last executing test programs:

1.401030399s ago: executing program 2 (id=1586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x81}]}, 0x28}}, 0x40)

1.398906556s ago: executing program 2 (id=1587):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r2=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r2, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x0, 0x806, 0xffffffff}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8090) (async)
getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
write$cgroup_subtree(r3, 0x0, 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @local}, &(0x7f00000004c0)=0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x44, r7, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x44}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:lost_found_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x4004094) (async)
r8 = socket(0x28, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003704000000000006000000000000eabb2c5a4dd9637ecf84b2673fc2afa69343ef02b30a509b0068d9d041e2ec8e0f518d2bf2395a13d687ecf01d87986c85a331053d958abc53a113fc", @ANYRES32=0x0, @ANYBLOB="83040500000000002000128008000100677265001400028008000600ac1414bb08000700e0000001"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.262357658s ago: executing program 2 (id=1590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0, 0x5000000}, 0x5}], 0x40000000000000d, 0x2000, 0x0)

1.26076965s ago: executing program 2 (id=1591):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r0 = socket(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
unshare(0x10040800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x18}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000002140)="b9fe030768045cac989a14f088a870eeb2f6", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x0, 0x4800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/4096, 0x2d, 0x1000, 0x1}, 0x20)
accept$unix(r0, 0x0, &(0x7f0000000100))
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_DELTABLE={0xf0, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x93, 0x6, "1e3e6054ba68854c6bc4dce31e69062b8122f54bbc42a13926c17bffa47bf3f583fb54eff853e57a06bad8e589ff1fee6a7125edded0d3c73b40d1cce12ddbfee8335cadf8d1c9d90ac56e53a4490d3d9b80d0a57c046b85d2ca3d034eaf7252ed73c5d21f559b06ee77b72887705ecb79906a3df98356888b5b36cf25436ec0083fb26599d82955fc01d184852f0f"}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELTABLE={0x184, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x54, 0x6, "ac629dc1585e902f71a1b2794a9d54ee495e66b6116188a621ef275f8d29cb2a6ed4e06997d475503767d6df8c2efd10d5e123fdbd064c70c42b9bf05c1e7954f4efe35ecbd6f749801772c9106fd01c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x102, 0x6, "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"}]}, @NFT_MSG_DELSET={0x6d4, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DESC={0x308, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x118, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffc00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x27c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x500c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffeff}]}]}, @NFTA_SET_DESC_CONCAT={0x1ac, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x39a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2d6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xefc00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPRESSIONS={0x3a0, 0x12, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}, {0x60, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x5, 0x2, 0xf9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xfe}]}}}, {0x298, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x288, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x254, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "09e0c0d529be7b434f1c96c64b40cb49173350f581a746c8a938f5540954d7f3c57deefa1267d995fdc0683ade48907211bec95f7fa3abac9586289ea5ab5033bf05458559d3855eea75cd9b1d291d5ccc11a7b201515af7538a0ed254caf5e65e432b2225e42701cdafa3ba6684543ed10ed690f916bdfc1c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "e6167cfd552803c98c0e58048f23a53ff87d117c6072e446dd4ee5c7aaf2a586aa741baa3e2a9b8fc4e3876df1cf249c4f9c3e2693ba93dfd16b732d7fcb61d0757c4b4d94cfa7279c945d38b2cae5d5c4f433feaa9704a3ee6ffd325152ba21e05b83029a73738bce465691435d1b3f6ebe3789924101a48166e657aff1ba0a22d89bab9dcb72aa"}, @NFTA_DATA_VALUE={0xcb, 0x1, "0ac9214366445a7360cf669036d72caf222d97ca82b9d5f83f336142b652ab4ef7f1f2ef38c0ea80f50fc53466719e9b10a2d6a294a8914ceccf8f542038609d8d1134315adba1e1e2576454fee50abe865e4d54fcab489eb90a9042260cf85b04c275a9d2073d236648229fad6fd71d0a5b591a68b308dfd93c6ef0fd07c2a97334991644390d4bb3fcd03c3bfa04484d6080d572912b49136b1be88c413df167c9d61bff3dcc7c89a8b9c9ce72645cfb400fb3fc3f917f27502b45fa4ee178be108580ebfa92"}]}, @NFTA_RANGE_FROM_DATA={0x30, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9d8}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r6=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r6, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)

999.102536ms ago: executing program 1 (id=1598):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0, 0x140e0000}, 0x5}], 0x40000000000000d, 0x2000, 0x0)

995.769311ms ago: executing program 1 (id=1599):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x4, 0x4}}, 0x26)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r2}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="186e00000000000000a6e916c7a150e7de4d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8918, &(0x7f0000000000)={r6})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfb, 0x25dfdbf7, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)

919.030898ms ago: executing program 2 (id=1603):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000ec0))
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES64=r4], 0x48}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140)=0x3, 0x4)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64], 0x26c0}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800470400300000000000059078ac1414ff0a010100860800000002010200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffffff00000000"], 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000000000000000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="8042000000000000140003006d6163736563300000000000000000000800168004000180"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendto$inet6(r6, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d2e5bf308000300", @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e64"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="01810100000000001c001280090031ec626f6e64000000000c0002800800140004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4060004}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r9, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0)

132.308556ms ago: executing program 0 (id=1616):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x12) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r7, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async)
getsockopt(r6, 0x111, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$can_j1939(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)="b28cd19b03229ff3c943cb6812468b508d326e07402e047f57482185d25fb6ee2ec90b081c77a15f015f6e8ff2a5999c11e45fdad6af5a6eefac0111ea11902af839fbdf16cd7c706369becdc49b0e5d75147b572c4cf50a990cc692e8468f220e051f9e84aa9360959a5f7ce338de0c4fec0a958e006b1a76c81ee2c92751089d680faedfcc53f563009698ab5d286cd8c03be7272c1cb54cc6735509c1078064a2a04cbdd3c6d4181ba23bcdead00caead22fde2285f47dc0792601c52796301fbac5e987d48de35a60a2bb3f2fd56df350212553171e12a6552dabe2ff0f7dbcee09ea5ce8144cc5c68dfb4f62a31811a2fa5cba6d9", 0xf7}, 0x1, 0x0, 0x0, 0x4041}, 0x880)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)

132.053324ms ago: executing program 1 (id=1617):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1)

130.066196ms ago: executing program 1 (id=1618):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf})
setsockopt(r0, 0x81, 0x10000, &(0x7f00000003c0)="1a00000102220500", 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000040), &(0x7f0000000180)=0xffffffffffffffd6)
syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaa0086dd6021800000100600fc000000000000000000000000000000ff020000000000000000000000e300018600907800"/64], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)

129.504145ms ago: executing program 0 (id=1619):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='signal_generate\x00', r0}, 0x18)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000001180)={&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, &(0x7f0000001100)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xfff}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}], 0x30, 0x810}, 0x4000040)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r6, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r6, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14)
sendmmsg$inet(r6, &(0x7f0000006680)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x24000800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0}, &(0x7f0000000400)=0x14)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x69e, '\x00', r7, r8, 0x5, 0x3}, 0x50)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xe821651e0a1b45fc)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0x5907}], 0x1c)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000a070a01010000000000000000010000030900010073797a30000000000900020073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2400e040)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)

129.190933ms ago: executing program 1 (id=1620):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, '\x00', "a15a280600", "3bcec426", "033d5f51b5354423"}, 0x28)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="250300"/14], 0x14}, 0x1, 0x0, 0x0, 0x2c004043}, 0x24008000)
socket$kcm(0xa, 0x2, 0x87)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x300488c5)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000080000008000040000000000", @ANYRESDEC=0x0, @ANYBLOB="e88af97fca51100dc89d87e10667f1343609dc024f68166a806bfd9ca5ab4853160388046733623f5b760e163f25dd20fc0488b4eec65c6850a3639b0e2aa8274e2e09f1a031b79ff74d9c210d6ea348ffc780b93729c1629cb868189de34c89e9be17a11c921a", @ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="000000000000001300"/28], 0x50)
r6 = socket(0x27, 0x3, 0xc)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = epoll_create(0x1)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000600)={r4, r3, 0x7f, 0x9f, &(0x7f00000003c0)="a57c28569cc2bd13aa5ecbb07d22ca00267c2fa5dfd4130e7141c3cf768cd3544fc29435aaaa310fbd795627719658f5f16f4016abea35bd85b67840e01c13cd5b1e4dc59dccca68593e4b1cb0e21840b32bb97cebc0667524156a07c5ab0b2c74bbc8ce16c9583b209b18e438578ae02c7b238fbc235db58d16192b2c8883ed745e35ce965c25504e50d9586e1cbd979aa856ae920aabd05f92a8e8f350d8", 0x8, 0x0, 0x0, 0x9, 0x40, 0x1, 0x2, 'syz1\x00'})
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16], 0xcc}, 0x1, 0x0, 0x0, 0x884}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})

52.460209ms ago: executing program 0 (id=1621):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1, 0x0, 0x0, 0x58080000}, 0x5}], 0x40000000000000d, 0x2000, 0x0)

51.363072ms ago: executing program 0 (id=1622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000004", @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

50.701386ms ago: executing program 2 (id=1623):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @random="82a8c4b1221b"})
write$tun(r1, &(0x7f0000000ac0)={@val, @void, @eth={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa004, 0x86dd, 0x74, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}, "79370e3f721c140d33176317e77bd7671e14fbdc2c6186ac02220e52557848a79d88461c0ddef16d95de5b904987f52079ce703c8a87829a89b69209958bcc5258822fb330f06c68d06527c4c78cb354b102d048dec50153954b68e5492bae49542c3500c3372a1e"}}}}}}}, 0x9a)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007600"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1800, 0x0, 0x3}, 0x20)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="050000000000000071116100000000008510000002000000850000005500000095000000000000009500a50500000000cc6d6b978b2ba6d25fd396a2ed5789b563cdd044d7cf761295f6132922cb7fc0b432a5cf495fae485608e93a85ac1f7215ad8a86f22472457d73a7297ad7d684116367a3703a2f6bc3e07f2363050e84602bf48d6bd1dc85afd6d209a7818ff01d262033d66988f0c62fb92429dcff7261216cf304fa368bc79ee561667efccde9814401c554779d602c4df2fe102358bab215aa39fd8dbeeccbba5593cb54e2219a191b4079251ff97b0692ed51ab36702759aa67d566cd3e5ce0010206cdb436f27e1dddd9edd357"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000180)={0x2c, 0x2, r5}, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
pipe(&(0x7f0000000800)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000009c0), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, <r11=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='GPL\x00', 0xe5, 0x88, &(0x7f00000002c0)=""/136, 0x41000, 0x1, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r8, r9, r10, r11, r12, r13], &(0x7f0000000680)=[{0x0, 0x3, 0x4, 0x5}], 0x10, 0x7f}, 0x94)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x1412, 0x800, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x0)

2.064497ms ago: executing program 0 (id=1624):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, 0x0, 0x7c, 0x40800, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000a03906c5bfce60869a713cd5c7e6320368266f395954b8e1fedb3122e8945aafc6673abd1546daa0cad9761bbefc5230d99f90e5689078862e1cf6f7f025cf8d7de66657ce14778d181bc3369f977227b825bf042c68034fda4de2a31438e9e2024b6ede"], 0x50)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00120002000a0006005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r2}, 0x38)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="07000d8005"], 0x24}, 0x1, 0x5502000000000000}, 0x4000)

1.774614ms ago: executing program 1 (id=1625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r5=>0x0})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000240)='|w')
ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080))
connect$x25(0xffffffffffffffff, &(0x7f0000000180), 0x12)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

0s ago: executing program 0 (id=1626):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x20000000000000e5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000000000a0000002950000000000e7ff009ec2ffff"], 0x0}, 0x94) (async)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000001880)=0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async, rerun: 32)
r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0x0, @multicast2, 0x4e20, 0x4, 'none\x00', 0x8, 0x1, 0x50}, 0x2c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/136, 0x88, 0x8040, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (rerun: 32)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3e, 0x1, 0x70bd29, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0x8, 0xe2, 0x0, 0x0, @uid}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180020006800e97900000000000000000a00000033000000"], 0x18}}, 0x0)

kernel console output (not intermixed with test programs):

UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.033517][ T6041] hsr_slave_0 (unregistering): left promiscuous mode
[   60.033730][ T6025] syz.0.29: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.042742][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(full) 
[   60.042758][ T6025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.042765][ T6025] Call Trace:
[   60.042770][ T6025]  <TASK>
[   60.042776][ T6025]  dump_stack_lvl+0x189/0x250
[   60.042797][ T6025]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.042812][ T6025]  ? __pfx__printk+0x10/0x10
[   60.042830][ T6025]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.042845][ T6025]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.042860][ T6025]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.042875][ T6025]  warn_alloc+0x214/0x310
[   60.042898][ T6025]  ? __pfx_warn_alloc+0x10/0x10
[   60.042923][ T6025]  ? __get_vm_area_node+0x28f/0x300
[   60.042941][ T6025]  ? xskq_create+0xbf/0x170
[   60.042956][ T6025]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   60.042993][ T6025]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.043026][ T6025]  ? __kasan_kmalloc+0x93/0xb0
[   60.043045][ T6025]  vmalloc_user_noprof+0xad/0xf0
[   60.043063][ T6025]  ? xskq_create+0xbf/0x170
[   60.043075][ T6025]  xskq_create+0xbf/0x170
[   60.043089][ T6025]  xsk_init_queue+0xb0/0x110
[   60.043103][ T6025]  xsk_setsockopt+0x57b/0x8d0
[   60.043123][ T6025]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.043141][ T6025]  ? __pfx_aa_sk_perm+0x10/0x10
[   60.043160][ T6025]  ? __fget_files+0x2a/0x420
[   60.043171][ T6025]  ? aa_sock_opt_perm+0xff/0x1b0
[   60.043185][ T6025]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   60.043199][ T6025]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.043218][ T6025]  do_sock_setsockopt+0x17c/0x1b0
[   60.043236][ T6025]  __x64_sys_setsockopt+0x13f/0x1b0
[   60.043280][ T6025]  do_syscall_64+0xfa/0x3b0
[   60.043296][ T6025]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.043308][ T6025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.043320][ T6025]  ? exc_page_fault+0x9f/0xf0
[   60.043333][ T6025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.043345][ T6025] RIP: 0033:0x7f49c7d8eba9
[   60.043356][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.043366][ T6025] RSP: 002b:00007f49c8ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.043379][ T6025] RAX: ffffffffffffffda RBX: 00007f49c7fd6090 RCX: 00007f49c7d8eba9
[   60.043388][ T6025] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[   60.043395][ T6025] RBP: 00007f49c7e11e19 R08: 0000000000000004 R09: 0000000000000000
[   60.043402][ T6025] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   60.043410][ T6025] R13: 00007f49c7fd6128 R14: 00007f49c7fd6090 R15: 00007ffd25e03308
[   60.043430][ T6025]  </TASK>
[   60.043435][ T6025] Mem-Info:
[   60.155684][ T6025] active_anon:5480 inactive_anon:0 isolated_anon:0
[   60.155684][ T6025]  active_file:1263 inactive_file:38236 isolated_file:0
[   60.155684][ T6025]  unevictable:1768 dirty:1474 writeback:0
[   60.155684][ T6025]  slab_reclaimable:9702 slab_unreclaimable:63846
[   60.155684][ T6025]  mapped:20320 shmem:2433 pagetables:977
[   60.155684][ T6025]  sec_pagetables:0 bounce:0
[   60.155684][ T6025]  kernel_misc_reclaimable:0
[   60.155684][ T6025]  free:282032 free_pcp:24855 free_cma:0
[   60.178355][ T6025] Node 0 active_anon:12248kB inactive_anon:0kB active_file:4028kB inactive_file:147024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30336kB dirty:5744kB writeback:0kB shmem:4660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6592kB pagetables:1860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.197242][ T6025] Node 1 active_anon:9672kB inactive_anon:0kB active_file:1024kB inactive_file:5920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50944kB dirty:152kB writeback:0kB shmem:5072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4988kB pagetables:2048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.213288][ T6025] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.223707][ T6025] lowmem_reserve[]: 0 811 811 811 811
[   60.225670][ T6025] Node 0 DMA32 free:257332kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12248kB inactive_anon:0kB active_file:4028kB inactive_file:147024kB unevictable:3536kB writepending:5744kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:64136kB local_pcp:20900kB free_cma:0kB
[   60.237897][ T6025] lowmem_reserve[]: 0 0 0 0 0
[   60.240224][ T6025] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.253104][ T6025] lowmem_reserve[]: 0 0 854 854 854
[   60.255352][ T6025] Node 1 Normal free:396820kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9672kB inactive_anon:0kB active_file:1024kB inactive_file:5920kB unevictable:3536kB writepending:152kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35316kB local_pcp:19396kB free_cma:0kB
[   60.267004][ T6025] lowmem_reserve[]: 0 0 0 0 0
[   60.268954][ T6025] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   60.273979][ T6025] Node 0 DMA32: 679*4kB (UME) 224*8kB (UM) 95*16kB (UME) 73*32kB (UME) 37*64kB (UM) 17*128kB (UME) 13*256kB (UME) 11*512kB (UME) 14*1024kB (UME) 8*2048kB (UME) 50*4096kB (M) = 257388kB
[   60.280979][ T6025] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   60.287005][ T6025] Node 1 Normal: 193*4kB (UME) 542*8kB (UME) 353*16kB (UME) 14*32kB (ME) 3*64kB (UME) 5*128kB (M) 3*256kB (UME) 2*512kB (ME) 0*1024kB 1*2048kB (M) 93*4096kB (M) = 396804kB
[   60.294180][ T6025] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   60.297873][ T6025] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.301726][ T6025] 41949 total pagecache pages
[   60.303655][ T6025] 0 pages in swap cache
[   60.305426][ T6025] Free swap  = 124996kB
[   60.307118][ T6025] Total swap = 124996kB
[   60.309273][ T6025] 786301 pages RAM
[   60.310847][ T6025] 0 pages HighMem/MovableOnly
[   60.312795][ T6025] 241346 pages reserved
[   60.314482][ T6025] 0 pages cma reserved
[   60.433683][ T6045] bridge_slave_1: left allmulticast mode
[   60.435973][ T6045] bridge_slave_1: left promiscuous mode
[   60.442591][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.450806][ T6045] bridge_slave_0: left allmulticast mode
[   60.453312][ T6045] bridge_slave_0: left promiscuous mode
[   60.455855][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.775121][ T6053] Bluetooth: MGMT ver 1.23
[   61.288688][ T5236] Bluetooth: hci1: command tx timeout
[   61.288734][ T5842] Bluetooth: hci0: command tx timeout
[   61.290935][ T5845] Bluetooth: hci2: command tx timeout
[   61.367097][ T6061] sctp: [Deprecated]: syz.2.39 (pid 6061) Use of int in maxseg socket option.
[   61.367097][ T6061] Use struct sctp_assoc_value instead
[   61.850318][ T6081] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   61.850491][ T6080] IPVS: stopping backup sync thread 6081 ...
[   62.021720][ T6095] vlan2: entered allmulticast mode
[   62.023642][ T6095] veth1: entered allmulticast mode
[   62.864518][ T6124] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   63.190434][ T6146] __nla_validate_parse: 15 callbacks suppressed
[   63.190447][ T6146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.204174][ T6148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.214399][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'.
[   63.226343][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.252390][ T6150] netlink: 84 bytes leftover after parsing attributes in process `syz.1.60'.
[   63.311586][ T6155] syzkaller1: entered promiscuous mode
[   63.314130][ T6155] syzkaller1: entered allmulticast mode
[   63.354765][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'.
[   63.368664][ T5236] Bluetooth: hci1: command tx timeout
[   63.370625][ T5236] Bluetooth: hci2: command tx timeout
[   63.372671][ T5845] Bluetooth: hci0: command tx timeout
[   63.410931][ T6157] ip6tnl1: entered promiscuous mode
[   63.413907][ T6157] ip6tnl1: entered allmulticast mode
[   63.417897][ T6157] team0: Device ip6tnl1 is of different type
[   64.071766][ T6167] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   64.240896][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'.
[   64.264113][ T6177] validate_nla: 4 callbacks suppressed
[   64.264126][ T6177] netlink: 'syz.0.67': attribute type 16 has an invalid length.
[   64.278766][ T6177] netlink: 'syz.0.67': attribute type 17 has an invalid length.
[   64.416752][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.424835][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.486647][ T5873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.500798][ T5873] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.505461][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.508410][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.574419][ T6192] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET)
[   64.821860][ T6204] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   64.826338][ T6203] IPVS: stopping backup sync thread 6204 ...
[   64.839432][ T6205] netlink: 48 bytes leftover after parsing attributes in process `syz.2.74'.
[   64.846872][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'.
[   64.882061][ T6205] bond1: entered promiscuous mode
[   64.883994][ T6205] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.937382][ T6205] bond1 (unregistering): Released all slaves
[   65.151447][ T6223] tipc: Started in network mode
[   65.153476][ T6223] tipc: Node identity ae30d9ca8827, cluster identity 4711
[   65.155965][ T6223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.161828][ T6223] syzkaller0: MTU too low for tipc bearer
[   65.163974][ T6223] tipc: Disabling bearer <eth:syzkaller0>
[   65.226176][ T6229] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   65.231617][ T6224] team0: Port device dummy0 removed
[   65.234599][ T6224] bond0: (slave bond_slave_0): Releasing backup interface
[   65.240009][ T6224] bond0: (slave bond_slave_1): Releasing backup interface
[   65.255859][ T6224] team0: Port device team_slave_0 removed
[   65.266585][ T6224] team0: Port device team_slave_1 removed
[   65.269048][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.272264][ T6224] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.350140][ T6236] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'.
[   65.354420][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.83'.
[   65.675409][ T6250] netlink: 'syz.2.87': attribute type 1 has an invalid length.
[   65.722696][ T6257] syzkaller1: entered promiscuous mode
[   65.724652][ T6257] syzkaller1: entered allmulticast mode
[   65.732840][ T6258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   65.735276][ T6258] IPv6: NLM_F_CREATE should be set when creating new route
[   65.737563][ T6258] IPv6: NLM_F_CREATE should be set when creating new route
[   65.746768][ T6258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.065583][ T6279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.068239][ T6279] syzkaller0: entered promiscuous mode
[   66.070604][ T6279] syzkaller0: entered allmulticast mode
[   66.147119][ T6290] tipc: Resetting bearer <eth:syzkaller0>
[   66.368153][ T6310] syzkaller1: entered promiscuous mode
[   66.370652][ T6310] syzkaller1: entered allmulticast mode
[   66.554243][ T6316] bridge_slave_0: left allmulticast mode
[   66.556703][ T6316] bridge_slave_0: left promiscuous mode
[   66.559677][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.564905][ T6316] bridge_slave_1: left allmulticast mode
[   66.567404][ T6316] bridge_slave_1: left promiscuous mode
[   66.570674][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.580279][ T6316] bond0: (slave bond_slave_0): Releasing backup interface
[   66.585167][ T6316] bond0: (slave bond_slave_1): Releasing backup interface
[   66.605856][ T6316] team0: Port device team_slave_0 removed
[   66.610389][ T6316] team0: Port device team_slave_1 removed
[   66.612585][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.615462][ T6316] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.686085][ T6321] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   66.700233][ T6322] nbd: illegal input index 65508
[   66.703890][ T6321] nbd: illegal input index 65508
[   66.832453][ T6328] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   66.835976][ T6327] IPVS: stopping backup sync thread 6328 ...
[   66.857920][ T6332] netlink: 'syz.1.108': attribute type 2 has an invalid length.
[   66.861151][ T6332] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   66.915719][ T6278] tipc: Resetting bearer <eth:syzkaller0>
[   66.943568][ T6278] tipc: Disabling bearer <eth:syzkaller0>
[   66.950755][ T6343] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   67.116672][ T6353] batadv1: left allmulticast mode
[   67.118402][ T6353] batadv1: left promiscuous mode
[   67.123388][ T6353] bridge0: port 3(batadv1) entered disabled state
[   67.127085][ T6353] bridge_slave_1: left allmulticast mode
[   67.129154][ T6353] bridge_slave_1: left promiscuous mode
[   67.131064][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.134756][ T6353] bridge_slave_0: left allmulticast mode
[   67.136641][ T6353] bridge_slave_0: left promiscuous mode
[   67.140366][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.283984][ T6362] netlink: 'syz.0.112': attribute type 1 has an invalid length.
[   67.503883][ T6381] netlink: 'syz.1.117': attribute type 1 has an invalid length.
[   67.606629][ T6384] bridge0: port 1(veth0_to_bond) entered blocking state
[   67.610133][ T6384] bridge0: port 1(veth0_to_bond) entered disabled state
[   67.612883][ T6384] veth0_to_bond: entered allmulticast mode
[   67.616104][ T6384] veth0_to_bond: entered promiscuous mode
[   67.623934][ T6388] vlan0: entered allmulticast mode
[   67.625720][ T6388] veth1: entered allmulticast mode
[   67.627593][ T6388] bridge0: port 2(vlan0) entered blocking state
[   67.630575][ T6388] bridge0: port 2(vlan0) entered disabled state
[   67.633587][ T6388] vlan0: entered promiscuous mode
[   67.635400][ T6388] veth1: entered promiscuous mode
[   67.711756][ T6392] ip6tnl1: entered promiscuous mode
[   67.927497][ T6406] team0: Device gtp0 is up. Set it down before adding it as a team port
[   68.146626][ T6415] veth0: entered promiscuous mode
[   68.167884][ T6415] netlink: 'syz.1.126': attribute type 16 has an invalid length.
[   68.187668][ T6415] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.191058][ T6415] 8021q: adding VLAN 0 to HW filter on device team0
[   68.196751][ T6415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.232687][ T6415] veth0: left promiscuous mode
[   68.402586][ T6429] __nla_validate_parse: 13 callbacks suppressed
[   68.402600][ T6429] netlink: 224 bytes leftover after parsing attributes in process `syz.1.131'.
[   68.487911][ T6435] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   68.488011][ T6434] IPVS: stopping backup sync thread 6435 ...
[   68.532766][ T6438] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   68.536411][ T6437] IPVS: stopping backup sync thread 6438 ...
[   68.613992][ T6448] IPv6: NLM_F_CREATE should be specified when creating new route
[   68.617505][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.624635][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.628745][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.632929][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.637021][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.641729][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.658774][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.662940][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   68.667017][ T6448] netlink: 124 bytes leftover after parsing attributes in process `syz.1.136'.
[   69.560212][ T6465] validate_nla: 2 callbacks suppressed
[   69.560220][ T6465] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   69.567303][ T6465] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   69.616229][ T6465] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   69.801612][ T6465] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.842811][ T6468] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   70.060984][ T6492] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   70.089960][ T6492] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   70.094260][ T6492] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   70.122600][ T6498] netlink: zone id is out of range
[   70.124579][ T6498] netlink: zone id is out of range
[   70.127011][ T6498] netlink: zone id is out of range
[   70.131824][ T6498] netlink: zone id is out of range
[   70.137966][ T6492] gretap2: entered promiscuous mode
[   70.139837][ T6498] netlink: zone id is out of range
[   70.142552][ T6492] bond2: (slave gretap2): making interface the new active one
[   70.143146][ T6498] netlink: zone id is out of range
[   70.145599][ T6492] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   70.147087][ T6498] netlink: zone id is out of range
[   70.155676][ T6498] netlink: zone id is out of range
[   70.157687][ T6498] netlink: zone id is out of range
[   70.161150][ T6498] netlink: zone id is out of range
[   71.051640][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.054443][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.087251][ T6533] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[   71.377012][ T6552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.394130][ T6552] tipc: Disabling bearer <eth:syzkaller0>
[   71.503716][ T6567] vlan0: left promiscuous mode
[   71.507500][ T6567] veth1: left promiscuous mode
[   71.516427][ T6567] bridge0: port 2(vlan0) entered disabled state
[   71.522267][ T6567] veth0_to_bond: left allmulticast mode
[   71.524072][ T6567] veth0_to_bond: left promiscuous mode
[   71.527520][ T6567] bridge0: port 1(veth0_to_bond) entered disabled state
[   71.534297][ T6561] netlink: 'syz.1.155': attribute type 6 has an invalid length.
[   71.798072][ T6594] netlink: 'syz.2.167': attribute type 11 has an invalid length.
[   71.935115][ T6609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.966375][ T6609] tipc: Disabling bearer <eth:syzkaller0>
[   72.280204][ T6626] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   72.284346][ T6626] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   72.508287][ T6634] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   72.513445][ T6633] IPVS: stopping backup sync thread 6634 ...
[   72.639954][ T6640] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   72.717485][ T6642] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   72.985658][ T6657] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   72.991660][ T6657] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   73.034366][ T6659] macvlan2: entered promiscuous mode
[   73.036333][ T6659] macvlan2: entered allmulticast mode
[   73.038368][ T6659] bond2: (slave macvlan2): Error -98 calling set_mac_address
[   73.123730][ T6663] Driver unsupported XDP return value 0 on prog  (id 67) dev N/A, expect packet loss!
[   73.650529][ T6695] __nla_validate_parse: 74 callbacks suppressed
[   73.650540][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'.
[   73.797820][ T6704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.200'.
[   73.882507][ T6708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.202'.
[   73.945870][ T6715] tipc: Started in network mode
[   73.947623][ T6715] tipc: Node identity 7a1db01bb53a, cluster identity 4711
[   73.950198][ T6715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.955582][ T6715] tipc: Resetting bearer <eth:syzkaller0>
[   73.975541][ T6714] tipc: Disabling bearer <eth:syzkaller0>
[   74.110488][ T6727] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   74.144499][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[   74.284441][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.291865][ T6733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.342232][ T6739] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.346078][ T5893] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.352745][ T5893] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.356401][ T5893] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.369181][ T5893] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.411869][ T6744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.210'.
[   74.469898][ T6745] netlink: 72 bytes leftover after parsing attributes in process `syz.0.210'.
[   75.091016][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'.
[   75.366031][ T6774] syzkaller0: entered promiscuous mode
[   75.368078][ T6774] syzkaller0: entered allmulticast mode
[   75.778096][ T6779] IPVS: stopping backup sync thread 6229 ...
[   75.783349][ T6779] netlink: 68 bytes leftover after parsing attributes in process `syz.2.220'.
[   75.792127][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.220'.
[   76.166872][ T6784] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   76.228700][ T6785] bridge0: port 1(syz_tun) entered blocking state
[   76.231970][ T6785] bridge0: port 1(syz_tun) entered disabled state
[   76.234984][ T6785] syz_tun: entered allmulticast mode
[   76.238704][ T6785] syz_tun: entered promiscuous mode
[   76.243031][ T6785] bridge0: port 1(syz_tun) entered blocking state
[   76.245914][ T6785] bridge0: port 1(syz_tun) entered forwarding state
[   76.254069][ T6784] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa0c error=-28
[   76.351651][ T6784] infiniband syz1: set active
[   76.353998][ T6784] infiniband syz1: added syz_tun
[   76.357227][ T6784] syz1: rxe_create_cq: returned err = -12
[   76.360288][ T6784] infiniband syz1: Couldn't create ib_mad CQ
[   76.362750][ T6784] infiniband syz1: Couldn't open port 1
[   76.379019][ T6784] RDS/IB: syz1: added
[   76.380609][ T6784] smc: adding ib device syz1 with port count 1
[   76.382740][ T6784] smc:    ib device syz1 port 1 has pnetid 
[   76.762005][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'.
[   76.979952][ T6811] bond0: Unable to set down delay as MII monitoring is disabled
[   77.154848][ T6818] IPVS: stopping backup sync thread 6819 ...
[   77.162505][ T6819] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   77.339902][ T6834] validate_nla: 1 callbacks suppressed
[   77.339911][ T6834] netlink: 'syz.2.233': attribute type 10 has an invalid length.
[   77.551468][ T6844] pim6reg1: entered promiscuous mode
[   77.556035][ T6844] pim6reg1: entered allmulticast mode
[   77.833191][ T6846] net_ratelimit: 6 callbacks suppressed
[   77.833198][ T6846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.406547][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.569632][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.583223][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.065789][ T6928] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   79.069897][ T6927] IPVS: stopping backup sync thread 6928 ...
[   79.132705][ T6936] __nla_validate_parse: 7 callbacks suppressed
[   79.132715][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.193759][ T6940] syzkaller0: entered promiscuous mode
[   79.195775][ T6940] syzkaller0: entered allmulticast mode
[   79.278062][ T6944] netlink: 'syz.2.257': attribute type 13 has an invalid length.
[   80.501320][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.262'.
[   80.519833][ T6968] syzkaller0: entered promiscuous mode
[   80.522220][ T6968] syzkaller0: entered allmulticast mode
[   80.659071][ T6984] vlan3: entered promiscuous mode
[   80.660831][ T6984] vlan3: entered allmulticast mode
[   80.662632][ T6984] hsr_slave_1: entered allmulticast mode
[   80.720048][ T6990] netlink: 'syz.2.269': attribute type 1 has an invalid length.
[   80.723649][ T6990] netlink: 'syz.2.269': attribute type 3 has an invalid length.
[   80.727906][ T6990] netlink: 224 bytes leftover after parsing attributes in process `syz.2.269'.
[   80.733324][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'.
[   80.779358][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'.
[   80.926915][ T7007] bridge0: port 1(syz_tun) entered disabled state
[   80.976508][ T7007] gretap2: left promiscuous mode
[   80.994473][ T5908] syz1: Port: 1 Link DOWN
[   81.078977][ T7021] netlink: 'syz.2.275': attribute type 58 has an invalid length.
[   81.081856][ T7021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'.
[   81.107508][ T7025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.276'.
[   81.129385][ T7019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.132005][ T7019] syzkaller0: entered promiscuous mode
[   81.133970][ T7019] syzkaller0: entered allmulticast mode
[   81.139603][ T7016] tipc: Resetting bearer <eth:syzkaller0>
[   81.155879][ T7016] tipc: Disabling bearer <eth:syzkaller0>
[   81.213242][   T10] IPVS: starting estimator thread 0...
[   81.222951][ T7031] ieee802154 phy0 wpan0: encryption failed: -22
[   81.308734][ T7034] IPVS: using max 80 ests per chain, 192000 per kthread
[   81.381936][ T7037] ieee802154 phy0 wpan0: encryption failed: -22
[   81.385724][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'.
[   81.389834][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.278'.
[   82.000344][ T7070] netlink: 'syz.2.287': attribute type 39 has an invalid length.
[   82.021995][ T7070] netlink: 44 bytes leftover after parsing attributes in process `syz.2.287'.
[   82.110801][ T7056] netlink: 'syz.0.281': attribute type 6 has an invalid length.
[   82.935179][ T7091] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   82.935310][ T7089] IPVS: stopping backup sync thread 7091 ...
[   83.147979][ T7097] syz_tun: left allmulticast mode
[   83.151464][ T7097] syz_tun: left promiscuous mode
[   83.153289][ T7097] bridge0: port 1(syz_tun) entered disabled state
[   83.176645][ T7097] bond0: (slave bridge0): Releasing backup interface
[   83.486149][ T7110] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   83.486265][ T7111] IPVS: stopping backup sync thread 7110 ...
[   83.542194][ T7116] tipc: Can't bind to reserved service type 2
[   83.554705][ T7118] netlink: 'syz.0.299': attribute type 12 has an invalid length.
[   83.585353][ T7121] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   83.590728][ T7120] IPVS: stopping backup sync thread 7121 ...
[   83.624738][ T7128] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   83.628252][ T7127] IPVS: stopping backup sync thread 7128 ...
[   83.644109][ T7132] IPVS: length: 141 != 8
[   83.942925][ T7149] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   84.148301][ T7164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.285408][ T7171] bond0: entered promiscuous mode
[   84.292762][ T7171] __nla_validate_parse: 7 callbacks suppressed
[   84.292770][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[   84.299788][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[   84.309732][ T7171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.313'.
[   84.368238][ T7179] IPVS: stopping backup sync thread 7180 ...
[   84.368359][ T7180] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   84.470326][ T7186] nbd: socks must be embedded in a SOCK_ITEM attr
[   84.472937][ T7186] block nbd0: shutting down sockets
[   84.852282][ T7223] bond0: Caught tx_queue_len zero misconfig
[   84.936357][ T7234] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   84.941157][ T7233] IPVS: stopping backup sync thread 7234 ...
[   84.945793][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'.
[   85.050552][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.331'.
[   85.638068][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   85.695456][ T7293] netlink: 'syz.1.340': attribute type 5 has an invalid length.
[   85.697983][ T7293] netlink: 'syz.1.340': attribute type 5 has an invalid length.
[   85.771394][ T7303] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   85.771505][ T7302] IPVS: stopping backup sync thread 7303 ...
[   85.780947][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'.
[   85.783651][ T7305] netlink: 'syz.1.343': attribute type 12 has an invalid length.
[   86.055428][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'.
[   86.064033][ T7334] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   86.067518][ T7332] IPVS: stopping backup sync thread 7334 ...
[   86.279414][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   86.419053][   T47] cfg80211: failed to load regulatory.db
[   86.468364][ T5908] IPVS: starting estimator thread 0...
[   86.568697][ T7361] IPVS: using max 79 ests per chain, 189600 per kthread
[   86.571633][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[   86.649335][ T7373] batadv_slave_1: entered promiscuous mode
[   86.666141][ T7372] batadv_slave_1: left promiscuous mode
[   87.230038][ T7408] bridge0: entered allmulticast mode
[   87.655977][ T7421] netlink: 'syz.0.371': attribute type 1 has an invalid length.
[   87.700583][ T7421] bond2: entered promiscuous mode
[   87.702708][ T7421] bond2: entered allmulticast mode
[   87.705129][ T7421] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.732640][ T7421] bridge0: entered promiscuous mode
[   87.734546][ T7421] bridge0: entered allmulticast mode
[   87.736640][ T7421] bond2: (slave bridge0): Enslaving as a backup interface with an up link
[   87.809192][ T5893] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.814273][ T7424] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[   87.824951][ T7424] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   87.831886][ T7425] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   87.881058][ T7432] netlink: 'syz.0.374': attribute type 9 has an invalid length.
[   87.884047][ T7432] netlink: 'syz.0.374': attribute type 9 has an invalid length.
[   87.941326][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   87.983224][ T7438] syzkaller0: entered promiscuous mode
[   87.985543][ T7438] syzkaller0: entered allmulticast mode
[   87.990688][ T7437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.001596][ T7437] tipc: Resetting bearer <eth:syzkaller0>
[   88.011118][ T7437] tipc: Disabling bearer <eth:syzkaller0>
[   88.187636][ T7450] netlink: 'syz.0.376': attribute type 1 has an invalid length.
[   89.064776][ T7498] netlink: 'syz.2.382': attribute type 5 has an invalid length.
[   89.130321][ T7491] netlink: 'syz.0.380': attribute type 1 has an invalid length.
[   89.233556][ T7507] bond2: (slave bridge0): Removing an active aggregator
[   89.251592][ T7507] bond2: (slave bridge0): Releasing backup interface
[   89.257709][ T7507] bridge0: left promiscuous mode
[   89.262038][ T7507] bridge0: left allmulticast mode
[   89.313901][ T7516] __nla_validate_parse: 8 callbacks suppressed
[   89.313916][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.389'.
[   89.359075][ T7507] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   89.375315][ T7519] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.390'.
[   89.384033][ T7519] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   89.808888][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'.
[   89.866256][ T7555] netlink: 44 bytes leftover after parsing attributes in process `syz.0.397'.
[   89.872328][ T7546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.396'.
[   89.873252][ T7549] netlink: 'syz.0.397': attribute type 7 has an invalid length.
[   90.422059][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'.
[   90.444670][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'.
[   90.759752][ T7587] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   90.766428][ T7586] IPVS: stopping backup sync thread 7587 ...
[   90.788782][ T7584] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   90.891426][ T7588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.912950][ T7588] tipc: Resetting bearer <eth:syzkaller0>
[   91.434381][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.407'.
[   91.695050][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'.
[   91.843736][ T7637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.417'.
[   91.845367][ T7609] netlink: 'syz.0.410': attribute type 6 has an invalid length.
[   91.851599][ T7637] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[   91.882652][ T7640] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   91.882659][ T7639] IPVS: stopping backup sync thread 7640 ...
[   91.955242][ T7643] ieee802154 phy0 wpan0: encryption failed: -22
[   91.966096][ T7645] bond0: left promiscuous mode
[   91.968735][ T7645] bridge0: left allmulticast mode
[   92.077389][ T7649] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   92.099772][ T7649] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.112151][ T7650] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   92.116620][ T7650] bond3: (slave macvlan0): Enslaving as a backup interface with an up link
[   92.124275][ T7649] bond0: (slave bond_slave_0): Releasing backup interface
[   92.128386][ T7649] bond0: (slave bond_slave_1): Releasing backup interface
[   92.136509][ T7649] team0: Port device team_slave_0 removed
[   92.142918][ T7649] team0: Port device team_slave_1 removed
[   92.145147][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.147968][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.151389][ T7649] bond1: (slave wlan0): Releasing active interface
[   92.158114][ T7649] bond3: (slave macvlan0): Releasing backup interface
[   92.203168][ T7661] netlink: 'syz.1.424': attribute type 1 has an invalid length.
[   92.448079][ T7683] can: request_module (can-proto-0) failed.
[   92.511657][ T7690] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   92.517646][ T7688] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   92.524468][ T7688] IPVS: stopping backup sync thread 7690 ...
[   92.744191][ T7692] syz.1.435: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   92.750697][ T7692] CPU: 1 UID: 0 PID: 7692 Comm: syz.1.435 Not tainted syzkaller #0 PREEMPT(full) 
[   92.750707][ T7692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.750712][ T7692] Call Trace:
[   92.750715][ T7692]  <TASK>
[   92.750718][ T7692]  dump_stack_lvl+0x189/0x250
[   92.750734][ T7692]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.750743][ T7692]  ? __pfx__printk+0x10/0x10
[   92.750753][ T7692]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.750762][ T7692]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.750771][ T7692]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   92.750780][ T7692]  warn_alloc+0x214/0x310
[   92.750794][ T7692]  ? __pfx_warn_alloc+0x10/0x10
[   92.750809][ T7692]  ? __get_vm_area_node+0x28f/0x300
[   92.750819][ T7692]  ? xskq_create+0xbf/0x170
[   92.750828][ T7692]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   92.750850][ T7692]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.750863][ T7692]  ? __kasan_kmalloc+0x93/0xb0
[   92.750874][ T7692]  vmalloc_user_noprof+0xad/0xf0
[   92.750885][ T7692]  ? xskq_create+0xbf/0x170
[   92.750892][ T7692]  xskq_create+0xbf/0x170
[   92.750900][ T7692]  xsk_init_queue+0xb0/0x110
[   92.750907][ T7692]  xsk_setsockopt+0x57b/0x8d0
[   92.750919][ T7692]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.750930][ T7692]  ? __pfx_aa_sk_perm+0x10/0x10
[   92.750971][ T7692]  ? __fget_files+0x2a/0x420
[   92.750977][ T7692]  ? aa_sock_opt_perm+0xff/0x1b0
[   92.750990][ T7692]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   92.750998][ T7692]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.751010][ T7692]  do_sock_setsockopt+0x17c/0x1b0
[   92.751021][ T7692]  __x64_sys_setsockopt+0x13f/0x1b0
[   92.751032][ T7692]  do_syscall_64+0xfa/0x3b0
[   92.751039][ T7692]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.751047][ T7692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.751053][ T7692]  ? exc_page_fault+0x9f/0xf0
[   92.751061][ T7692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.751068][ T7692] RIP: 0033:0x7f932558eba9
[   92.751076][ T7692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.751082][ T7692] RSP: 002b:00007f932636c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   92.751090][ T7692] RAX: ffffffffffffffda RBX: 00007f93257d6090 RCX: 00007f932558eba9
[   92.751095][ T7692] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[   92.751100][ T7692] RBP: 00007f9325611e19 R08: 0000000000000004 R09: 0000000000000000
[   92.751104][ T7692] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   92.751108][ T7692] R13: 00007f93257d6128 R14: 00007f93257d6090 R15: 00007fff6058f9a8
[   92.751119][ T7692]  </TASK>
[   92.751122][ T7692] Mem-Info:
[   92.846787][ T7692] active_anon:5601 inactive_anon:0 isolated_anon:0
[   92.846787][ T7692]  active_file:1296 inactive_file:38251 isolated_file:0
[   92.846787][ T7692]  unevictable:1768 dirty:71 writeback:0
[   92.846787][ T7692]  slab_reclaimable:10251 slab_unreclaimable:64980
[   92.846787][ T7692]  mapped:18315 shmem:2449 pagetables:965
[   92.846787][ T7692]  sec_pagetables:0 bounce:0
[   92.846787][ T7692]  kernel_misc_reclaimable:0
[   92.846787][ T7692]  free:265803 free_pcp:21300 free_cma:0
[   92.861521][ T7692] Node 0 active_anon:12012kB inactive_anon:0kB active_file:4160kB inactive_file:147080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30508kB dirty:224kB writeback:0kB shmem:4684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6836kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.872321][ T7692] Node 1 active_anon:10392kB inactive_anon:0kB active_file:1024kB inactive_file:5924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42752kB dirty:60kB writeback:0kB shmem:5112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5232kB pagetables:1816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.883931][ T7692] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.895344][ T7692] lowmem_reserve[]: 0 811 811 811 811
[   92.897958][ T7692] Node 0 DMA32 free:253768kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12012kB inactive_anon:0kB active_file:4160kB inactive_file:147080kB unevictable:3536kB writepending:224kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:21568kB local_pcp:14328kB free_cma:0kB
[   92.909290][ T7692] lowmem_reserve[]: 0 0 0 0 0
[   92.910855][ T7692] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.920692][ T7692] lowmem_reserve[]: 0 0 854 854 854
[   92.922520][ T7692] Node 1 Normal free:334396kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10392kB inactive_anon:0kB active_file:1024kB inactive_file:5924kB unevictable:3536kB writepending:60kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:64024kB local_pcp:46824kB free_cma:0kB
[   92.954968][ T7692] lowmem_reserve[]: 0 0 0 0 0
[   92.956852][ T7692] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   92.963411][ T7692] Node 0 DMA32: 502*4kB (UME) 486*8kB (UME) 230*16kB (UME) 153*32kB (UME) 27*64kB (UME) 35*128kB (UM) 22*256kB (UM) 22*512kB (UM) 11*1024kB (UM) 2*2048kB (UE) 49*4096kB (M) = 253640kB
[   92.969335][ T7692] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   92.974875][ T7692] Node 1 Normal: 338*4kB (ME) 181*8kB (ME) 52*16kB (UM) 30*32kB (M) 127*64kB (UME) 49*128kB (UME) 22*256kB (UM) 5*512kB (UM) 4*1024kB (UME) 2*2048kB (ME) 73*4096kB (UM) = 334384kB
[   92.982386][ T7692] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[   92.985780][ T7692] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   92.989685][ T7692] 41996 total pagecache pages
[   92.991647][ T7692] 0 pages in swap cache
[   92.993250][ T7692] Free swap  = 124996kB
[   92.994766][ T7692] Total swap = 124996kB
[   92.996255][ T7692] 786301 pages RAM
[   92.997571][ T7692] 0 pages HighMem/MovableOnly
[   93.000620][ T7692] 241346 pages reserved
[   93.002053][ T7692] 0 pages cma reserved
[   93.061791][ T7709] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   93.100826][ T7709] bridge0: port 1(syz_tun) entered blocking state
[   93.103303][ T7709] bridge0: port 1(syz_tun) entered disabled state
[   93.105507][ T7709] syz_tun: entered allmulticast mode
[   93.107969][ T7709] syz_tun: entered promiscuous mode
[   93.112772][ T7709] syz1: rxe_newlink: already configured on syz_tun
[   93.217755][ T7716] team0: Caught tx_queue_len zero misconfig
[   93.252371][ T7720] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   93.252467][ T7719] IPVS: stopping backup sync thread 7720 ...
[   93.432160][ T7735] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   93.476848][ T7737] IPVS: stopping backup sync thread 7735 ...
[   93.503914][ T7737] netlink: 'syz.2.446': attribute type 8 has an invalid length.
[   93.539900][ T7739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.695050][ T7757] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   93.695150][ T7756] IPVS: stopping backup sync thread 7757 ...
[   93.727691][ T7760] batman_adv: batadv0: Adding interface: dummy0
[   93.730085][ T7760] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.741041][ T7760] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   93.780378][ T7764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.792564][ T7764] syzkaller0: entered promiscuous mode
[   93.794905][ T7764] syzkaller0: entered allmulticast mode
[   93.811256][ T7764] tipc: Resetting bearer <eth:syzkaller0>
[   93.817125][ T7763] tipc: Resetting bearer <eth:syzkaller0>
[   93.828240][ T7763] tipc: Disabling bearer <eth:syzkaller0>
[   93.946849][ T7771] netlink: 'syz.0.457': attribute type 5 has an invalid length.
[   93.964012][ T7770] geneve2: entered promiscuous mode
[   93.966270][ T7770] geneve2: entered allmulticast mode
[   94.541384][ T7785] IPVS: length: 23 != 8
[   94.643718][ T7801] __nla_validate_parse: 17 callbacks suppressed
[   94.643728][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'.
[   94.705264][ T7810] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   94.716797][ T7809] ip6gre1: entered promiscuous mode
[   94.752777][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.470'.
[   94.843065][ T7822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[   94.884067][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'.
[   94.952911][ T7826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'.
[   95.030491][ T7831] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   95.052247][ T7832] netlink: 9 bytes leftover after parsing attributes in process `syz.1.475'.
[   95.065310][ T7835] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   95.065817][ T7834] IPVS: stopping backup sync thread 7835 ...
[   95.107307][ T7837] veth5: entered promiscuous mode
[   95.130083][ T7842] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   95.133550][ T7841] IPVS: stopping backup sync thread 7842 ...
[   95.321590][ T7858] netlink: 76 bytes leftover after parsing attributes in process `syz.0.484'.
[   95.660160][ T7872] netlink: 'syz.0.488': attribute type 33 has an invalid length.
[   95.664581][ T7872] netlink: 152 bytes leftover after parsing attributes in process `syz.0.488'.
[   95.855715][ T7884] IPVS: stopping backup sync thread 7810 ...
[   95.932086][ T7890] IPVS: stopping backup sync thread 7891 ...
[   95.957947][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'.
[   95.985442][ T7896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.990059][ T7897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.994392][ T7896] syzkaller0: entered promiscuous mode
[   95.996615][ T7896] syzkaller0: entered allmulticast mode
[   96.048589][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'.
[   96.061726][ T7904] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[   96.069879][ T7904] netlink: 'syz.1.499': attribute type 2 has an invalid length.
[   96.525608][ T7931] !: renamed from dummy0
[   97.533118][ T7968] netlink: 'syz.1.518': attribute type 1 has an invalid length.
[   97.761097][ T7979] netlink: 'syz.2.523': attribute type 11 has an invalid length.
[   98.135373][ T7999] netlink: 'syz.0.528': attribute type 4 has an invalid length.
[   98.200815][ T8007] netlink: 'syz.2.531': attribute type 11 has an invalid length.
[   98.398808][ T8011] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[   98.402203][ T8011] netlink: 'syz.2.534': attribute type 4 has an invalid length.
[   98.405766][ T8011] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[   98.409495][ T8011] netlink: 'syz.2.534': attribute type 4 has an invalid length.
[   98.556089][ T8038] netlink: 'syz.2.542': attribute type 21 has an invalid length.
[   98.607550][ T8044] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.662998][ T8037] 8021q: adding VLAN 0 to HW filter on device bond3
[   99.205813][ T8059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.217295][ T8059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.221145][ T8059] bond_slave_0: entered promiscuous mode
[   99.223169][ T8059] bond_slave_0: entered allmulticast mode
[   99.364118][ T8063] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   99.369968][ T8062] IPVS: stopping backup sync thread 8063 ...
[   99.374041][ T8062] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   99.599967][ T8071] gretap0: entered promiscuous mode
[   99.633788][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.644008][ T8071] 8021q: adding VLAN 0 to HW filter on device team0
[   99.652697][ T8071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.737299][ T8071] __nla_validate_parse: 14 callbacks suppressed
[   99.737314][ T8071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'.
[   99.748943][ T8071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.786435][ T8074] 8021q: adding VLAN 0 to HW filter on device team0
[   99.789921][ T8074] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   99.797776][ T8074] batadv_slave_1: entered promiscuous mode
[   99.813440][ T8075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.820213][ T8074] batadv_slave_0: entered promiscuous mode
[   99.822843][ T8073] batadv_slave_0: left promiscuous mode
[   99.826081][ T8073] batadv_slave_1: left promiscuous mode
[   99.850403][ T8077] netlink: 136 bytes leftover after parsing attributes in process `syz.1.552'.
[   99.853466][ T8077] netlink: 19 bytes leftover after parsing attributes in process `syz.1.552'.
[   99.889684][ T8071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.168663][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  100.785030][ T8115] validate_nla: 4 callbacks suppressed
[  100.785045][ T8115] netlink: 'syz.2.563': attribute type 1 has an invalid length.
[  100.953950][ T8115] 8021q: adding VLAN 0 to HW filter on device bond5
[  101.026990][ T8117] bond5: (slave veth5): Enslaving as an active interface with a down link
[  101.036150][ T8119] gretap2: entered promiscuous mode
[  101.041957][ T8119] bond5: (slave gretap2): making interface the new active one
[  101.045426][ T8119] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  101.056496][ T8115] macvlan1: entered promiscuous mode
[  101.060396][ T8115] macvlan1: entered allmulticast mode
[  101.063166][ T8115] bond5: entered promiscuous mode
[  101.065838][ T8115] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  101.069104][ T8115] bond5: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  101.075967][ T8115] bond5: left promiscuous mode
[  101.285427][ T8130] netlink: 'syz.0.566': attribute type 29 has an invalid length.
[  101.298317][ T8130] netlink: 'syz.0.566': attribute type 29 has an invalid length.
[  101.302038][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.0.566'.
[  101.353149][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.568'.
[  101.568412][ T8151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.571502][ T8151] IPv6: NLM_F_CREATE should be set when creating new route
[  101.574460][ T8151] IPv6: NLM_F_CREATE should be set when creating new route
[  101.607565][ T8155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.628147][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'.
[  101.654643][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'.
[  101.660268][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'.
[  101.676571][ T8165] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  101.676600][ T8164] IPVS: stopping backup sync thread 8165 ...
[  101.743470][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'.
[  101.747559][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[  101.878763][ T8192] siw: device registration error -23
[  101.975072][ T8199] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  102.017627][ T8203] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.089469][ T8217] netlink: 'syz.0.593': attribute type 1 has an invalid length.
[  102.106840][ T8217] 8021q: adding VLAN 0 to HW filter on device bond4
[  102.128417][ T8217] veth7: entered promiscuous mode
[  102.134208][ T8217] bond4: (slave veth7): Enslaving as an active interface with an up link
[  102.323607][ T8233] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  102.801638][ T8244] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  102.884074][ T8249] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[  102.913254][ T8249] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  102.985753][ T8254] pim6reg1: entered promiscuous mode
[  102.987575][ T8254] pim6reg1: entered allmulticast mode
[  103.119299][ T8256] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[  103.145223][ T8256] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.176385][ T8256] ipvlan0: entered allmulticast mode
[  103.181735][ T8256] bond3: entered allmulticast mode
[  103.213461][ T8263] syzkaller0: entered promiscuous mode
[  103.215393][ T8263] syzkaller0: entered allmulticast mode
[  103.229724][ T8256] bond3: (slave gretap3): making interface the new active one
[  103.236751][ T8256] gretap3: entered allmulticast mode
[  103.240100][ T8256] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  103.700410][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  104.532475][ T8290] bridge0: port 1(erspan0) entered blocking state
[  104.534999][ T8290] bridge0: port 1(erspan0) entered disabled state
[  104.537526][ T8290] erspan0: entered allmulticast mode
[  104.540785][ T8290] erspan0: entered promiscuous mode
[  104.544755][ T8290] erspan0: left allmulticast mode
[  104.546614][ T8290] erspan0: left promiscuous mode
[  104.549463][ T8290] bridge0: port 1(erspan0) entered disabled state
[  104.599674][ T8294] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  104.604764][ T8292] IPVS: stopping backup sync thread 8294 ...
[  104.608327][ T8299] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  104.613411][ T8298] IPVS: stopping backup sync thread 8299 ...
[  104.617987][ T8292] ip6gre0: entered allmulticast mode
[  105.359807][ T8330] vlan2: entered promiscuous mode
[  105.362775][ T8330] macvtap0: entered promiscuous mode
[  105.502694][ T8339] macsec2: entered promiscuous mode
[  105.504574][ T8339] macsec0: entered promiscuous mode
[  105.506839][ T8339] macsec2: entered allmulticast mode
[  105.509292][ T8339] macsec0: entered allmulticast mode
[  105.529983][ T8338] __nla_validate_parse: 36 callbacks suppressed
[  105.530000][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.627'.
[  105.671704][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'.
[  105.711802][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'.
[  105.736650][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'.
[  105.744795][ T8356] IPv6: sit1: Disabled Multicast RS
[  105.746856][ T8356] sit1: entered allmulticast mode
[  105.794374][ T8362] netlink: 844 bytes leftover after parsing attributes in process `syz.1.634'.
[  105.911043][ T8369] netlink: 71 bytes leftover after parsing attributes in process `syz.1.635'.
[  105.946958][ T8369] netlink: 'syz.1.635': attribute type 39 has an invalid length.
[  106.659203][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'.
[  106.775350][ T8388] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[  106.815681][ T8388] 8021q: adding VLAN 0 to HW filter on device bond7
[  106.823758][ T8388] netlink: 48 bytes leftover after parsing attributes in process `syz.2.641'.
[  106.895024][ T8392] bond_slave_0: left promiscuous mode
[  106.897260][ T8392] bond_slave_0: left allmulticast mode
[  106.903672][ T8392] tipc: Resetting bearer <eth:syzkaller0>
[  106.908933][ T8392] syzkaller0: left promiscuous mode
[  106.911188][ T8392] syzkaller0: left allmulticast mode
[  106.919112][ T8392] ip6gre1: left promiscuous mode
[  106.943260][ T8392] ipvlan0: left allmulticast mode
[  106.945287][ T8392] bond3: left allmulticast mode
[  106.947529][ T8392] gretap3: left allmulticast mode
[  106.952523][ T8392] sit1: left allmulticast mode
[  106.966695][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'.
[  107.075539][ T8394] vlan0: left allmulticast mode
[  107.077388][ T8394] veth1: left allmulticast mode
[  107.081579][ T8394] ip6tnl1: left promiscuous mode
[  107.121581][ T8394] macsec0: left allmulticast mode
[  107.123747][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'.
[  107.127504][ T8394] macsec0: left promiscuous mode
[  107.130313][ T8394] macsec2: left promiscuous mode
[  107.132442][ T8394] macsec2: left allmulticast mode
[  107.190875][ T8400] hsr_slave_1: left promiscuous mode
[  107.260403][ T8403] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.420319][ T8413] netlink: 'syz.1.648': attribute type 4 has an invalid length.
[  107.426842][ T8413] netlink: 'syz.1.648': attribute type 4 has an invalid length.
[  108.005960][ T8428] netlink: 'syz.0.653': attribute type 1 has an invalid length.
[  108.044104][ T8428] bond5: (slave bridge1): making interface the new active one
[  108.048755][ T8428] bond5: (slave bridge1): Enslaving as an active interface with an up link
[  108.100222][ T8431] syzkaller0: entered promiscuous mode
[  108.102347][ T8431] syzkaller0: entered allmulticast mode
[  108.104588][ T8433] netlink: 'syz.0.655': attribute type 8 has an invalid length.
[  109.017517][ T8455] netlink: 'syz.2.660': attribute type 4 has an invalid length.
[  109.032130][ T8455] netlink: 'syz.2.660': attribute type 4 has an invalid length.
[  109.133658][ T8469] syzkaller1: entered promiscuous mode
[  109.135980][ T8469] syzkaller1: entered allmulticast mode
[  109.145851][ T8471] netlink: 'syz.1.667': attribute type 1 has an invalid length.
[  109.176159][ T8471] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.201205][ T8473] syzkaller0: entered promiscuous mode
[  109.203137][ T8473] syzkaller0: entered allmulticast mode
[  109.212671][ T8471] ipvlan1: entered allmulticast mode
[  109.214883][ T8471] bond4: entered allmulticast mode
[  110.190344][ T8490] IPVS: stopping backup sync thread 8489 ...
[  110.229649][ T8493] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  110.451303][ T8511] openvswitch: netlink: IP tunnel dst address not specified
[  110.492895][ T8521] syzkaller0: entered promiscuous mode
[  110.499212][ T8521] syzkaller0: entered allmulticast mode
[  110.630887][ T8527] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  110.664732][ T8532] macvlan1: entered allmulticast mode
[  110.666737][ T8532] bond0: entered allmulticast mode
[  110.670368][ T8532] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  110.674069][ T8532] bond0: left allmulticast mode
[  110.784127][ T8539] syzkaller0: entered promiscuous mode
[  110.786428][ T8539] syzkaller0: entered allmulticast mode
[  110.835164][ T8548] __nla_validate_parse: 11 callbacks suppressed
[  110.835175][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'.
[  110.894212][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'.
[  111.004345][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[  111.281362][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'.
[  111.751054][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'.
[  111.806911][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  111.868828][ T8575] syzkaller0: entered promiscuous mode
[  111.870799][ T8575] syzkaller0: entered allmulticast mode
[  111.873568][ T8574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.875888][ T8574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.891730][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'.
[  111.894737][ T8570] netlink: 364 bytes leftover after parsing attributes in process `syz.1.696'.
[  111.897646][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'.
[  111.911794][ T8577] tipc: Resetting bearer <eth:syzkaller0>
[  111.922487][ T8577] tipc: Disabling bearer <eth:syzkaller0>
[  111.965517][ T8583] netlink: 'syz.1.701': attribute type 10 has an invalid length.
[  111.975445][ T8583] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  111.993303][ T8583] syzkaller0: left promiscuous mode
[  111.999330][ T8583] syzkaller0: left allmulticast mode
[  112.068165][ T8588] syzkaller0: entered promiscuous mode
[  112.077464][ T8588] syzkaller0: entered allmulticast mode
[  113.230545][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'.
[  113.632312][ T8656] netlink: 'syz.0.716': attribute type 12 has an invalid length.
[  114.073492][ T8675] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded
[  114.296401][ T8679] bridge4: entered allmulticast mode
[  114.406774][ T8685] bond0: (slave wlan1): Releasing backup interface
[  114.575055][ T8700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.578143][ T8700] IPv6: NLM_F_CREATE should be set when creating new route
[  114.581319][ T8700] IPv6: NLM_F_CREATE should be set when creating new route
[  114.779669][ T8712] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  114.827095][ T8712] bond8: (slave geneve0): making interface the new active one
[  114.837718][ T8712] bond8: (slave geneve0): Enslaving as an active interface with an up link
[  114.843424][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  114.846247][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  114.859658][ T8712] 8021q: adding VLAN 0 to HW filter on device bond8
[  114.889902][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  114.893165][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  115.097597][ T8735] netlink: 'syz.2.731': attribute type 12 has an invalid length.
[  115.461529][ T8752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.466417][ T8752] syzkaller0: entered promiscuous mode
[  115.480313][ T8752] syzkaller0: entered allmulticast mode
[  115.505688][ T8752] tipc: Resetting bearer <eth:syzkaller0>
[  115.512061][ T8751] tipc: Resetting bearer <eth:syzkaller0>
[  115.525234][ T8751] tipc: Disabling bearer <eth:syzkaller0>
[  115.774576][ T8773] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[  115.777987][ T8773] NCSI netlink: No device for ifindex 813332851
[  116.029651][ T8798] netlink: 'syz.2.745': attribute type 2 has an invalid length.
[  116.037558][ T8798] : entered promiscuous mode
[  116.138765][ T8806] syzkaller0: entered promiscuous mode
[  116.140674][ T8806] syzkaller0: entered allmulticast mode
[  116.969179][ T8818] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  116.973243][ T8814] IPVS: stopping backup sync thread 8818 ...
[  117.065303][ T8825] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  117.076970][ T8823] IPVS: stopping backup sync thread 8825 ...
[  117.150796][ T8831] __nla_validate_parse: 10 callbacks suppressed
[  117.150806][ T8831] netlink: 136 bytes leftover after parsing attributes in process `syz.2.754'.
[  117.157850][ T8831] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  117.399128][ T8865] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  117.402038][ T8864] IPVS: stopping backup sync thread 8865 ...
[  117.411899][ T8867] netlink: 'syz.2.766': attribute type 1 has an invalid length.
[  117.435556][ T8867] wireguard0: entered promiscuous mode
[  117.437366][ T8867] wireguard0: entered allmulticast mode
[  117.467561][ T8871] pim6reg: entered allmulticast mode
[  117.470235][ T8871] pim6reg: left allmulticast mode
[  117.641146][ T8880] : renamed from bond_slave_0
[  117.783751][ T8892] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  117.789098][ T8890] IPVS: stopping backup sync thread 8892 ...
[  117.886380][ T8894] openvswitch: netlink: Flow actions attr not present in new flow.
[  117.892817][ T8894] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  117.935572][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'.
[  118.131287][ T8910] netlink: 412 bytes leftover after parsing attributes in process `syz.0.779'.
[  118.288083][ T8919] syzkaller0: entered promiscuous mode
[  118.291037][ T8919] syzkaller0: entered allmulticast mode
[  118.321489][ T8923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.334415][ T8923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.346966][ T8923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.356453][ T8923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.366311][ T8923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.376079][ T8923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.410957][ T8929] IPVS: Unknown mcast interface: pim6reg0
[  118.417603][ T8926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.782'.
[  118.421592][ T8926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.782'.
[  118.425271][ T8926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.782'.
[  118.470004][ T8926] 8021q: adding VLAN 0 to HW filter on device bond6
[  118.521503][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'.
[  118.524380][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'.
[  118.527853][ T8933] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv0ǶXF["Ssĵ+M3^
[  118.704771][ T8944] veth2: entered allmulticast mode
[  118.838334][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'.
[  118.876304][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'.
[  119.103037][ T8979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.105563][ T8979] syzkaller0: entered promiscuous mode
[  119.107367][ T8979] syzkaller0: entered allmulticast mode
[  119.111536][ T8979] tipc: Resetting bearer <eth:syzkaller0>
[  119.132326][ T8978] tipc: Resetting bearer <eth:syzkaller0>
[  119.140109][ T8978] tipc: Disabling bearer <eth:syzkaller0>
[  119.332299][ T9003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.343000][ T8977] netlink: 'syz.1.790': attribute type 6 has an invalid length.
[  119.376241][ T9009] netlink: 'syz.2.799': attribute type 2 has an invalid length.
[  119.379544][ T9009] netlink: 'syz.2.799': attribute type 1 has an invalid length.
[  119.979394][ T9043] ipvlan2: entered promiscuous mode
[  119.988890][ T9043] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  120.094919][ T9049] IPVS: stopping backup sync thread 9050 ...
[  120.224593][ T9052] sctp: [Deprecated]: syz.1.808 (pid 9052) Use of int in max_burst socket option deprecated.
[  120.224593][ T9052] Use struct sctp_assoc_value instead
[  120.816029][ T9097] batman_adv: batadv0: Removing interface: dummy0
[  120.823855][ T9097] bond4: (slave veth7): Releasing backup interface
[  120.838047][ T9097] bond5: (slave bridge1): Releasing active interface
[  120.858244][ T9097] tipc: Enabled bearer <eth:gre0>, priority 10
[  120.861082][ T9097] team0: Mode changed to "activebackup"
[  120.914806][ T9107] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[  120.943636][ T9103] sctp: [Deprecated]: syz.2.822 (pid 9103) Use of int in maxseg socket option.
[  120.943636][ T9103] Use struct sctp_assoc_value instead
[  121.032726][ T9107] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.052511][ T9109] veth9: entered promiscuous mode
[  121.056816][ T9109] bond7: (slave veth9): Enslaving as an active interface with a down link
[  121.204899][ T9133] bridge7: entered promiscuous mode
[  121.207513][ T9133] bridge7: entered allmulticast mode
[  121.355272][ T9149] syz_tun: left allmulticast mode
[  121.357016][ T9149] syz_tun: left promiscuous mode
[  121.361634][ T9149] bridge0: port 1(syz_tun) entered disabled state
[  121.365594][ T9149] bond2: (slave gretap2): Releasing active interface
[  121.369934][ T9149] bond3: (slave gretap3): Releasing active interface
[  121.375775][ T9144] netlink: 'syz.0.832': attribute type 26 has an invalid length.
[  121.479934][ T9160] netlink: 'syz.0.836': attribute type 1 has an invalid length.
[  121.493514][ T9164] netlink: 'syz.1.837': attribute type 1 has an invalid length.
[  121.496146][ T9160] 8021q: adding VLAN 0 to HW filter on device bond8
[  121.521843][ T9164] bond5: entered promiscuous mode
[  121.524050][ T9164] 8021q: adding VLAN 0 to HW filter on device bond5
[  121.543204][ T9160] bond8: (slave geneve2): making interface the new active one
[  121.546916][ T9160] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  121.563882][ T9164] 8021q: adding VLAN 0 to HW filter on device bond5
[  121.566232][ T9164] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address
[  121.575822][ T9164] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  121.590805][ T9164] bond5: (slave wireguard1): making interface the new active one
[  121.593950][ T9169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.594143][ T9164] wireguard1: entered promiscuous mode
[  121.596740][ T9169] IPv6: NLM_F_CREATE should be set when creating new route
[  121.600924][ T9169] IPv6: NLM_F_CREATE should be set when creating new route
[  121.605375][ T9169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.606192][ T9164] bond5: (slave wireguard1): Enslaving as an active interface with an up link
[  121.611912][ T5855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.615047][ T5855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.631639][ T5855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.634490][ T5855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.728388][ T9180] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.733074][ T9179] IPVS: stopping backup sync thread 9180 ...
[  121.859009][   T10] tipc: Node number set to 3475484699
[  122.482449][ T9191] __nla_validate_parse: 141 callbacks suppressed
[  122.482459][ T9191] netlink: 44 bytes leftover after parsing attributes in process `syz.2.845'.
[  122.540640][ T9193] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  122.551086][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'.
[  122.918851][ T9234] IPv6: Can't replace route, no match found
[  122.921301][ T9234] netlink: 'syz.0.856': attribute type 10 has an invalid length.
[  122.924206][ T9234] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  122.996423][ T9237] bridge0: failed insert local address into bridge forwarding table
[  123.002243][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  123.012281][ T9246] netlink: 'syz.0.859': attribute type 1 has an invalid length.
[  123.110280][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.114616][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.162135][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'.
[  123.166575][ T9255] netlink: 64 bytes leftover after parsing attributes in process `syz.2.862'.
[  123.197138][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'.
[  123.233858][ T9272] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  123.238368][ T9270] IPVS: stopping backup sync thread 9272 ...
[  123.305702][ T9275] ip6gre0: left allmulticast mode
[  123.458323][ T9290] netlink: 'syz.2.873': attribute type 9 has an invalid length.
[  123.556098][ T9296] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  123.556214][ T9295] IPVS: stopping backup sync thread 9296 ...
[  123.610347][ T9300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.875'.
[  123.682580][ T9306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.685160][ T9306] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  123.687783][ T9306] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  123.761244][ T9315] netlink: 'syz.1.879': attribute type 1 has an invalid length.
[  123.765978][ T5855] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  123.795772][ T9316] tipc: Resetting bearer <eth:syzkaller0>
[  124.781105][    T9] tipc: Node number set to 639097290
[  124.955110][ T9359] dvmrp1: entered allmulticast mode
[  124.961843][ T9359] dvmrp1: left allmulticast mode
[  125.097591][ T9368] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  125.098689][ T9366] IPVS: stopping backup sync thread 9368 ...
[  125.268260][ T9386] veth1_to_bond: entered allmulticast mode
[  125.285353][ T9387] veth1_to_bond: left allmulticast mode
[  125.332707][ T9390] netlink: 'syz.1.899': attribute type 16 has an invalid length.
[  125.335277][ T9390] netlink: 'syz.1.899': attribute type 17 has an invalid length.
[  125.390091][ T9390] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.394714][ T9390] 8021q: adding VLAN 0 to HW filter on device team0
[  125.408068][ T9390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.502853][   T10] syz1: Port: 1 Link ACTIVE
[  125.510502][ T9394] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.571767][ T9400] IPVS: stopping backup sync thread 9401 ...
[  125.827573][ T9428] gtp0: entered promiscuous mode
[  125.877582][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.911'.
[  125.919056][ T9433] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  125.936212][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.913'.
[  126.434718][ T9469] erspan0: entered allmulticast mode
[  126.647339][ T9482] netlink: 'syz.1.926': attribute type 64 has an invalid length.
[  126.689364][ T9488] lo speed is unknown, defaulting to 1000
[  126.700043][ T9488] lo speed is unknown, defaulting to 1000
[  126.714867][ T9488] lo speed is unknown, defaulting to 1000
[  126.808007][ T9492] netlink: 'syz.1.927': attribute type 1 has an invalid length.
[  126.817568][ T9492] netlink: 72 bytes leftover after parsing attributes in process `syz.1.927'.
[  126.829365][ T9495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.881318][ T9488] infiniband syz0: set active
[  126.883908][    T9] lo speed is unknown, defaulting to 1000
[  126.886254][ T9488] infiniband syz0: added lo
[  126.925954][ T9488] RDS/IB: syz0: added
[  126.928228][ T9488] smc: adding ib device syz0 with port count 1
[  126.930683][ T9488] smc:    ib device syz0 port 1 has pnetid 
[  126.933078][    T9] lo speed is unknown, defaulting to 1000
[  126.935713][ T9488] lo speed is unknown, defaulting to 1000
[  127.055642][ T9488] lo speed is unknown, defaulting to 1000
[  127.152463][ T9497] lo speed is unknown, defaulting to 1000
[  127.233655][ T9488] lo speed is unknown, defaulting to 1000
[  127.356648][ T9507] netlink: 'syz.0.932': attribute type 1 has an invalid length.
[  127.376135][ T9507] bond9: (slave geneve3): making interface the new active one
[  127.379268][ T9507] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  127.382926][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  127.385834][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  127.394343][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  127.397261][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  127.408267][ T9510] netlink: 'syz.0.933': attribute type 15 has an invalid length.
[  127.420888][ T9488] lo speed is unknown, defaulting to 1000
[  127.596719][ T9529] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  127.645341][ T9531] __nla_validate_parse: 2 callbacks suppressed
[  127.645351][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'.
[  127.696530][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.938'.
[  127.708667][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.938'.
[  127.713172][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'.
[  127.857946][ T9544] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.192266][ T9564] netlink: 41 bytes leftover after parsing attributes in process `syz.1.948'.
[  128.196237][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'.
[  128.211346][ T9568] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  128.215390][ T9567] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  128.225354][ T9559] lo speed is unknown, defaulting to 1000
[  128.460220][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'.
[  128.531661][ T9587] netlink: 'syz.2.950': attribute type 4 has an invalid length.
[  128.544372][ T9587] netlink: 'syz.2.950': attribute type 4 has an invalid length.
[  128.740365][ T9564] lo speed is unknown, defaulting to 1000
[  128.765555][ T9559] netlink: 'syz.0.946': attribute type 6 has an invalid length.
[  128.850717][ T9600] IPVS: stopping backup sync thread 9433 ...
[  128.854918][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'.
[  128.923897][ T9603] vlan2: entered promiscuous mode
[  128.961835][ T9603] netlink: 104 bytes leftover after parsing attributes in process `syz.2.954'.
[  128.984349][ T9605] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  128.987372][ T9605] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  129.007693][ T9607] netlink: 'syz.2.956': attribute type 3 has an invalid length.
[  129.029014][ T9607] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.956'.
[  129.154623][ T9621] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  129.158222][ T9619] IPVS: stopping backup sync thread 9621 ...
[  129.433226][ T9640] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.532984][ T9659] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  129.745380][ T9655] lo speed is unknown, defaulting to 1000
[  130.350117][ T9671] netlink: 'syz.1.976': attribute type 1 has an invalid length.
[  130.372541][ T9671] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  130.377234][ T9671] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  130.422244][ T9676] macvlan0: entered promiscuous mode
[  130.427861][ T9676] macvlan0: entered allmulticast mode
[  130.431846][ T9676] bond8: entered promiscuous mode
[  130.433941][ T9676] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  130.437761][ T9676] bond8: left promiscuous mode
[  130.455045][ T9677] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  130.545280][ T9685] dummy0: entered promiscuous mode
[  130.550145][ T9685] dummy0: left promiscuous mode
[  130.764644][ T9697] lo speed is unknown, defaulting to 1000
[  131.011430][ T9701] netlink: 'syz.2.983': attribute type 6 has an invalid length.
[  131.320335][ T9718] lo speed is unknown, defaulting to 1000
[  131.475663][ T9726] macsec2: entered promiscuous mode
[  131.482173][ T9726] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  131.489299][ T9726] macsec2: entered allmulticast mode
[  131.498752][ T9726] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  131.793601][ T9746] geneve2: entered promiscuous mode
[  131.795532][ T9746] geneve2: entered allmulticast mode
[  131.803789][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  131.816160][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  131.822974][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  131.830749][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  131.899025][ T9752] IPVS: stopping backup sync thread 9750 ...
[  131.899034][ T9750] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  131.920910][ T9736] lo speed is unknown, defaulting to 1000
[  132.278178][ T9768] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  132.284149][ T9766] IPVS: stopping backup sync thread 9768 ...
[  132.492006][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.801194][ T9797] bond7: (slave veth9): Releasing active interface
[  132.806828][ T9797] bond8: (slave geneve2): Releasing active interface
[  132.816661][ T9797] bond9: (slave geneve3): Releasing active interface
[  132.826890][ T5893] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.830623][ T5893] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  132.838803][ T5893] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.841531][ T5893] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  132.844383][ T5893] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.878536][ T5893] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  132.881616][ T5893] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.884387][ T5893] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  132.887252][ T9776] lo speed is unknown, defaulting to 1000
[  133.305030][ T9801] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  133.313889][ T9800] IPVS: stopping backup sync thread 9801 ...
[  133.750377][ T9840] IPVS: stopping backup sync thread 9842 ...
[  133.750709][ T9842] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  133.767828][ T9840] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.087141][ T9861] __nla_validate_parse: 12 callbacks suppressed
[  134.087151][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'.
[  134.095147][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'.
[  134.107405][ T9821] lo speed is unknown, defaulting to 1000
[  134.115930][ T9861] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1024'.
[  134.156480][ T9866] validate_nla: 4 callbacks suppressed
[  134.156489][ T9866] netlink: 'syz.1.1025': attribute type 1 has an invalid length.
[  134.260491][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'.
[  134.309088][ T9874] delete_channel: no stack
[  134.355294][ T9883] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  134.485754][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1032'.
[  134.511609][ T9895] netlink: 'syz.1.1032': attribute type 2 has an invalid length.
[  134.519909][ T9895] ave_0: entered promiscuous mode
[  134.528820][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'.
[  134.732400][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'.
[  134.777202][ T9919] tipc: Resetting bearer <eth:syzkaller0>
[  134.780719][ T9919] syzkaller0: left promiscuous mode
[  134.782443][ T9919] syzkaller0: left allmulticast mode
[  134.787127][ T9919] ipvlan1: left allmulticast mode
[  134.790603][ T9919] bond4: left allmulticast mode
[  134.795584][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'.
[  134.805615][ T9919] bond5: left promiscuous mode
[  134.807325][ T9919] wireguard1: left promiscuous mode
[  134.811600][ T9923] netlink: 'syz.0.1038': attribute type 1 has an invalid length.
[  134.817406][ T9919] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  134.819835][ T9919] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  134.822116][ T9919] macsec2: left promiscuous mode
[  134.823918][ T9919] macsec2: left allmulticast mode
[  134.827075][ T9919] geneve2: left promiscuous mode
[  134.830404][ T9919] geneve2: left allmulticast mode
[  134.834983][   T47] lo speed is unknown, defaulting to 1000
[  134.846835][ T5850] syz1: Port: 1 Link DOWN
[  134.852752][ T5893] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  134.855651][ T5893] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  134.858341][ T5893] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  134.866722][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'.
[  134.870922][ T5893] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  134.953985][ T9914] lo speed is unknown, defaulting to 1000
[  134.987999][   T47] syz0: Port: 1 Link DOWN
[  134.989846][   T47] lo speed is unknown, defaulting to 1000
[  135.125330][ T9942] macsec1: entered promiscuous mode
[  135.127401][ T9942] macsec0: entered promiscuous mode
[  135.135049][ T9942] macsec1: entered allmulticast mode
[  135.136783][ T9942] macsec0: entered allmulticast mode
[  135.180794][ T9944] gtp0: entered promiscuous mode
[  135.185140][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'.
[  135.315477][ T9946] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  135.532677][ T9948] lo speed is unknown, defaulting to 1000
[  136.391677][T10031] netlink: 'syz.2.1058': attribute type 27 has an invalid length.
[  136.636074][T10073] netlink: 'syz.1.1059': attribute type 12 has an invalid length.
[  136.706008][T10059] 8021q: adding VLAN 0 to HW filter on device bond11
[  136.768138][T10080] netlink: 'syz.2.1062': attribute type 10 has an invalid length.
[  136.798411][T10036] lo speed is unknown, defaulting to 1000
[  136.992092][T10044] lo speed is unknown, defaulting to 1000
[  137.231963][T10105] sit0: entered promiscuous mode
[  137.234276][T10105] netlink: 'syz.2.1068': attribute type 1 has an invalid length.
[  137.315741][T10112] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  137.949231][T10145] bridge0: failed insert local address into bridge forwarding table
[  138.552906][T10149] lo speed is unknown, defaulting to 1000
[  138.636921][T10157] IPVS: stopping backup sync thread 10112 ...
[  138.716540][T10163] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004
[  138.722643][T10167] netlink: 'syz.2.1085': attribute type 1 has an invalid length.
[  138.771371][T10167] gretap0: left promiscuous mode
[  138.780863][T10167] sit0: left promiscuous mode
[  138.790152][T10167] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.793317][T10167] 8021q: adding VLAN 0 to HW filter on device team0
[  138.797978][T10167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.810099][T10167] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  138.819639][T10167] bond12: entered promiscuous mode
[  138.821390][T10167] bond12: entered allmulticast mode
[  138.823296][T10167] 8021q: adding VLAN 0 to HW filter on device bond12
[  138.832206][T10167] bridge0: entered promiscuous mode
[  138.834023][T10167] bridge0: entered allmulticast mode
[  138.835933][T10167] bond12: (slave bridge0): Enslaving as a backup interface with an up link
[  138.877434][T10163] lo speed is unknown, defaulting to 1000
[  138.938941][ T6002] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  139.050182][ T5893] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  139.210106][T10192] sctp: [Deprecated]: syz.1.1091 (pid 10192) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.210106][T10192] Use struct sctp_sack_info instead
[  139.218321][T10191] tap0: tun_chr_ioctl cmd 2147767506
[  139.220789][T10191] tap0: tun_chr_ioctl cmd 1074025677
[  139.221113][T10192] sctp: [Deprecated]: syz.1.1091 (pid 10192) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.221113][T10192] Use struct sctp_sack_info instead
[  139.223113][T10191] tap0: linktype set to 776
[  139.274125][T10180] lo speed is unknown, defaulting to 1000
[  139.745903][T10215] __nla_validate_parse: 14 callbacks suppressed
[  139.745913][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'.
[  139.785804][T10217] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1100'.
[  139.817910][T10188] lo speed is unknown, defaulting to 1000
[  139.981796][T10230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1104'.
[  140.061736][T10232] bond0: option mode: unable to set because the bond device is up
[  140.082460][T10222] lo speed is unknown, defaulting to 1000
[  140.124861][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1106'.
[  140.181845][T10236] netlink: 'syz.2.1106': attribute type 11 has an invalid length.
[  141.086515][T10267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.091592][T10267] syzkaller0: entered promiscuous mode
[  141.093952][T10267] syzkaller0: entered allmulticast mode
[  141.107765][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'.
[  141.122907][T10260] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1112'.
[  141.126590][T10260] ..0: renamed from hsr0
[  141.135902][T10260] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  141.140162][T10260] ..0: entered allmulticast mode
[  141.142535][T10260] hsr_slave_0: entered allmulticast mode
[  141.145605][T10260] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  141.173550][T10269] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1115'.
[  141.177174][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1115'.
[  141.374974][T10277] bond5: (slave wireguard1): Releasing backup interface
[  141.516386][T10285] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  141.520030][T10284] IPVS: stopping backup sync thread 10285 ...
[  141.535801][T10278] lo speed is unknown, defaulting to 1000
[  141.807258][T10294] geneve3: entered promiscuous mode
[  141.810046][T10294] geneve3: entered allmulticast mode
[  141.838653][T10291] lo speed is unknown, defaulting to 1000
[  142.005937][T10305] bridge0: entered allmulticast mode
[  142.144966][T10317] netlink: 'syz.2.1129': attribute type 4 has an invalid length.
[  142.152777][T10317] netlink: 'syz.2.1129': attribute type 4 has an invalid length.
[  142.218289][T10324] netlink: 'syz.0.1132': attribute type 6 has an invalid length.
[  142.231322][T10324] wg0: entered promiscuous mode
[  142.239170][T10324] wg0: entered allmulticast mode
[  142.263809][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'.
[  142.274747][T10328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1133'.
[  142.305766][T10330] sctp: [Deprecated]: syz.2.1134 (pid 10330) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.305766][T10330] Use struct sctp_sack_info instead
[  142.318788][T10330] sctp: [Deprecated]: syz.2.1134 (pid 10330) Use of struct sctp_assoc_value in delayed_ack socket option.
[  142.318788][T10330] Use struct sctp_sack_info instead
[  142.362734][T10332] IPVS: stopping backup sync thread 9529 ...
[  142.567769][T10356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.723756][T10369] macsec0: left allmulticast mode
[  142.725782][T10369] macsec0: left promiscuous mode
[  142.788029][T10379] netlink: 'syz.0.1146': attribute type 1 has an invalid length.
[  142.870702][T10379] 8021q: adding VLAN 0 to HW filter on device bond10
[  142.906598][T10382] bond10: (slave gretap1): making interface the new active one
[  142.916768][T10382] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  142.924827][T10383] ipvlan0: entered promiscuous mode
[  142.947749][T10384] netlink: 'syz.2.1147': attribute type 1 has an invalid length.
[  142.980141][T10391] IPVS: set_ctl: invalid protocol: 135 172.20.20.14:20000
[  143.141662][T10404] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.231334][T10418] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  143.274893][T10423] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  144.153825][T10431] lo speed is unknown, defaulting to 1000
[  144.654795][T10447] netlink: 'syz.2.1167': attribute type 1 has an invalid length.
[  144.772225][T10462] __nla_validate_parse: 8 callbacks suppressed
[  144.772239][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'.
[  144.782926][T10462] IPVS: stopping backup sync thread 10423 ...
[  144.821493][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'.
[  144.832295][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  144.835991][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  144.855769][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1173'.
[  145.452362][T10509] lo speed is unknown, defaulting to 1000
[  145.824765][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'.
[  145.828897][T10519] netlink: 'syz.0.1187': attribute type 20 has an invalid length.
[  145.860725][ T5872] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.864541][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'.
[  145.868214][T10519] netlink: 'syz.0.1187': attribute type 20 has an invalid length.
[  145.872219][ T5872] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.876473][ T5872] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.882046][ T5872] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.953493][T10525] netlink: 'syz.0.1189': attribute type 1 has an invalid length.
[  145.956186][T10525] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1189'.
[  146.072837][T10522] lo speed is unknown, defaulting to 1000
[  146.328188][T10534] veth2: entered allmulticast mode
[  146.381902][T10534] veth2: entered allmulticast mode
[  146.444852][T10534] veth2: entered allmulticast mode
[  146.490187][T10534] veth2: entered allmulticast mode
[  146.525114][T10534] veth2: entered allmulticast mode
[  146.604793][T10534] veth2: entered allmulticast mode
[  146.683509][T10534] veth2: entered allmulticast mode
[  146.716735][T10534] veth2: entered allmulticast mode
[  146.777168][T10534] veth2: entered allmulticast mode
[  146.794778][T10539] team0: Device macvtap1 is already an upper device of the team interface
[  146.833060][T10534] veth2: entered allmulticast mode
[  146.920354][T10534] veth2: entered allmulticast mode
[  146.982166][T10534] veth2: entered allmulticast mode
[  146.997758][T10554] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  147.000609][T10554] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  147.041512][T10534] veth2: entered allmulticast mode
[  147.117686][T10568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.130866][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'.
[  147.237808][T10580] netlink: 'syz.2.1203': attribute type 5 has an invalid length.
[  147.302836][T10586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1202'.
[  147.571210][T10605] netlink: 'syz.0.1207': attribute type 1 has an invalid length.
[  147.615903][T10612] syz.0.1210 (10612) used obsolete PPPIOCDETACH ioctl
[  147.979498][T10638] lo speed is unknown, defaulting to 1000
[  148.008745][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  148.485358][T10672] lo speed is unknown, defaulting to 1000
[  148.751231][T10699] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.908958][T10710] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  148.908996][T10708] IPVS: stopping backup sync thread 10710 ...
[  149.283371][T10733] bond0 (unregistering): Released all slaves
[  149.403951][T10736] : entered promiscuous mode
[  149.612042][T10748] netlink: 'syz.0.1250': attribute type 1 has an invalid length.
[  149.912243][T10764] __nla_validate_parse: 12 callbacks suppressed
[  149.912257][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'.
[  150.065370][T10771] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1255'.
[  150.238747][T10759] lo speed is unknown, defaulting to 1000
[  150.367008][T10779] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1258'.
[  150.554201][T10776] lo speed is unknown, defaulting to 1000
[  150.615398][T10789] netlink: 'syz.2.1257': attribute type 6 has an invalid length.
[  150.963527][T10801] macvtap1: entered promiscuous mode
[  150.965295][T10801] macvtap1: entered allmulticast mode
[  151.129433][T10797] lo speed is unknown, defaulting to 1000
[  151.131142][T10806] IPVS: stopping backup sync thread 10418 ...
[  151.249174][T10814] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1266'.
[  151.700750][T10828] netlink: 'syz.0.1269': attribute type 1 has an invalid length.
[  151.808174][T10832] bond11: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  151.863004][ T5872] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  151.869873][T10828] 8021q: adding VLAN 0 to HW filter on device bond11
[  151.978610][ T6002] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  152.057225][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[  152.063296][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'.
[  152.228077][T10841] lo speed is unknown, defaulting to 1000
[  152.341918][T10857] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1276'.
[  152.916039][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'.
[  152.956968][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'.
[  152.962647][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'.
[  153.121934][T10883] tipc: Resetting bearer <eth:syzkaller0>
[  153.124910][T10883] syzkaller0: left promiscuous mode
[  153.126764][T10883] syzkaller0: left allmulticast mode
[  153.233952][T10889] netlink: 'syz.0.1286': attribute type 10 has an invalid length.
[  153.237431][T10889] ..0: left allmulticast mode
[  153.240172][T10889] hsr_slave_0: left allmulticast mode
[  153.242842][T10889] ..0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  154.005987][T10944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.008422][T10944] IPv6: NLM_F_CREATE should be set when creating new route
[  154.010855][T10944] IPv6: NLM_F_CREATE should be set when creating new route
[  154.016378][T10948] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  154.045256][T10946] IPVS: stopping backup sync thread 10948 ...
[  154.342711][T10976] netlink: 'syz.0.1312': attribute type 9 has an invalid length.
[  154.412132][T10983] IPVS: stopping backup sync thread 10985 ...
[  154.521483][T11003] syzkaller0: entered promiscuous mode
[  154.524465][T11003] syzkaller0: entered allmulticast mode
[  154.553697][T11003] syzkaller1: tun_chr_ioctl cmd 1074025677
[  154.556371][T11003] syzkaller1: linktype set to 769
[  154.972328][T11055] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  154.975985][T11054] IPVS: stopping backup sync thread 11055 ...
[  155.834793][T11059] __nla_validate_parse: 9 callbacks suppressed
[  155.834808][T11059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'.
[  156.030251][T11073] netlink: 'syz.1.1340': attribute type 21 has an invalid length.
[  156.162752][T11095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  156.214517][T11098] tipc: Resetting bearer <eth:syzkaller0>
[  156.243841][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1349'.
[  156.272749][T11104] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1350'.
[  156.368751][T11104] lo speed is unknown, defaulting to 1000
[  156.510446][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'.
[  156.895534][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1354'.
[  157.001945][T11133] netlink: 'syz.1.1357': attribute type 5 has an invalid length.
[  157.006856][T11133] netlink: 'syz.1.1357': attribute type 9 has an invalid length.
[  157.012237][T11133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1357'.
[  157.073124][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'.
[  157.099888][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'.
[  157.145308][T11137] ieee802154 phy0 wpan0: encryption failed: -22
[  157.147932][T11137] ieee802154 phy0 wpan0: encryption failed: -22
[  157.174767][T11143] tc_dump_action: action bad kind
[  157.207945][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'.
[  157.217649][T11143] openvswitch: netlink: Flow actions attr not present in new flow.
[  157.234185][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'.
[  157.296188][T11152] netlink: 'syz.0.1362': attribute type 1 has an invalid length.
[  157.306532][T11153] netlink: 'syz.0.1362': attribute type 1 has an invalid length.
[  157.409346][T11163] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.414698][T11163] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  157.418558][T11163] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  157.425906][T11163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.507124][T11171] Unsupported ieee802154 address type: 0
[  157.807215][T11173] lo speed is unknown, defaulting to 1000
[  158.034944][T11199] lo speed is unknown, defaulting to 1000
[  158.297293][T11204] netlink: 'syz.0.1375': attribute type 6 has an invalid length.
[  158.484755][T11220] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  158.493687][T11220] wireguard0: left promiscuous mode
[  158.495759][T11220] wireguard0: left allmulticast mode
[  158.500712][T11220] bridge7: left promiscuous mode
[  158.502802][T11220] bridge7: left allmulticast mode
[  158.505207][T11220] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  158.507757][T11220] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  158.510926][T11220] gtp0: left promiscuous mode
[  158.517734][T11220] bond12: left promiscuous mode
[  158.521520][T11220] bridge0: left promiscuous mode
[  158.523638][T11220] bond12: left allmulticast mode
[  158.525825][T11220] bridge0: left allmulticast mode
[  158.566764][T11220] ipvlan0: left promiscuous mode
[  158.579512][ T5872] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.589585][ T5872] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.592915][ T5872] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.596271][ T5872] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.832344][T11230] bond12: (slave bridge0): Removing an active aggregator
[  158.835759][T11230] bond12: (slave bridge0): Releasing backup interface
[  158.885135][T11237] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.999006][T11246] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  159.186978][T11252] syz_tun: entered allmulticast mode
[  159.198894][T11251] syz_tun: left allmulticast mode
[  159.231153][T11255] netlink: 'syz.1.1390': attribute type 15 has an invalid length.
[  159.270575][T11240] lo speed is unknown, defaulting to 1000
[  159.913368][T11296] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  159.915724][T11297] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  159.938751][T11299] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.950662][T11296] IPVS: stopping backup sync thread 11299 ...
[  159.970497][T11301] bond12: entered promiscuous mode
[  159.972812][T11301] 8021q: adding VLAN 0 to HW filter on device bond12
[  160.425838][T11346] lo speed is unknown, defaulting to 1000
[  160.448322][T11365] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  160.542549][T11375] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  160.546407][T11374] IPVS: stopping backup sync thread 11375 ...
[  161.216931][T11421] __nla_validate_parse: 48 callbacks suppressed
[  161.216940][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'.
[  161.397147][T11446] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  161.458669][T11436] lo speed is unknown, defaulting to 1000
[  161.465060][T11448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1424'.
[  161.467955][T11448] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1424'.
[  164.458116][T11477] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1428'.
[  164.465795][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'.
[  164.688573][T11487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'.
[  164.712642][T11487] team0: Mode changed to "broadcast"
[  164.721699][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'.
[  164.730118][T11487] tipc: Enabled bearer <eth:team0>, priority 0
[  164.736389][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'.
[  164.766540][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'.
[  165.005342][T11514] netlink: 'syz.1.1435': attribute type 1 has an invalid length.
[  165.024926][T11514] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  165.031321][ T5873] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  165.031917][T11514] 8021q: adding VLAN 0 to HW filter on device bond9
[  165.048983][T11514] veth7: entered promiscuous mode
[  165.150607][ T5872] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  165.171496][T11527] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  165.174480][T11527] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  165.389078][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'.
[  165.563475][T11578] syzkaller1: entered promiscuous mode
[  165.565334][T11578] syzkaller1: entered allmulticast mode
[  165.727359][T11589] syz.0.1456: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  165.745654][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.0.1456 Not tainted syzkaller #0 PREEMPT(full) 
[  165.745668][T11589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.745673][T11589] Call Trace:
[  165.745676][T11589]  <TASK>
[  165.745680][T11589]  dump_stack_lvl+0x189/0x250
[  165.745694][T11589]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.745703][T11589]  ? __pfx__printk+0x10/0x10
[  165.745714][T11589]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  165.745723][T11589]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  165.745732][T11589]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  165.745742][T11589]  warn_alloc+0x214/0x310
[  165.745756][T11589]  ? __pfx_warn_alloc+0x10/0x10
[  165.745771][T11589]  ? __get_vm_area_node+0x28f/0x300
[  165.745782][T11589]  ? xskq_create+0xbf/0x170
[  165.745791][T11589]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  165.745814][T11589]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  165.745827][T11589]  ? __kasan_kmalloc+0x93/0xb0
[  165.745839][T11589]  vmalloc_user_noprof+0xad/0xf0
[  165.745849][T11589]  ? xskq_create+0xbf/0x170
[  165.745857][T11589]  xskq_create+0xbf/0x170
[  165.745865][T11589]  xsk_init_queue+0xb0/0x110
[  165.745873][T11589]  xsk_setsockopt+0x57b/0x8d0
[  165.745885][T11589]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.745896][T11589]  ? __pfx_aa_sk_perm+0x10/0x10
[  165.745909][T11589]  ? __fget_files+0x2a/0x420
[  165.745914][T11589]  ? aa_sock_opt_perm+0xff/0x1b0
[  165.745943][T11589]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  165.745953][T11589]  ? __pfx_xsk_setsockopt+0x10/0x10
[  165.745965][T11589]  do_sock_setsockopt+0x17c/0x1b0
[  165.745976][T11589]  __x64_sys_setsockopt+0x13f/0x1b0
[  165.745988][T11589]  do_syscall_64+0xfa/0x3b0
[  165.745999][T11589]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.746006][T11589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.746013][T11589]  ? exc_page_fault+0x9f/0xf0
[  165.746021][T11589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.746028][T11589] RIP: 0033:0x7f49c7d8eba9
[  165.746036][T11589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.746043][T11589] RSP: 002b:00007f49c8cf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  165.746052][T11589] RAX: ffffffffffffffda RBX: 00007f49c7fd5fa0 RCX: 00007f49c7d8eba9
[  165.746057][T11589] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  165.746061][T11589] RBP: 00007f49c7e11e19 R08: 0000000000000004 R09: 0000000000000000
[  165.746066][T11589] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  165.746070][T11589] R13: 00007f49c7fd6038 R14: 00007f49c7fd5fa0 R15: 00007ffd25e03308
[  165.746082][T11589]  </TASK>
[  165.746432][T11589] Mem-Info:
[  165.855443][T11589] active_anon:5239 inactive_anon:0 isolated_anon:0
[  165.855443][T11589]  active_file:1395 inactive_file:38283 isolated_file:0
[  165.855443][T11589]  unevictable:1768 dirty:122 writeback:0
[  165.855443][T11589]  slab_reclaimable:10720 slab_unreclaimable:73628
[  165.855443][T11589]  mapped:18253 shmem:2435 pagetables:926
[  165.855443][T11589]  sec_pagetables:0 bounce:0
[  165.855443][T11589]  kernel_misc_reclaimable:0
[  165.855443][T11589]  free:252643 free_pcp:25346 free_cma:0
[  165.873479][T11589] Node 0 active_anon:11828kB inactive_anon:0kB active_file:4144kB inactive_file:147152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29996kB dirty:368kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7380kB pagetables:2160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  165.885826][T11589] Node 1 active_anon:9128kB inactive_anon:0kB active_file:1436kB inactive_file:5980kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43016kB dirty:120kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5372kB pagetables:1544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  165.898175][T11589] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  165.909620][T11589] lowmem_reserve[]: 0 811 811 811 811
[  165.911813][T11589] Node 0 DMA32 free:175308kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11828kB inactive_anon:0kB active_file:4144kB inactive_file:147152kB unevictable:3536kB writepending:368kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:64196kB local_pcp:20840kB free_cma:0kB
[  165.924575][T11589] lowmem_reserve[]: 0 0 0 0 0
[  165.926518][T11589] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  165.938176][T11589] lowmem_reserve[]: 0 0 854 854 854
[  165.940461][T11589] Node 1 Normal free:361288kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9128kB inactive_anon:0kB active_file:1436kB inactive_file:5980kB unevictable:3536kB writepending:120kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37312kB local_pcp:16120kB free_cma:0kB
[  165.953184][T11589] lowmem_reserve[]: 0 0 0 0 0
[  165.955202][T11589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  165.960409][T11589] Node 0 DMA32: 1875*4kB (UM) 974*8kB (UME) 569*16kB (UM) 302*32kB (UME) 160*64kB (UME) 69*128kB (UME) 45*256kB (UME) 20*512kB (UME) 10*1024kB (UME) 4*2048kB (UME) 20*4096kB (M) = 175244kB
[  165.967755][T11589] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  165.974074][T11589] Node 1 Normal: 130*4kB (UME) 846*8kB (UME) 657*16kB (UME) 572*32kB (UM) 223*64kB (UM) 107*128kB (UM) 39*256kB (UME) 21*512kB (UM) 12*1024kB (UM) 3*2048kB (ME) 63*4096kB (UM) = 361288kB
[  165.981710][T11589] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  165.985556][T11589] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  165.989431][T11589] 42113 total pagecache pages
[  165.991277][T11589] 0 pages in swap cache
[  165.992972][T11589] Free swap  = 124996kB
[  165.994663][T11589] Total swap = 124996kB
[  165.996730][T11589] 786301 pages RAM
[  165.998215][T11589] 0 pages HighMem/MovableOnly
[  166.000225][T11589] 241346 pages reserved
[  166.001713][T11589] 0 pages cma reserved
[  166.132440][T11601] lo speed is unknown, defaulting to 1000
[  166.167996][T11612] netlink: 'syz.2.1461': attribute type 4 has an invalid length.
[  166.303197][T11615] __nla_validate_parse: 6 callbacks suppressed
[  166.303207][T11615] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1462'.
[  166.376797][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.386529][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.395742][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.408625][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.411802][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.420615][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.423900][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.427609][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.431419][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  166.436788][T11613] netlink: 'syz.0.1460': attribute type 6 has an invalid length.
[  166.481868][T11634] dvmrp1: entered allmulticast mode
[  166.489059][T11634] dvmrp1: left allmulticast mode
[  166.543488][T11644] syzkaller1: entered promiscuous mode
[  166.545882][T11644] syzkaller1: entered allmulticast mode
[  166.991816][T11696] tipc: Resetting bearer <eth:syzkaller0>
[  167.046890][T11700] netlink: 'syz.1.1482': attribute type 74 has an invalid length.
[  167.130621][T11692] lo speed is unknown, defaulting to 1000
[  167.274420][T11724] netlink: 'syz.1.1489': attribute type 10 has an invalid length.
[  167.532789][T11744] IPVS: stopping backup sync thread 11746 ...
[  167.745782][T11748] lo speed is unknown, defaulting to 1000
[  168.076024][T11779] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  168.082701][T11778] IPVS: stopping backup sync thread 11779 ...
[  168.226368][T11782] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  168.229920][T11782] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  168.268373][T11803] tap0: tun_chr_ioctl cmd 1074025680
[  168.271997][T11803] D: renamed from syzkaller0 (while UP)
[  168.274467][T11803] tipc: Disabling bearer <eth:syzkaller0>
[  168.325585][T11810] syz_tun: entered allmulticast mode
[  168.356850][T11811] syz_tun: left allmulticast mode
[  168.382904][T11818] netlink: 'syz.1.1517': attribute type 1 has an invalid length.
[  168.666188][T11853] netlink: 'syz.2.1524': attribute type 10 has an invalid length.
[  168.994091][T11878] netlink: 'syz.0.1532': attribute type 10 has an invalid length.
[  169.130234][T11882] bond13: entered promiscuous mode
[  169.132871][T11882] 8021q: adding VLAN 0 to HW filter on device bond13
[  169.143620][T11882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.496655][T11912] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  169.500449][T11911] IPVS: stopping backup sync thread 11912 ...
[  169.586535][T11925] netlink: 'syz.0.1548': attribute type 58 has an invalid length.
[  169.767977][T11945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.844392][T11955] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  169.849784][T11952] IPVS: stopping backup sync thread 11955 ...
[  169.918902][T11945] lo speed is unknown, defaulting to 1000
[  170.018059][T11962] netlink: 'syz.1.1559': attribute type 2 has an invalid length.
[  170.096844][T11954] lo speed is unknown, defaulting to 1000
[  170.105909][T11964] vlan0: entered allmulticast mode
[  170.108183][T11964] bridge_slave_0: entered allmulticast mode
[  170.345459][T11977] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  170.400842][T11977] vlan4: entered allmulticast mode
[  170.402781][T11977] bridge_slave_0: entered allmulticast mode
[  170.652521][T11986] netlink: 'syz.0.1567': attribute type 64 has an invalid length.
[  170.848272][T12004] bond0: (slave rose0): Error: Device can not be enslaved while up
[  171.095550][T12014] netlink: 'syz.1.1574': attribute type 10 has an invalid length.
[  171.587358][T12017] __nla_validate_parse: 83 callbacks suppressed
[  171.587369][T12017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1575'.
[  171.775898][T12019] lo speed is unknown, defaulting to 1000
[  171.813400][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'.
[  171.817705][T12021] syzkaller1: entered promiscuous mode
[  171.820308][T12021] syzkaller1: entered allmulticast mode
[  171.865602][T12034] 8021q: adding VLAN 0 to HW filter on device bond3
[  171.871386][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  171.871859][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  171.874537][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  171.903733][T12029] D: left promiscuous mode
[  171.905425][T12029] D: left allmulticast mode
[  171.919086][T12029] veth7: left promiscuous mode
[  171.924012][T12033] bond5: (slave veth5): Releasing active interface
[  171.926510][T12033] bond5: (slave veth5): the permanent HWaddr of slave - 0a:19:12:e0:de:dc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  171.943665][T12033] bond5: (slave gretap2): Releasing active interface
[  171.946654][T12033] gretap2: left promiscuous mode
[  171.954337][T12033] bond6: (slave ip6gretap1): Releasing backup interface
[  171.960208][T12033] bond8: (slave geneve0): Releasing active interface
[  171.981075][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'.
[  172.187089][T12058] netlink: 'syz.0.1585': attribute type 1 has an invalid length.
[  172.469455][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'.
[  172.661904][T12096] netlink: 'syz.0.1596': attribute type 1 has an invalid length.
[  172.696995][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'.
[  172.720085][T12099] netlink: 'syz.0.1597': attribute type 3 has an invalid length.
[  172.723333][T12099] netlink: 'syz.0.1597': attribute type 1 has an invalid length.
[  172.726597][T12099] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1597'.
[  172.781477][T12109] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  172.878239][T12124] netlink: 'syz.0.1604': attribute type 1 has an invalid length.
[  172.880896][T12125] netlink: 'syz.0.1604': attribute type 1 has an invalid length.
[  172.897276][T12123] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  172.906977][T12123] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  172.921900][T12127] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1603'.
[  172.956819][T12124] netlink: 'syz.0.1604': attribute type 14 has an invalid length.
[  173.239141][T12144] : renamed from bond_slave_0
[  173.760417][T12237] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  173.763876][T12236] IPVS: stopping backup sync thread 12237 ...
[  173.774339][T12240] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[  173.781224][T12239] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  173.817840][T12245] ==================================================================
[  173.820565][T12245] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  173.823139][T12245] Read of size 1 at addr ffff888113d75e30 by task syz.0.1628/12245
[  173.826655][T12245] 
[  173.827480][T12245] CPU: 0 UID: 0 PID: 12245 Comm: syz.0.1628 Not tainted syzkaller #0 PREEMPT(full) 
[  173.827492][T12245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.827497][T12245] Call Trace:
[  173.827501][T12245]  <TASK>
[  173.827505][T12245]  dump_stack_lvl+0x189/0x250
[  173.827517][T12245]  ? __kasan_check_byte+0x12/0x40
[  173.827528][T12245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.827537][T12245]  ? lock_release+0x4b/0x3e0
[  173.827549][T12245]  ? __virt_addr_valid+0x4a5/0x5c0
[  173.827559][T12245]  print_report+0xca/0x240
[  173.827567][T12245]  ? xfrm_state_find+0x2cf2/0x5400
[  173.827575][T12245]  kasan_report+0x118/0x150
[  173.827586][T12245]  ? xfrm_state_find+0x2cf2/0x5400
[  173.827595][T12245]  xfrm_state_find+0x2cf2/0x5400
[  173.827604][T12245]  ? __lock_acquire+0xab9/0xd20
[  173.827618][T12245]  ? xfrm_state_find+0x1da/0x5400
[  173.827627][T12245]  ? __pfx_xfrm_state_find+0x10/0x10
[  173.827636][T12245]  ? __lock_acquire+0xab9/0xd20
[  173.827647][T12245]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  173.827662][T12245]  ? stack_depot_save_flags+0x40/0x860
[  173.827674][T12245]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  173.827684][T12245]  ? __lock_acquire+0xab9/0xd20
[  173.827697][T12245]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  173.827708][T12245]  ? rt_set_nexthop+0x693/0xa80
[  173.827720][T12245]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  173.827730][T12245]  ? xfrm_expand_policies+0x41f/0x6a0
[  173.827741][T12245]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  173.827753][T12245]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  173.827765][T12245]  xfrm_lookup_route+0x3c/0x1c0
[  173.827776][T12245]  udp_sendmsg+0x142e/0x2170
[  173.827789][T12245]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  173.827799][T12245]  ? __pfx_udp_sendmsg+0x10/0x10
[  173.827810][T12245]  ? count_memcg_event_mm+0x21/0x260
[  173.827820][T12245]  ? count_memcg_event_mm+0x21/0x260
[  173.827831][T12245]  ? __pfx_aa_sk_perm+0x10/0x10
[  173.827841][T12245]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  173.827850][T12245]  ? sock_rps_record_flow+0x19/0x410
[  173.827862][T12245]  ? inet_sendmsg+0x29c/0x370
[  173.827872][T12245]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  173.827881][T12245]  __sock_sendmsg+0x19c/0x270
[  173.827902][T12245]  ____sys_sendmsg+0x52d/0x830
[  173.827912][T12245]  ? __pfx_____sys_sendmsg+0x10/0x10
[  173.827922][T12245]  ? import_iovec+0x74/0xa0
[  173.827933][T12245]  ___sys_sendmsg+0x21f/0x2a0
[  173.827942][T12245]  ? __pfx____sys_sendmsg+0x10/0x10
[  173.827956][T12245]  ? __fget_files+0x2a/0x420
[  173.827962][T12245]  ? __fget_files+0x3a0/0x420
[  173.827970][T12245]  __sys_sendmmsg+0x227/0x430
[  173.827980][T12245]  ? __pfx___sys_sendmmsg+0x10/0x10
[  173.827988][T12245]  ? do_futex+0x333/0x420
[  173.828002][T12245]  ? rcu_is_watching+0x15/0xb0
[  173.828010][T12245]  __x64_sys_sendmmsg+0xa0/0xc0
[  173.828020][T12245]  do_syscall_64+0xfa/0x3b0
[  173.828028][T12245]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.828036][T12245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.828043][T12245]  ? exc_page_fault+0x9f/0xf0
[  173.828050][T12245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.828057][T12245] RIP: 0033:0x7f49c7d8eba9
[  173.828064][T12245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.828071][T12245] RSP: 002b:00007f49c8ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  173.828079][T12245] RAX: ffffffffffffffda RBX: 00007f49c7fd6090 RCX: 00007f49c7d8eba9
[  173.828084][T12245] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 000000000000000b
[  173.828089][T12245] RBP: 00007f49c7e11e19 R08: 0000000000000000 R09: 0000000000000000
[  173.828094][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.828098][T12245] R13: 00007f49c7fd6128 R14: 00007f49c7fd6090 R15: 00007ffd25e03308
[  173.828106][T12245]  </TASK>
[  173.828108][T12245] 
[  173.955034][T12245] Allocated by task 8493:
[  173.956834][T12245]  kasan_save_track+0x3e/0x80
[  173.958400][T12245]  __kasan_slab_alloc+0x6c/0x80
[  173.959986][T12245]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  173.961772][T12245]  xfrm_state_alloc+0x24/0x2f0
[  173.963369][T12245]  __find_acq_core+0x8a7/0x1c00
[  173.965025][T12245]  xfrm_find_acq+0x78/0xa0
[  173.966515][T12245]  xfrm_alloc_userspi+0x6b3/0xc90
[  173.968201][T12245]  xfrm_user_rcv_msg+0x7a3/0xab0
[  173.969822][T12245]  netlink_rcv_skb+0x208/0x470
[  173.971431][T12245]  xfrm_netlink_rcv+0x79/0x90
[  173.972969][T12245]  netlink_unicast+0x82f/0x9e0
[  173.974663][T12245]  netlink_sendmsg+0x805/0xb30
[  173.976704][T12245]  __sock_sendmsg+0x21c/0x270
[  173.978519][T12245]  ____sys_sendmsg+0x505/0x830
[  173.980082][T12245]  ___sys_sendmsg+0x21f/0x2a0
[  173.981653][T12245]  __x64_sys_sendmsg+0x19b/0x260
[  173.983513][T12245]  do_syscall_64+0xfa/0x3b0
[  173.985173][T12245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.987082][T12245] 
[  173.987877][T12245] Freed by task 47:
[  173.989171][T12245]  kasan_save_track+0x3e/0x80
[  173.990721][T12245]  kasan_save_free_info+0x46/0x50
[  173.992391][T12245]  __kasan_slab_free+0x5b/0x80
[  173.993970][T12245]  kmem_cache_free+0x18f/0x400
[  173.995959][T12245]  xfrm_state_gc_task+0x52d/0x6b0
[  173.997759][T12245]  process_scheduled_works+0xae1/0x17b0
[  173.999579][T12245]  worker_thread+0x8a0/0xda0
[  174.001095][T12245]  kthread+0x711/0x8a0
[  174.002465][T12245]  ret_from_fork+0x439/0x7d0
[  174.003986][T12245]  ret_from_fork_asm+0x1a/0x30
[  174.005614][T12245] 
[  174.006420][T12245] The buggy address belongs to the object at ffff888113d75b00
[  174.006420][T12245]  which belongs to the cache xfrm_state of size 928
[  174.010876][T12245] The buggy address is located 816 bytes inside of
[  174.010876][T12245]  freed 928-byte region [ffff888113d75b00, ffff888113d75ea0)
[  174.015749][T12245] 
[  174.016784][T12245] The buggy address belongs to the physical page:
[  174.018913][T12245] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888113d76880 pfn:0x113d74
[  174.022186][T12245] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  174.025063][T12245] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  174.027538][T12245] page_type: f5(slab)
[  174.028844][T12245] raw: 057ff00000000040 ffff88801af6a500 dead000000000122 0000000000000000
[  174.031510][T12245] raw: ffff888113d76880 00000000800e0007 00000000f5000000 0000000000000000
[  174.034212][T12245] head: 057ff00000000040 ffff88801af6a500 dead000000000122 0000000000000000
[  174.037486][T12245] head: ffff888113d76880 00000000800e0007 00000000f5000000 0000000000000000
[  174.040222][T12245] head: 057ff00000000002 ffffea00044f5d01 00000000ffffffff 00000000ffffffff
[  174.043006][T12245] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  174.045923][T12245] page dumped because: kasan: bad access detected
[  174.048022][T12245] page_owner tracks the page as allocated
[  174.049869][T12245] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6214, tgid 6213 (syz.2.76), ts 65037292778, free_ts 65035790149
[  174.056426][T12245]  post_alloc_hook+0x240/0x2a0
[  174.058066][T12245]  get_page_from_freelist+0x21e4/0x22c0
[  174.059868][T12245]  __alloc_frozen_pages_noprof+0x181/0x370
[  174.061756][T12245]  alloc_pages_mpol+0x232/0x4a0
[  174.063283][T12245]  allocate_slab+0x8a/0x370
[  174.064825][T12245]  ___slab_alloc+0xbeb/0x1420
[  174.066361][T12245]  kmem_cache_alloc_noprof+0x283/0x3c0
[  174.068116][T12245]  xfrm_state_alloc+0x24/0x2f0
[  174.069658][T12245]  xfrm_add_sa+0x17d1/0x4070
[  174.071140][T12245]  xfrm_user_rcv_msg+0x7a3/0xab0
[  174.072745][T12245]  netlink_rcv_skb+0x208/0x470
[  174.074356][T12245]  xfrm_netlink_rcv+0x79/0x90
[  174.076299][T12245]  netlink_unicast+0x82f/0x9e0
[  174.077992][T12245]  netlink_sendmsg+0x805/0xb30
[  174.080008][T12245]  __sock_sendmsg+0x21c/0x270
[  174.081835][T12245]  ____sys_sendmsg+0x505/0x830
[  174.083659][T12245] page last free pid 5873 tgid 5873 stack trace:
[  174.086202][T12245]  __free_frozen_pages+0xbc4/0xd30
[  174.088358][T12245]  free_large_kmalloc+0x13a/0x1f0
[  174.090502][T12245]  ops_undo_list+0x856/0x990
[  174.092460][T12245]  cleanup_net+0x4c5/0x800
[  174.094378][T12245]  process_scheduled_works+0xae1/0x17b0
[  174.096678][T12245]  worker_thread+0x8a0/0xda0
[  174.098614][T12245]  kthread+0x711/0x8a0
[  174.100329][T12245]  ret_from_fork+0x439/0x7d0
[  174.102249][T12245]  ret_from_fork_asm+0x1a/0x30
[  174.104275][T12245] 
[  174.105295][T12245] Memory state around the buggy address:
[  174.107666][T12245]  ffff888113d75d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  174.111054][T12245]  ffff888113d75d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  174.114432][T12245] >ffff888113d75e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  174.117788][T12245]                                      ^
[  174.120120][T12245]  ffff888113d75e80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  174.123528][T12245]  ffff888113d75f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  174.126900][T12245] ==================================================================
[  174.135472][T12245] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  174.138002][T12245] CPU: 1 UID: 0 PID: 12245 Comm: syz.0.1628 Not tainted syzkaller #0 PREEMPT(full) 
[  174.141580][T12245] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.145397][T12245] Call Trace:
[  174.146718][T12245]  <TASK>
[  174.147693][T12245]  dump_stack_lvl+0x99/0x250
[  174.149240][T12245]  ? __asan_memcpy+0x40/0x70
[  174.150774][T12245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.152463][T12245]  ? __pfx__printk+0x10/0x10
[  174.154001][T12245]  vpanic+0x281/0x750
[  174.155349][T12245]  ? preempt_schedule+0xae/0xc0
[  174.156897][T12245]  ? __pfx_vpanic+0x10/0x10
[  174.158369][T12245]  ? preempt_schedule_common+0x83/0xd0
[  174.160195][T12245]  ? preempt_schedule+0xae/0xc0
[  174.161764][T12245]  ? __pfx_preempt_schedule+0x10/0x10
[  174.163498][T12245]  panic+0xb9/0xc0
[  174.164753][T12245]  ? __pfx_panic+0x10/0x10
[  174.166236][T12245]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  174.168115][T12245]  ? xfrm_state_find+0x2cf2/0x5400
[  174.169893][T12245]  check_panic_on_warn+0x89/0xb0
[  174.171828][T12245]  ? xfrm_state_find+0x2cf2/0x5400
[  174.173743][T12245]  end_report+0x78/0x160
[  174.175364][T12245]  kasan_report+0x129/0x150
[  174.177201][T12245]  ? xfrm_state_find+0x2cf2/0x5400
[  174.178994][T12245]  xfrm_state_find+0x2cf2/0x5400
[  174.180638][T12245]  ? __lock_acquire+0xab9/0xd20
[  174.182219][T12245]  ? xfrm_state_find+0x1da/0x5400
[  174.183859][T12245]  ? __pfx_xfrm_state_find+0x10/0x10
[  174.185625][T12245]  ? __lock_acquire+0xab9/0xd20
[  174.187257][T12245]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  174.189423][T12245]  ? stack_depot_save_flags+0x40/0x860
[  174.191597][T12245]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  174.194171][T12245]  ? __lock_acquire+0xab9/0xd20
[  174.195960][T12245]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  174.198177][T12245]  ? rt_set_nexthop+0x693/0xa80
[  174.200206][T12245]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  174.202404][T12245]  ? xfrm_expand_policies+0x41f/0x6a0
[  174.204367][T12245]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  174.206144][T12245]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  174.208265][T12245]  xfrm_lookup_route+0x3c/0x1c0
[  174.210270][T12245]  udp_sendmsg+0x142e/0x2170
[  174.212192][T12245]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  174.214465][T12245]  ? __pfx_udp_sendmsg+0x10/0x10
[  174.216506][T12245]  ? count_memcg_event_mm+0x21/0x260
[  174.218527][T12245]  ? count_memcg_event_mm+0x21/0x260
[  174.220292][T12245]  ? __pfx_aa_sk_perm+0x10/0x10
[  174.221979][T12245]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  174.224278][T12245]  ? sock_rps_record_flow+0x19/0x410
[  174.226424][T12245]  ? inet_sendmsg+0x29c/0x370
[  174.228182][T12245]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  174.230189][T12245]  __sock_sendmsg+0x19c/0x270
[  174.232192][T12245]  ____sys_sendmsg+0x52d/0x830
[  174.233994][T12245]  ? __pfx_____sys_sendmsg+0x10/0x10
[  174.235836][T12245]  ? import_iovec+0x74/0xa0
[  174.237368][T12245]  ___sys_sendmsg+0x21f/0x2a0
[  174.238925][T12245]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.240592][T12245]  ? __fget_files+0x2a/0x420
[  174.242102][T12245]  ? __fget_files+0x3a0/0x420
[  174.243689][T12245]  __sys_sendmmsg+0x227/0x430
[  174.245329][T12245]  ? __pfx___sys_sendmmsg+0x10/0x10
[  174.247050][T12245]  ? do_futex+0x333/0x420
[  174.248510][T12245]  ? rcu_is_watching+0x15/0xb0
[  174.250109][T12245]  __x64_sys_sendmmsg+0xa0/0xc0
[  174.251715][T12245]  do_syscall_64+0xfa/0x3b0
[  174.253081][T12245]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.254663][T12245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.256713][T12245]  ? exc_page_fault+0x9f/0xf0
[  174.258660][T12245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.261131][T12245] RIP: 0033:0x7f49c7d8eba9
[  174.263069][T12245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.271078][T12245] RSP: 002b:00007f49c8ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  174.274537][T12245] RAX: ffffffffffffffda RBX: 00007f49c7fd6090 RCX: 00007f49c7d8eba9
[  174.277809][T12245] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 000000000000000b
[  174.281184][T12245] RBP: 00007f49c7e11e19 R08: 0000000000000000 R09: 0000000000000000
[  174.284442][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.287620][T12245] R13: 00007f49c7fd6128 R14: 00007f49c7fd6090 R15: 00007ffd25e03308
[  174.290996][T12245]  </TASK>
[  174.293036][T12245] Kernel Offset: disabled
[  174.294919][T12245] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:40:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004d7e7b0
R8 =ffff888021018237 R9 =1ffff11004203046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008fc R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f49c8ccf6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007fc0 CR3=0000000045736000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f93257a7498 00007f93257a7470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f93257a7478 00007f93257a74c0
XMM06=00007f93257a74b8 00007f93257a74b0 XMM07=00007f93257a74a8 00007f93257a74a0
XMM08=c86c21b211be1fb7 8ebca1bf87d35557 XMM09=0000000000000000 00007f9325612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff8b7a03e3 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8da0a229 RDI=ffffffff8be33c00 RBP=0000000000000000 RSP=ffffc90004dce6b8
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000024 R15=0000000000000000
RIP=ffffffff8b7a51b3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f13abd7d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005597a9c20000 CR3=0000000107bb2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f13ab012e53
XMM06=0000000000000000 00007f13ab012e4d XMM07=0000000000000000 00007f13ab012e61
XMM08=0000000000000000 00007f13ab012ee7 XMM09=0000000000000000 00007f13ab012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
