543] lo speed is unknown, defaulting to 1000
[  166.464461][T11542] lo speed is unknown, defaulting to 1000
[  166.519055][T11551] 8021q: adding VLAN 0 to HW filter on device bond29
[  166.545067][T11551] bond29: (slave macvlan4): Enslaving as a backup interface with a down link
[  166.554952][T11551] tipc: Resetting bearer <eth:team0>
[  166.566922][T11551] bond20: (slave ip6gretap5): Removing an active aggregator
[  166.572074][T11551] bond20: (slave ip6gretap5): Releasing backup interface
[  166.582650][T11551] bond21: (slave gretap3): Releasing active interface
[  166.595115][T11551] bond23: (slave bridge7): Releasing active interface
[  166.597959][T11551] bond23: (slave bridge7): the permanent HWaddr of slave - ee:b2:6d:b0:c5:13 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  166.610295][T11551] bond23: (slave bridge8): Releasing active interface
[  166.617889][T11551] bond23: (slave bridge9): Releasing active interface
[  166.625716][T11551] bond23: (slave bridge10): Releasing active interface
[  166.633516][T11551] bond23: (slave bridge11): Releasing active interface
[  166.641162][T11551] bond23: (slave bridge12): Releasing active interface
[  166.647367][T11551] bond23: (slave bridge13): Releasing active interface
[  166.652745][T11551] bond23: (slave bridge14): Releasing active interface
[  166.660824][T11551] bond23: (slave bridge15): Releasing active interface
[  166.669262][T11551] bond23: (slave bridge16): Releasing active interface
[  166.675264][T11551] bond23: (slave bridge17): Releasing active interface
[  166.680636][T11551] bond23: (slave bridge18): Releasing active interface
[  166.686175][T11551] bond23: (slave bridge19): Releasing active interface
[  166.691520][T11551] bond23: (slave bridge20): Releasing active interface
[  166.700152][T11551] bond23: (slave bridge21): Releasing active interface
[  166.716435][T11551] bond23: (slave bridge22): Releasing active interface
[  166.724858][T11551] bond23: (slave bridge23): Releasing active interface
[  166.731972][T11551] bond23: (slave bridge24): Releasing active interface
[  166.740040][T11551] bond23: (slave bridge25): Releasing active interface
[  166.746351][T11551] bond23: (slave bridge26): Releasing active interface
[  166.751170][T11551] bond23: (slave bridge27): Releasing active interface
[  166.758013][T11551] bond23: (slave bridge28): Releasing active interface
[  166.763466][T11551] bond23: (slave bridge29): Releasing active interface
[  166.769908][T11551] bond23: (slave bridge30): Releasing active interface
[  166.776351][T11551] bond23: (slave bridge31): Releasing active interface
[  166.781498][T11551] bond23: (slave bridge32): Releasing active interface
[  166.787673][T11551] bond23: (slave bridge33): Releasing active interface
[  166.792451][T11551] bond23: (slave bridge34): Releasing active interface
[  166.799721][T11551] bond23: (slave bridge35): Releasing active interface
[  166.806033][T11551] bond23: (slave bridge36): Releasing active interface
[  166.810992][T11551] bond23: (slave bridge37): Releasing active interface
[  166.816769][T11551] bond23: (slave bridge38): Releasing active interface
[  166.821592][T11551] bond23: (slave bridge39): Releasing active interface
[  166.826905][T11551] vlan3: left promiscuous mode
[  166.828501][T11551] bridge0: left promiscuous mode
[  166.830559][T11551] bridge40: port 1(vlan3) entered disabled state
[  166.837566][T11551] bond26: (slave geneve2): Releasing active interface
[  166.848067][T11551] bond29: (slave macvlan4): Releasing backup interface
[  166.903884][T11542] lo speed is unknown, defaulting to 1000
[  166.912563][ T5869] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.925862][ T5869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.928411][T11557] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.930926][ T5869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.967320][T11562] netlink: 'syz.2.1388': attribute type 2 has an invalid length.
[  166.967367][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1387'.
[  166.986203][T11562] : entered promiscuous mode
[  166.988296][ T5869] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.993123][T11555] sch_tbf: peakrate 4294967292 is lower than or equals to rate 5895085808323322276 !
[  167.095799][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'.
[  167.095849][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'.
[  167.113056][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  167.261957][T11583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  167.341764][T11588] tipc: Resetting bearer <eth:team0>
[  167.429555][T11588] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  167.464434][T11590] batman_adv: batadv0: Adding interface: virt_wifi0
[  167.467063][T11590] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.477681][T11590] batman_adv: batadv0: Interface activated: virt_wifi0
[  167.576041][T11587] lo speed is unknown, defaulting to 1000
[  167.594625][T11587] lo speed is unknown, defaulting to 1000
[  168.263118][T11625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.274003][T11625] syzkaller0: entered promiscuous mode
[  168.276404][T11625] syzkaller0: entered allmulticast mode
[  168.298766][T11625] netlink: 'syz.2.1401': attribute type 11 has an invalid length.
[  168.321430][T11625] tipc: Resetting bearer <eth:syzkaller0>
[  168.337258][T11624] tipc: Resetting bearer <eth:syzkaller0>
[  168.363362][T11624] tipc: Disabling bearer <eth:syzkaller0>
[  168.468374][T11640] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  168.471347][T11640] batman_adv: batadv0: Removing interface: virt_wifi0
[  168.736947][T11656] ..0: left allmulticast mode
[  168.739060][T11656] hsr_slave_0: left allmulticast mode
[  168.742271][T11656] macvlan1: left allmulticast mode
[  168.746904][T11656] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  168.749112][T11656] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  168.760363][T11656] ipvlan1: left allmulticast mode
[  168.765966][T11656] bond9: left allmulticast mode
[  168.784787][T11656] ip6gre1: left promiscuous mode
[  168.809585][T11663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.849101][T11671] pim6reg1: entered allmulticast mode
[  168.968002][T11678] validate_nla: 3 callbacks suppressed
[  168.968017][T11678] netlink: 'syz.0.1415': attribute type 10 has an invalid length.
[  168.981901][T11680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.988650][T11679] tipc: Disabling bearer <eth:syzkaller0>
[  169.030471][T11686] netlink: 'syz.0.1418': attribute type 12 has an invalid length.
[  169.167747][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.170774][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.411975][T11700] 8021q: adding VLAN 0 to HW filter on device bond14
[  169.551888][T11732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.555962][T11732] syzkaller0: entered promiscuous mode
[  169.558245][T11732] syzkaller0: entered allmulticast mode
[  169.596137][T11732] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.638314][T11736] netlink: 'syz.2.1431': attribute type 1 has an invalid length.
[  169.661588][T11736] 8021q: adding VLAN 0 to HW filter on device bond30
[  169.671108][T11736] bond30: (slave ip6gretap7): making interface the new active one
[  169.675845][T11736] bond30: (slave ip6gretap7): Enslaving as an active interface with an up link
[  169.706160][T11737] veth17: entered promiscuous mode
[  169.711018][T11737] bond30: (slave veth17): Enslaving as an active interface with a down link
[  169.716800][T11731] tipc: Resetting bearer <eth:syzkaller0>
[  169.722250][T11742] netlink: 'syz.0.1433': attribute type 13 has an invalid length.
[  169.725967][T11742] netlink: 'syz.0.1433': attribute type 17 has an invalid length.
[  169.735317][T11731] tipc: Disabling bearer <eth:syzkaller0>
[  169.741307][T11736] erspan0: entered allmulticast mode
[  169.751265][T11736] bond30: (slave erspan0): Enslaving as an active interface with an up link
[  169.771534][T11742] erspan0: left promiscuous mode
[  169.798801][T11742] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.807333][T11742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.815457][  T793] lo speed is unknown, defaulting to 1000
[  169.817785][  T793] syz2: Port: 1 Link ACTIVE
[  169.826399][   T12] bond30: (slave erspan0): link status definitely down, disabling slave
[  169.829976][   T12] ip6gretap7: entered promiscuous mode
[  170.171151][T11771] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  170.175872][T11775] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  170.205642][T11778] __nla_validate_parse: 18 callbacks suppressed
[  170.205660][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'.
[  170.212454][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  170.225409][T11775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1440'.
[  170.259900][T11782] netlink: 'syz.2.1442': attribute type 1 has an invalid length.
[  170.288910][T11782] bond31: entered promiscuous mode
[  170.290872][T11782] 8021q: adding VLAN 0 to HW filter on device bond31
[  170.293590][T11783] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1442'.
[  170.294483][T11782] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1442'.
[  170.307361][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'.
[  170.310177][T11783] batadv0: entered promiscuous mode
[  170.313219][T11783] batadv0: entered allmulticast mode
[  170.317754][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.327433][T11783] bond31: (slave batadv0): making interface the new active one
[  170.331471][T11783] bond31: (slave batadv0): Enslaving as an active interface with an up link
[  170.350337][T11782] batadv3: entered promiscuous mode
[  170.352454][T11782] batadv3: entered allmulticast mode
[  170.356673][T11782] 8021q: adding VLAN 0 to HW filter on device batadv3
[  170.362563][T11782] bond31: (slave batadv3): Enslaving as an active interface with an up link
[  170.480774][T11782] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1442'.
[  170.497008][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'.
[  170.670715][T11808] vlan5: entered allmulticast mode
[  170.838931][T11819] veth0_to_bridge: entered promiscuous mode
[  170.851427][T11820] veth0_to_bridge: left promiscuous mode
[  170.907024][T11833] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1451'.
[  171.016211][T11840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1454'.
[  171.159688][T11846] vlan6: entered allmulticast mode
[  171.161371][T11846] veth1: entered allmulticast mode
[  171.163503][T11846] bridge41: port 1(vlan6) entered blocking state
[  171.166949][T11846] bridge41: port 1(vlan6) entered disabled state
[  171.170352][T11846] vlan6: entered promiscuous mode
[  171.172702][T11846] veth1: entered promiscuous mode
[  171.181520][T11856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.308414][T11868] netlink: 'syz.0.1463': attribute type 1 has an invalid length.
[  171.501834][T11879] lo speed is unknown, defaulting to 1000
[  171.510607][T11879] lo speed is unknown, defaulting to 1000
[  172.536023][T11907] pim6reg: entered allmulticast mode
[  172.539395][T11907] pim6reg: left allmulticast mode
[  172.782620][T11917] netlink: 'syz.0.1472': attribute type 1 has an invalid length.
[  172.827878][T11917] bond38: (slave veth1): Enslaving as an active interface with a down link
[  173.372988][T11914] nbd: must specify at least one socket
[  173.383853][T11916] nbd: nbd0 already in use
[  174.060250][T11957] veth20: entered allmulticast mode
[  174.260793][T11971] Unsupported ieee802154 address type: 0
[  174.447099][T11976] dvmrp8: entered allmulticast mode
[  174.580783][T11983] lo speed is unknown, defaulting to 1000
[  174.583500][T11983] lo speed is unknown, defaulting to 1000
[  174.783141][T11983] netlink: 'syz.1.1494': attribute type 2 has an invalid length.
[  174.797019][T11983] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  175.209751][T12006] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  175.238261][T12006] 8021q: adding VLAN 0 to HW filter on device bond15
[  175.262293][T12006] bond15: (slave veth11): Enslaving as an active interface with a down link
[  175.268204][T12008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.272378][T12008] syzkaller0: entered promiscuous mode
[  175.281290][T12008] syzkaller0: entered allmulticast mode
[  175.292691][T12006] gretap3: entered promiscuous mode
[  175.299370][T12006] bond15: (slave gretap3): making interface the new active one
[  175.303555][T12006] bond15: (slave gretap3): Enslaving as an active interface with an up link
[  175.335008][T12006] macvlan7: entered promiscuous mode
[  175.337143][T12006] macvlan7: entered allmulticast mode
[  175.339874][T12006] bond15: entered promiscuous mode
[  175.342653][T12006] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  175.346415][T12006] bond15: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  175.352743][T12006] bond15: left promiscuous mode
[  175.372942][T12008] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  175.448765][T12007] tipc: Resetting bearer <eth:syzkaller0>
[  175.481012][T12007] tipc: Disabling bearer <eth:syzkaller0>
[  175.505884][T12016] __nla_validate_parse: 11 callbacks suppressed
[  175.505896][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'.
[  175.762590][T12034] macvtap1: entered promiscuous mode
[  175.772968][T12034] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  175.785570][T12034] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  175.895110][T12048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1506'.
[  175.898465][T12048] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1506'.
[  176.103219][T12064] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.169324][T12068] netlink: 'syz.0.1513': attribute type 22 has an invalid length.
[  176.171713][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'.
[  176.173370][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'.
[  176.279834][T12068] netlink: 'syz.0.1513': attribute type 22 has an invalid length.
[  176.293839][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'.
[  176.430656][ T5869] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.435939][ T5869] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.440590][T12075] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  176.455693][T12076] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  176.472972][T12076] bond3: (slave macvlan7): Enslaving as a backup interface with a down link
[  176.484827][ T5869] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.488153][ T5869] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.496234][T12079] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1516'.
[  176.542614][T12083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1517'.
[  176.551136][T12083] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  176.558577][T12079] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1516'.
[  176.562078][T12079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1516'.
[  176.646970][ T5869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.653561][ T5869] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.673944][ T8254] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.790879][T12092] netlink: 'syz.0.1521': attribute type 1 has an invalid length.
[  176.802319][T12093] pim6reg: entered allmulticast mode
[  176.807146][T12093] pim6reg: left allmulticast mode
[  176.981768][T12096] lo speed is unknown, defaulting to 1000
[  176.989147][T12096] lo speed is unknown, defaulting to 1000
[  177.299034][  T793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  177.392441][ T8254] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  177.556898][T12114] netlink: 'syz.1.1525': attribute type 32 has an invalid length.
[  177.559802][T12114] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  177.568496][T12107] "syz.1.1525" (12107) uses obsolete ecb(arc4) skcipher
[  177.720292][T12131] netlink: 'syz.2.1530': attribute type 4 has an invalid length.
[  177.727330][  T793] lo speed is unknown, defaulting to 1000
[  177.729537][  T793] syz0: Port: 1 Link DOWN
[  177.731814][  T793] lo speed is unknown, defaulting to 1000
[  177.983511][T12156] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  177.987966][T12156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.360306][T12195] sctp: [Deprecated]: syz.1.1547 (pid 12195) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.360306][T12195] Use struct sctp_sack_info instead
[  178.383865][T12198] gtp1: entered promiscuous mode
[  178.428182][T12203] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  178.591781][T12218] bond32: entered promiscuous mode
[  178.593971][T12218] bond32: entered allmulticast mode
[  178.596458][T12218] 8021q: adding VLAN 0 to HW filter on device bond32
[  178.600258][T12213] syzkaller0: entered allmulticast mode
[  178.616493][T12213] syzkaller0 (unregistering): left allmulticast mode
[  178.703075][T12221] tipc: Resetting bearer <eth:team0>
[  178.722243][T12221] veth0_to_team: left promiscuous mode
[  178.733269][T12221] vlan0: left promiscuous mode
[  178.750949][T12221] bond4: left promiscuous mode
[  178.757290][T12221] batadv1: left promiscuous mode
[  178.768652][T12221] team1: left promiscuous mode
[  178.775826][T12221] bond6: left promiscuous mode
[  178.779641][T12221] batadv2: left promiscuous mode
[  178.829230][T12221] ip6tnl2: left promiscuous mode
[  178.850220][T12221] vti1: left promiscuous mode
[  178.876612][T12221] ip6gretap3: left promiscuous mode
[  178.894602][T12221] gretap2: left promiscuous mode
[  178.901182][T12221] bond0: left promiscuous mode
[  178.903076][T12221] macvlan3: left promiscuous mode
[  178.915346][T12221] bond19: left promiscuous mode
[  178.917640][T12221] bridge6: left promiscuous mode
[  178.920764][T12221] sit2: left promiscuous mode
[  178.922643][T12232] netlink: 'syz.1.1555': attribute type 8 has an invalid length.
[  178.941469][T12221] bond24: left promiscuous mode
[  178.968213][T12221] veth17: left promiscuous mode
[  178.982911][T12221] bond31: left promiscuous mode
[  178.994359][T12221] batadv0: left promiscuous mode
[  178.997857][T12221] batadv3: left promiscuous mode
[  179.011095][T12221] gtp1: left promiscuous mode
[  179.019891][T12221] bond32: left promiscuous mode
[  179.023369][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.026554][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.043799][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.047208][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  179.098907][T12240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.101919][T12242] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.121708][T12240] syzkaller0: entered promiscuous mode
[  179.125906][T12240] syzkaller0: entered allmulticast mode
[  179.188170][T12240] tipc: Resetting bearer <eth:syzkaller0>
[  179.218698][T12239] tipc: Resetting bearer <eth:syzkaller0>
[  179.236710][T12239] tipc: Disabling bearer <eth:syzkaller0>
[  179.502945][T12280] netlink: 'syz.1.1568': attribute type 7 has an invalid length.
[  179.516460][T12279] wg1: left promiscuous mode
[  179.527634][T12279] syzkaller0: left promiscuous mode
[  179.544440][T12279] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  179.565891][  T793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  179.612389][T12284] IPv6: sit5: Disabled Multicast RS
[  180.494956][  T793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.563303][T12307] syzkaller0: mtu greater than device maximum
[  180.715598][T12326] wg2: entered promiscuous mode
[  180.722187][T12326] wg2: entered allmulticast mode
[  180.756938][T12328] 8021q: VLANs not supported on xfrm0
[  180.813951][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.822870][T12332] lo speed is unknown, defaulting to 1000
[  180.828467][T12332] lo speed is unknown, defaulting to 1000
[  180.860515][T12338] netlink: 'syz.1.1583': attribute type 1 has an invalid length.
[  180.912798][T12338] bond17: (slave vti1): The slave device specified does not support setting the MAC address
[  180.918224][T12338] bond17: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  180.923136][T12338] bond17: (slave vti1): making interface the new active one
[  180.927464][T12338] bond17: (slave vti1): Enslaving as an active interface with an up link
[  180.982158][T12344] __nla_validate_parse: 19 callbacks suppressed
[  180.982170][T12344] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1584'.
[  181.112602][T12347] netlink: 'syz.1.1585': attribute type 10 has an invalid length.
[  181.140691][T12347] team0: Port device 0! added
[  181.241793][T12358] syzkaller1: entered promiscuous mode
[  181.247071][T12358] syzkaller1: entered allmulticast mode
[  181.421903][T12364] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1591'.
[  181.547387][T12370] geneve3: entered promiscuous mode
[  181.571002][T12371] IPv6: sit6: Disabled Multicast RS
[  181.585432][T12371] sit6: entered allmulticast mode
[  181.602575][T12377] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  181.636560][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.640048][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.643656][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'.
[  181.645699][ T5869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.660608][ T5869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.711940][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'.
[  181.738031][T12385] syzkaller1: entered promiscuous mode
[  181.740382][T12385] syzkaller1: entered allmulticast mode
[  181.795642][T12387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.799683][T12387] syzkaller0: entered promiscuous mode
[  181.801364][T12387] syzkaller0: entered allmulticast mode
[  181.852498][T12387] tipc: Resetting bearer <eth:syzkaller0>
[  181.857407][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'.
[  181.864453][T12387] netlink: 'syz.1.1598': attribute type 9 has an invalid length.
[  181.897503][T12391] bridge17: port 1(veth19) entered blocking state
[  181.900109][T12391] bridge17: port 1(veth19) entered disabled state
[  181.903545][T12391] veth19: entered allmulticast mode
[  181.911722][T12391] veth19: entered promiscuous mode
[  181.966970][T12391] bridge17: port 2(veth0_to_bond) entered blocking state
[  181.969786][T12391] bridge17: port 2(veth0_to_bond) entered disabled state
[  181.972737][T12391] veth0_to_bond: entered allmulticast mode
[  181.981222][T12391] veth0_to_bond: entered promiscuous mode
[  182.056350][T12387] tipc: Resetting bearer <eth:syzkaller0>
[  182.085737][T12404] netlink: 'syz.0.1600': attribute type 1 has an invalid length.
[  182.089542][T12387] tipc: Disabling bearer <eth:syzkaller0>
[  182.167713][T12404] 8021q: adding VLAN 0 to HW filter on device bond40
[  182.189057][T12404] ipvlan0: entered allmulticast mode
[  182.191149][T12404] bond40: entered allmulticast mode
[  182.299921][T12420] netlink: 'syz.2.1604': attribute type 1 has an invalid length.
[  182.348262][T12420] 8021q: adding VLAN 0 to HW filter on device bond33
[  182.375969][T12429] netlink: 'syz.0.1606': attribute type 1 has an invalid length.
[  182.378535][T12429] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1606'.
[  182.386841][T12429] batadv2: entered promiscuous mode
[  182.388583][T12429] batadv2: entered allmulticast mode
[  182.395422][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'.
[  182.398737][T12431] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1603'.
[  182.470411][T12437] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  182.495275][T12434] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1606'.
[  182.500411][T12437] 8021q: adding VLAN 0 to HW filter on device bond18
[  182.509950][T12437] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  182.523536][T12438] bond18: (slave veth13): Enslaving as an active interface with a down link
[  182.535933][T12442] erspan0: left allmulticast mode
[  182.539037][T12442] veth0_to_team: left allmulticast mode
[  182.545270][T12442] batadv1: left allmulticast mode
[  182.547673][T12442] team1: left allmulticast mode
[  182.550031][T12442] batadv2: left allmulticast mode
[  182.553026][T12442] ipvlan2: left allmulticast mode
[  182.556504][T12442] bond8: left allmulticast mode
[  182.563583][T12442] ip6tnl2: left allmulticast mode
[  182.566619][T12442] vti1: left allmulticast mode
[  182.568768][T12442] ipvlan3: left allmulticast mode
[  182.570834][T12442] bond17: left allmulticast mode
[  182.575751][T12442] bond19: left allmulticast mode
[  182.579376][T12442] bridge6: left allmulticast mode
[  182.585564][T12442] bond24: left allmulticast mode
[  182.587435][T12442] vlan4: left allmulticast mode
[  182.588995][T12442] bond0: left allmulticast mode
[  182.592092][T12442] batadv3: left allmulticast mode
[  182.597348][T12442] vlan5: left allmulticast mode
[  182.599320][T12442] batadv0: left allmulticast mode
[  182.602272][T12442] bond32: left allmulticast mode
[  182.650777][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'.
[  182.691016][T12442] hsr_slave_0: left promiscuous mode
[  182.909060][T12465] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  182.922440][T12465] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  183.175341][T12482] netlink: 'syz.0.1614': attribute type 1 has an invalid length.
[  183.194664][T12482] 8021q: adding VLAN 0 to HW filter on device bond41
[  183.209996][T12482] 8021q: adding VLAN 0 to HW filter on device bond41
[  183.212517][T12482] bond41: (slave vxcan9): The slave device specified does not support setting the MAC address
[  183.218157][T12482] bond41: (slave vxcan9): Error -95 calling set_mac_address
[  183.236644][T12483] veth21: entered promiscuous mode
[  183.240726][T12483] bond41: (slave veth21): Enslaving as an active interface with a down link
[  183.312541][T12489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.316393][T12488] syzkaller0: entered promiscuous mode
[  183.318696][T12488] syzkaller0: entered allmulticast mode
[  183.371202][T12488] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  183.396156][T12488] tipc: Resetting bearer <eth:syzkaller0>
[  183.400100][T12487] tipc: Resetting bearer <eth:syzkaller0>
[  183.435693][T12487] tipc: Disabling bearer <eth:syzkaller0>
[  183.500152][T12500] pimreg: left allmulticast mode
[  183.502261][T12500] dvmrp8: left allmulticast mode
[  183.615978][T12514] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.634793][T12518] syzkaller0: left allmulticast mode
[  183.637449][T12518] x_tables: ip_tables: udp match: only valid for protocol 17
[  183.650202][T12514] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.695946][T12514] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.730261][T12514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.788633][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.800677][ T7590] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.812740][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.888664][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.947193][T12539] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.950549][T12538] syzkaller0: entered promiscuous mode
[  183.953146][T12538] syzkaller0: entered allmulticast mode
[  186.592420][T12547] netlink: 'syz.0.1633': attribute type 2 has an invalid length.
[  186.598104][T12554] netlink: 'syz.2.1632': attribute type 4 has an invalid length.
[  186.600907][T12554] netlink: 'syz.2.1632': attribute type 4 has an invalid length.
[  186.605396][ T5879] lo speed is unknown, defaulting to 1000
[  186.607224][ T5879] syz0: Port: 1 Link ACTIVE
[  186.609844][ T5898] lo speed is unknown, defaulting to 1000
[  186.620565][T12547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.871013][T12584] netlink: 'syz.2.1637': attribute type 1 has an invalid length.
[  186.913508][T12589] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  186.917633][T12589] __nla_validate_parse: 5 callbacks suppressed
[  186.917648][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'.
[  186.948431][T12587] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.978199][   T25] block nbd2: Possible stuck request ffff888021fc8000: control (read@0,1024B). Runtime 30 seconds
[  186.981765][   T25] block nbd2: Possible stuck request ffff888021fc8200: control (read@1024,1024B). Runtime 30 seconds
[  186.986780][   T25] block nbd2: Possible stuck request ffff888021fc8400: control (read@2048,1024B). Runtime 30 seconds
[  186.990382][   T25] block nbd2: Possible stuck request ffff888021fc8600: control (read@3072,1024B). Runtime 30 seconds
[  187.025028][T12587] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.037414][T12593] netlink: 'syz.2.1641': attribute type 2 has an invalid length.
[  187.058270][T12593] ave_0: entered promiscuous mode
[  187.084995][T12587] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.121481][T12587] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.160502][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  187.163423][T12606] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1642'.
[  187.170378][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  187.218971][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.232165][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.241804][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'.
[  187.245973][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.252464][T12615] netlink: 'syz.2.1643': attribute type 30 has an invalid length.
[  187.258891][ T5869] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.270531][ T5869] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.273499][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'.
[  187.278885][ T5869] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.281471][T12615] netlink: 'syz.2.1643': attribute type 30 has an invalid length.
[  187.284875][ T5869] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.287947][ T5869] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.384740][  T793] lo speed is unknown, defaulting to 1000
[  187.387010][  T793] syz0: Port: 1 Link DOWN
[  187.388823][ T5869] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.392471][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.398209][  T793] lo speed is unknown, defaulting to 1000
[  187.401785][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.409036][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.420885][T12620] geneve3: entered promiscuous mode
[  187.423067][T12620] geneve3: entered allmulticast mode
[  187.427153][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  187.436325][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  187.439144][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  187.441810][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  187.697150][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'.
[  187.811495][T12648] lo speed is unknown, defaulting to 1000
[  187.824480][T12648] lo speed is unknown, defaulting to 1000
[  187.896340][T12653] netlink: 'syz.0.1651': attribute type 1 has an invalid length.
[  187.953568][T12653] vti1: entered allmulticast mode
[  187.957449][T12653] bond42: (slave vti1): The slave device specified does not support setting the MAC address
[  187.963916][T12653] bond42: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  187.974774][T12653] bond42: (slave vti1): making interface the new active one
[  187.978303][T12653] bond42: (slave vti1): Enslaving as an active interface with an up link
[  188.598710][T12675] @: renamed from veth0_vlan
[  188.831139][T12700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1659'.
[  188.893973][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  188.931616][T12706] netlink: 'syz.0.1660': attribute type 3 has an invalid length.
[  188.937157][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'.
[  188.948788][T12697] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  189.018270][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'.
[  189.061132][T12713] lo speed is unknown, defaulting to 1000
[  189.065487][T12713] lo speed is unknown, defaulting to 1000
[  189.150999][T12715] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  189.155381][T12715] team0: Device ipvlan3 is already an upper device of the team interface
[  189.339932][T12723] netlink: 'syz.0.1666': attribute type 1 has an invalid length.
[  189.388520][T12723] 8021q: adding VLAN 0 to HW filter on device bond43
[  189.413147][T12723] bond43: (slave veth23): Enslaving as an active interface with a down link
[  189.559918][T12741] netlink: 'syz.0.1668': attribute type 11 has an invalid length.
[  190.101148][T12771] pim6reg1: entered promiscuous mode
[  190.102951][T12771] pim6reg1: entered allmulticast mode
[  190.373484][T12781] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  190.548569][T12790] tipc: Resetting bearer <ib:erspan0>
[  190.588734][T12790] tipc: Resetting bearer <eth:syzkaller0>
[  190.652769][  T793] lo speed is unknown, defaulting to 1000
[  190.652954][ T5852] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.655566][  T793] syz2: Port: 1 Link DOWN
[  190.658425][ T5852] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.683964][ T5852] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.687421][ T5852] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.911189][T12796] lo speed is unknown, defaulting to 1000
[  190.957816][T12796] lo speed is unknown, defaulting to 1000
[  191.482153][T12821] team0: entered promiscuous mode
[  191.489246][T12821] 8021q: adding VLAN 0 to HW filter on device team0
[  191.603007][T12831] validate_nla: 5 callbacks suppressed
[  191.603022][T12831] netlink: 'syz.2.1691': attribute type 10 has an invalid length.
[  191.612678][T12831] geneve0: entered promiscuous mode
[  191.620533][T12831] team0: Port device geneve0 added
[  191.625958][ T5852] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  191.629007][ T5852] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  191.632134][ T5852] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  191.654081][ T5852] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  191.973893][T12848] syzkaller0: entered allmulticast mode
[  192.010678][T12837] syzkaller0: left allmulticast mode
[  192.189864][T12865] __nla_validate_parse: 23 callbacks suppressed
[  192.189875][T12865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1703'.
[  192.198777][T12865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1703'.
[  192.229980][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'.
[  192.232723][T12865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1703'.
[  192.236041][T12865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'.
[  192.238841][T12865] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1703'.
[  192.246422][T12865] netlink: 'syz.0.1703': attribute type 10 has an invalid length.
[  192.250652][T12869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.280833][T12871] pim6reg1: entered allmulticast mode
[  192.321529][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1707'.
[  192.325429][T12874] netlink: 'syz.0.1706': attribute type 1 has an invalid length.
[  192.335052][T12876] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1707'.
[  192.338714][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1707'.
[  192.341823][T12876] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1707'.
[  192.359342][T12874] 8021q: adding VLAN 0 to HW filter on device bond44
[  192.368453][T12879] netlink: 'syz.2.1708': attribute type 13 has an invalid length.
[  192.370952][T12879] netlink: 'syz.2.1708': attribute type 17 has an invalid length.
[  192.388052][T12879] team0: left promiscuous mode
[  192.389543][T12879] geneve0: left promiscuous mode
[  192.391688][T12879] tipc: Resetting bearer <eth:team0>
[  192.395624][T12879] tipc: Resetting bearer <eth:team0>
[  192.399456][T12879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.405211][ T5879] lo speed is unknown, defaulting to 1000
[  192.407048][ T5879] syz0: Port: 1 Link ACTIVE
[  192.415779][T12874] veth25: entered promiscuous mode
[  192.420289][T12874] bond44: (slave veth25): Enslaving as an active interface with a down link
[  192.423047][T12880] erspan0: entered allmulticast mode
[  192.428075][ T5879] lo speed is unknown, defaulting to 1000
[  192.636800][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.647031][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.652874][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.660929][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.667427][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.675569][T12904] netlink: 'syz.1.1716': attribute type 15 has an invalid length.
[  192.681975][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.689075][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.695717][T12897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  192.866030][T12915] lo speed is unknown, defaulting to 1000
[  192.869803][T12915] lo speed is unknown, defaulting to 1000
[  193.240481][T12924] bond35: entered promiscuous mode
[  193.242268][T12924] bond35: entered allmulticast mode
[  193.245803][T12924] 8021q: adding VLAN 0 to HW filter on device bond35
[  193.569095][T12927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.572501][T12927] syzkaller0: entered promiscuous mode
[  193.579821][T12927] syzkaller0: entered allmulticast mode
[  193.600759][T12927] tipc: Resetting bearer <eth:syzkaller0>
[  193.652456][T12930] tipc: Resetting bearer <eth:syzkaller0>
[  193.696277][T12930] tipc: Disabling bearer <eth:syzkaller0>
[  193.831331][T12942] netlink: 'syz.1.1723': attribute type 13 has an invalid length.
[  193.834621][T12942] netlink: 'syz.1.1723': attribute type 17 has an invalid length.
[  193.876580][T12942] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.879957][T12942] 8021q: adding VLAN 0 to HW filter on device team0
[  193.940587][T12939] lo speed is unknown, defaulting to 1000
[  193.947418][T12939] lo speed is unknown, defaulting to 1000
[  194.033255][T12951] netlink: 'syz.0.1727': attribute type 1 has an invalid length.
[  194.055813][T12951] 8021q: adding VLAN 0 to HW filter on device bond45
[  194.071590][T12951] veth27: entered promiscuous mode
[  194.076956][T12951] bond45: (slave veth27): Enslaving as a backup interface with a down link
[  194.082934][T12951] veth0_to_bond: left allmulticast mode
[  194.086177][T12951] veth0_to_bond: left promiscuous mode
[  194.088078][T12951] bridge17: port 2(veth0_to_bond) entered disabled state
[  194.093473][T12951] bond38: (slave veth1): Releasing active interface
[  194.097820][T12951] veth19: left allmulticast mode
[  194.099777][T12951] veth19: left promiscuous mode
[  194.102704][T12951] bridge17: port 1(veth19) entered disabled state
[  194.119927][T12951] bond41: (slave veth21): Releasing active interface
[  194.128198][T12951] bond42: (slave vti1): Releasing backup interface
[  194.135136][T12951] bond43: (slave veth23): Releasing active interface
[  194.140744][T12951] bond44: (slave veth25): Releasing active interface
[  194.151003][T12951] bond45: (slave veth27): Releasing backup interface
[  194.258661][T12958] netlink: 'syz.0.1728': attribute type 21 has an invalid length.
[  194.326598][T12961] tipc: Resetting bearer <eth:team0>
[  194.342857][ T5898] lo speed is unknown, defaulting to 1000
[  194.348771][ T5898] syz0: Port: 1 Link DOWN
[  194.350654][ T5898] lo speed is unknown, defaulting to 1000
[  194.711783][T12996] geneve3: left promiscuous mode
[  194.716355][T12996] bond35: left promiscuous mode
[  194.807515][T12999] team0: No ports can be present during mode change
[  195.100272][T13016] syzkaller0: entered promiscuous mode
[  195.102119][T13016] syzkaller0: entered allmulticast mode
[  195.120040][T13016] macsec0: entered promiscuous mode
[  195.122338][T13016] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode
[  195.125979][T13016] macsec0: entered allmulticast mode
[  195.128308][T13016] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode
[  195.316013][   T61] block nbd1: Possible stuck request ffff888021f68000: control (read@0,4096B). Runtime 60 seconds
[  195.604638][T13055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.750249][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  195.753074][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  195.760335][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  195.764575][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.021927][T13092] bond19: entered promiscuous mode
[  196.024316][T13092] bond19: entered allmulticast mode
[  196.033220][T13092] bridge7: entered promiscuous mode
[  196.039890][T13092] bridge7: entered allmulticast mode
[  196.046186][T13092] bond19: (slave bridge7): making interface the new active one
[  196.049898][T13092] bond19: (slave bridge7): Enslaving as an active interface with an up link
[  196.410337][T13127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.792202][T13159] validate_nla: 6 callbacks suppressed
[  196.792220][T13159] netlink: 'syz.1.1781': attribute type 2 has an invalid length.
[  196.916545][T13167] netlink: 'syz.0.1783': attribute type 2 has an invalid length.
[  197.102439][T13172] lo speed is unknown, defaulting to 1000
[  197.105576][T13172] lo speed is unknown, defaulting to 1000
[  197.298844][T13197] lo speed is unknown, defaulting to 1000
[  197.301817][T13197] lo speed is unknown, defaulting to 1000
[  197.393580][T13167] tipc: Resetting bearer <ib:erspan0>
[  197.400870][T13167] erspan0: left allmulticast mode
[  197.510747][T13206] __nla_validate_parse: 31 callbacks suppressed
[  197.510766][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'.
[  197.519590][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'.
[  197.640641][T13211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1791'.
[  197.745251][T13206] tipc: Disabling bearer <eth:team0>
[  197.757522][T13206] team0 (unregistering): Port device geneve0 removed
[  197.790599][ T5852] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  197.796154][ T5852] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  197.799605][ T5852] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  197.802587][ T5852] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  197.901138][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'.
[  197.947776][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'.
[  197.964872][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'.
[  197.969197][T13226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1795'.
[  197.973811][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1795'.
[  197.982299][T13229] netlink: 'syz.1.1796': attribute type 1 has an invalid length.
[  198.040826][T13229] 8021q: adding VLAN 0 to HW filter on device bond21
[  198.100133][T13233] bond21: (slave veth15): Enslaving as an active interface with a down link
[  198.243023][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'.
[  198.380957][T13259] netlink: 'syz.2.1803': attribute type 12 has an invalid length.
[  198.447715][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'.
[  198.580468][T13271] netlink: 'syz.1.1806': attribute type 1 has an invalid length.
[  198.611422][T13272] lo speed is unknown, defaulting to 1000
[  198.614798][T13272] lo speed is unknown, defaulting to 1000
[  198.688163][T13282] netlink: 'syz.1.1809': attribute type 1 has an invalid length.
[  198.703250][T13282] bond22: entered promiscuous mode
[  198.709057][T13282] 8021q: adding VLAN 0 to HW filter on device bond22
[  198.778540][T13287] netlink: 'syz.1.1811': attribute type 10 has an invalid length.
[  199.317713][T13317] netlink: 'syz.0.1819': attribute type 1 has an invalid length.
[  199.353174][T13317] bond46: entered promiscuous mode
[  199.359723][T13317] 8021q: adding VLAN 0 to HW filter on device bond46
[  199.371439][T13318] batadv2: entered promiscuous mode
[  199.373569][T13318] batadv2: entered allmulticast mode
[  199.378291][T13318] 8021q: adding VLAN 0 to HW filter on device batadv2
[  199.382675][T13318] bond46: (slave batadv2): making interface the new active one
[  199.387054][T13318] bond46: (slave batadv2): Enslaving as an active interface with an up link
[  199.407589][T13325] gtp2: entered promiscuous mode
[  199.409217][T13325] gtp2: entered allmulticast mode
[  199.417260][T13327] ==================================================================
[  199.420439][T13327] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  199.423600][T13327] Read of size 1 at addr ffff88802a110c30 by task syz.1.1822/13327
[  199.426391][T13327] 
[  199.427762][T13327] CPU: 0 UID: 0 PID: 13327 Comm: syz.1.1822 Not tainted syzkaller #0 PREEMPT(full) 
[  199.427774][T13327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.427780][T13327] Call Trace:
[  199.427785][T13327]  <TASK>
[  199.427792][T13327]  dump_stack_lvl+0x189/0x250
[  199.427819][T13327]  ? __kasan_check_byte+0x12/0x40
[  199.427840][T13327]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.427855][T13327]  ? lock_release+0x4b/0x3e0
[  199.427876][T13327]  ? __virt_addr_valid+0x4a5/0x5c0
[  199.427897][T13327]  print_report+0xca/0x240
[  199.427911][T13327]  ? __xfrm_state_insert+0x8af/0x1450
[  199.427928][T13327]  kasan_report+0x118/0x150
[  199.427944][T13327]  ? __xfrm_state_insert+0x8af/0x1450
[  199.427954][T13327]  __xfrm_state_insert+0x8af/0x1450
[  199.427967][T13327]  ? xfrm_state_insert+0x44/0x60
[  199.427981][T13327]  xfrm_state_insert+0x54/0x60
[  199.427992][T13327]  ipcomp6_init_state+0x655/0x900
[  199.428011][T13327]  __xfrm_init_state+0xa76/0x13f0
[  199.428028][T13327]  ? __xfrm_init_state+0x7ef/0x13f0
[  199.428046][T13327]  xfrm_init_state+0x18/0xa0
[  199.428059][T13327]  pfkey_add+0x1d38/0x2e00
[  199.428082][T13327]  ? __pfx_pfkey_add+0x10/0x10
[  199.428094][T13327]  ? kmem_cache_free+0x18f/0x400
[  199.428118][T13327]  pfkey_sendmsg+0xbfe/0x1090
[  199.428133][T13327]  ? trace_sched_exit_tp+0x36/0x110
[  199.428154][T13327]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.428174][T13327]  ? aa_sock_msg_perm+0xf1/0x1d0
[  199.428188][T13327]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.428202][T13327]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.428215][T13327]  __sock_sendmsg+0x21c/0x270
[  199.428236][T13327]  ____sys_sendmsg+0x505/0x830
[  199.428254][T13327]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.428274][T13327]  ? import_iovec+0x74/0xa0
[  199.428293][T13327]  ___sys_sendmsg+0x21f/0x2a0
[  199.428310][T13327]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.428340][T13327]  ? __fget_files+0x2a/0x420
[  199.428352][T13327]  ? __fget_files+0x3a0/0x420
[  199.428368][T13327]  __x64_sys_sendmsg+0x19b/0x260
[  199.428384][T13327]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.428404][T13327]  ? rcu_is_watching+0x15/0xb0
[  199.428419][T13327]  ? do_syscall_64+0xbe/0x3b0
[  199.428435][T13327]  do_syscall_64+0xfa/0x3b0
[  199.428449][T13327]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.428462][T13327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.428475][T13327]  ? exc_page_fault+0x9f/0xf0
[  199.428488][T13327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.428532][T13327] RIP: 0033:0x7f18be18ebe9
[  199.428547][T13327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.428560][T13327] RSP: 002b:00007f18befcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.428576][T13327] RAX: ffffffffffffffda RBX: 00007f18be3c5fa0 RCX: 00007f18be18ebe9
[  199.428587][T13327] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  199.428596][T13327] RBP: 00007f18be211e19 R08: 0000000000000000 R09: 0000000000000000
[  199.428606][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.428615][T13327] R13: 00007f18be3c6038 R14: 00007f18be3c5fa0 R15: 00007fff4fb716b8
[  199.428632][T13327]  </TASK>
[  199.428637][T13327] 
[  199.545264][T13327] Allocated by task 8037:
[  199.546848][T13327]  kasan_save_track+0x3e/0x80
[  199.548693][T13327]  __kasan_slab_alloc+0x6c/0x80
[  199.550574][T13327]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  199.552705][T13327]  xfrm_state_alloc+0x24/0x2f0
[  199.554582][T13327]  __find_acq_core+0x8a7/0x1c00
[  199.556420][T13327]  xfrm_find_acq+0x78/0xa0
[  199.558156][T13327]  xfrm_alloc_userspi+0x6b3/0xc90
[  199.560109][T13327]  xfrm_user_rcv_msg+0x7a3/0xab0
[  199.562031][T13327]  netlink_rcv_skb+0x208/0x470
[  199.563928][T13327]  xfrm_netlink_rcv+0x79/0x90
[  199.565831][T13327]  netlink_unicast+0x82f/0x9e0
[  199.567654][T13327]  netlink_sendmsg+0x805/0xb30
[  199.569211][T13327]  __sock_sendmsg+0x21c/0x270
[  199.570656][T13327]  ____sys_sendmsg+0x505/0x830
[  199.572262][T13327]  ___sys_sendmsg+0x21f/0x2a0
[  199.573783][T13327]  __x64_sys_sendmsg+0x19b/0x260
[  199.575393][T13327]  do_syscall_64+0xfa/0x3b0
[  199.576931][T13327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.578806][T13327] 
[  199.579603][T13327] Freed by task 10:
[  199.580858][T13327]  kasan_save_track+0x3e/0x80
[  199.582326][T13327]  kasan_save_free_info+0x46/0x50
[  199.584148][T13327]  __kasan_slab_free+0x5b/0x80
[  199.585938][T13327]  kmem_cache_free+0x18f/0x400
[  199.587401][T13327]  xfrm_state_gc_task+0x52d/0x6b0
[  199.588907][T13327]  process_scheduled_works+0xae1/0x17b0
[  199.590609][T13327]  worker_thread+0x8a0/0xda0
[  199.592152][T13327]  kthread+0x711/0x8a0
[  199.593627][T13327]  ret_from_fork+0x3fc/0x770
[  199.595005][T13327]  ret_from_fork_asm+0x1a/0x30
[  199.596418][T13327] 
[  199.597132][T13327] The buggy address belongs to the object at ffff88802a110900
[  199.597132][T13327]  which belongs to the cache xfrm_state of size 928
[  199.602055][T13327] The buggy address is located 816 bytes inside of
[  199.602055][T13327]  freed 928-byte region [ffff88802a110900, ffff88802a110ca0)
[  199.607320][T13327] 
[  199.608247][T13327] The buggy address belongs to the physical page:
[  199.610713][T13327] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a113180 pfn:0x2a110
[  199.614434][T13327] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  199.617666][T13327] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  199.620534][T13327] page_type: f5(slab)
[  199.622062][T13327] raw: 00fff00000000040 ffff888104edb280 dead000000000122 0000000000000000
[  199.625285][T13327] raw: ffff88802a113180 00000000800e0007 00000000f5000000 0000000000000000
[  199.628577][T13327] head: 00fff00000000040 ffff888104edb280 dead000000000122 0000000000000000
[  199.631903][T13327] head: ffff88802a113180 00000000800e0007 00000000f5000000 0000000000000000
[  199.635360][T13327] head: 00fff00000000002 ffffea0000a84401 00000000ffffffff 00000000ffffffff
[  199.638728][T13327] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  199.642003][T13327] page dumped because: kasan: bad access detected
[  199.644511][T13327] page_owner tracks the page as allocated
[  199.646773][T13327] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5925, tgid 5924 (syz.1.2), ts 59829199890, free_ts 59828865327
[  199.653889][T13327]  post_alloc_hook+0x240/0x2a0
[  199.655808][T13327]  get_page_from_freelist+0x21e4/0x22c0
[  199.658006][T13327]  __alloc_frozen_pages_noprof+0x181/0x370
[  199.660263][T13327]  alloc_pages_mpol+0x232/0x4a0
[  199.662171][T13327]  allocate_slab+0x8a/0x370
[  199.663943][T13327]  ___slab_alloc+0xbeb/0x1410
[  199.665773][T13327]  kmem_cache_alloc_noprof+0x283/0x3c0
[  199.667993][T13327]  xfrm_state_alloc+0x24/0x2f0
[  199.669902][T13327]  xfrm_add_sa+0x17d1/0x4070
[  199.671723][T13327]  xfrm_user_rcv_msg+0x7a3/0xab0
[  199.673640][T13327]  netlink_rcv_skb+0x208/0x470
[  199.675461][T13327]  xfrm_netlink_rcv+0x79/0x90
[  199.677331][T13327]  netlink_unicast+0x82f/0x9e0
[  199.679190][T13327]  netlink_sendmsg+0x805/0xb30
[  199.681053][T13327]  __sock_sendmsg+0x21c/0x270
[  199.682879][T13327]  ____sys_sendmsg+0x505/0x830
[  199.684756][T13327] page last free pid 5924 tgid 5924 stack trace:
[  199.687148][T13327]  __free_frozen_pages+0xbc4/0xd30
[  199.689115][T13327]  __slab_free+0x303/0x3c0
[  199.690838][T13327]  qlist_free_all+0x97/0x140
[  199.692631][T13327]  kasan_quarantine_reduce+0x148/0x160
[  199.694814][T13327]  __kasan_slab_alloc+0x22/0x80
[  199.696755][T13327]  __kmalloc_node_noprof+0x21b/0x4e0
[  199.698757][T13327]  alloc_slab_obj_exts+0x39/0xa0
[  199.700711][T13327]  __memcg_slab_post_alloc_hook+0x31e/0x7f0
[  199.703013][T13327]  kmem_cache_alloc_noprof+0x2bf/0x3c0
[  199.705150][T13327]  __anon_vma_prepare+0x117/0x4a0
[  199.707102][T13327]  __handle_mm_fault+0x4b2d/0x5440
[  199.709062][T13327]  handle_mm_fault+0x40a/0x8e0
[  199.710926][T13327]  do_user_addr_fault+0xa81/0x1390
[  199.712639][T13327]  exc_page_fault+0x76/0xf0
[  199.714028][T13327]  asm_exc_page_fault+0x26/0x30
[  199.715547][T13327] 
[  199.716277][T13327] Memory state around the buggy address:
[  199.718298][T13327]  ffff88802a110b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.721270][T13327]  ffff88802a110b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.724238][T13327] >ffff88802a110c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.727230][T13327]                                      ^
[  199.729361][T13327]  ffff88802a110c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  199.732517][T13327]  ffff88802a110d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  199.735591][T13327] ==================================================================
[  199.738935][T13327] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  199.741739][T13327] CPU: 0 UID: 0 PID: 13327 Comm: syz.1.1822 Not tainted syzkaller #0 PREEMPT(full) 
[  199.745325][T13327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.749207][T13327] Call Trace:
[  199.750531][T13327]  <TASK>
[  199.751752][T13327]  dump_stack_lvl+0x99/0x250
[  199.753551][T13327]  ? __asan_memcpy+0x40/0x70
[  199.755362][T13327]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.757497][T13327]  ? __pfx__printk+0x10/0x10
[  199.759282][T13327]  vpanic+0x281/0x750
[  199.760903][T13327]  ? __pfx_vpanic+0x10/0x10
[  199.762663][T13327]  ? irqentry_exit+0x74/0x90
[  199.764459][T13327]  panic+0xb9/0xc0
[  199.765933][T13327]  ? __pfx_panic+0x10/0x10
[  199.767646][T13327]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  199.769963][T13327]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  199.772231][T13327]  ? __xfrm_state_insert+0x8af/0x1450
[  199.774288][T13327]  check_panic_on_warn+0x89/0xb0
[  199.776195][T13327]  ? __xfrm_state_insert+0x8af/0x1450
[  199.778289][T13327]  end_report+0x78/0x160
[  199.779920][T13327]  kasan_report+0x129/0x150
[  199.781710][T13327]  ? __xfrm_state_insert+0x8af/0x1450
[  199.783794][T13327]  __xfrm_state_insert+0x8af/0x1450
[  199.785827][T13327]  ? xfrm_state_insert+0x44/0x60
[  199.787811][T13327]  xfrm_state_insert+0x54/0x60
[  199.789710][T13327]  ipcomp6_init_state+0x655/0x900
[  199.791677][T13327]  __xfrm_init_state+0xa76/0x13f0
[  199.793607][T13327]  ? __xfrm_init_state+0x7ef/0x13f0
[  199.795573][T13327]  xfrm_init_state+0x18/0xa0
[  199.797412][T13327]  pfkey_add+0x1d38/0x2e00
[  199.799146][T13327]  ? __pfx_pfkey_add+0x10/0x10
[  199.801018][T13327]  ? kmem_cache_free+0x18f/0x400
[  199.802980][T13327]  pfkey_sendmsg+0xbfe/0x1090
[  199.804909][T13327]  ? trace_sched_exit_tp+0x36/0x110
[  199.806757][T13327]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.808512][T13327]  ? aa_sock_msg_perm+0xf1/0x1d0
[  199.809961][T13327]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.811983][T13327]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.813764][T13327]  __sock_sendmsg+0x21c/0x270
[  199.815193][T13327]  ____sys_sendmsg+0x505/0x830
[  199.817009][T13327]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.819038][T13327]  ? import_iovec+0x74/0xa0
[  199.820795][T13327]  ___sys_sendmsg+0x21f/0x2a0
[  199.822667][T13327]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.824748][T13327]  ? __fget_files+0x2a/0x420
[  199.826524][T13327]  ? __fget_files+0x3a0/0x420
[  199.828380][T13327]  __x64_sys_sendmsg+0x19b/0x260
[  199.830422][T13327]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.832616][T13327]  ? rcu_is_watching+0x15/0xb0
[  199.834528][T13327]  ? do_syscall_64+0xbe/0x3b0
[  199.836350][T13327]  do_syscall_64+0xfa/0x3b0
[  199.838111][T13327]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.840117][T13327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.842403][T13327]  ? exc_page_fault+0x9f/0xf0
[  199.844289][T13327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.846558][T13327] RIP: 0033:0x7f18be18ebe9
[  199.848292][T13327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.855554][T13327] RSP: 002b:00007f18befcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.858734][T13327] RAX: ffffffffffffffda RBX: 00007f18be3c5fa0 RCX: 00007f18be18ebe9
[  199.861722][T13327] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  199.864741][T13327] RBP: 00007f18be211e19 R08: 0000000000000000 R09: 0000000000000000
[  199.867735][T13327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.870563][T13327] R13: 00007f18be3c6038 R14: 00007f18be3c5fa0 R15: 00007fff4fb716b8
[  199.873031][T13327]  </TASK>
[  199.874580][T13327] Kernel Offset: disabled
[  199.875892][T13327] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:43:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001619 RDI=000000000000161a RBP=00000000000003f8 RSP=ffffc9000255edb0
R8 =ffff888106c70237 R9 =1ffff11020d8e046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018c4 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f18befcb6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f18befcafc8 CR3=000000011bf3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f18be397498 00007f18be397470 XMM03=00007f18be3974a8 00007f18be3974a0
XMM04=00007f18beefd100 00007f18be397460 XMM05=00007f18be397478 00007f18be3974c0
XMM06=00007f18be3974b8 00007f18be3974b0 XMM07=00007f18be3974a8 00007f18be3974a0
XMM08=0000000000000000 00007f18be212ee7 XMM09=0000000000000000 00007f18be212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=2b07ad02b785f300 RDX=0000000000000000
RSI=ffffffff8dba8a8e RDI=ffffffff8be33800 RBP=ffffffff822e559d RSP=ffffc90003f1f2a8
R8 =0000000000000000 R9 =ffffffff822e559d R10=dffffc0000000000 R11=fffff940008b5859
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819d5ba0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555591093500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9afb4f56c0 CR3=0000000028630000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9afa812e53
XMM06=0000000000000000 00007f9afa812e4d XMM07=0000000000000000 00007f9afa812e61
XMM08=0000000000000000 00007f9afa812ee7 XMM09=0000000000000000 00007f9afa812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
