last executing test programs:

959.310227ms ago: executing program 0 (id=843):
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@union={0xc, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x10, 0x5, 0x5}, {0xa, 0x4}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @const={0x4, 0x0, 0x0, 0xa, 0x5}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x2e, 0x0, 0x0, 0x30, 0x0]}}, &(0x7f00000001c0)=""/6, 0x68, 0x6, 0x1, 0x5, 0x10000}, 0x28) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@union={0xc, 0x2, 0x0, 0x5, 0x1, 0x1, [{0x10, 0x5, 0x5}, {0xa, 0x4}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @const={0x4, 0x0, 0x0, 0xa, 0x5}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30, 0x2e, 0x0, 0x0, 0x30, 0x0]}}, &(0x7f00000001c0)=""/6, 0x68, 0x6, 0x1, 0x5, 0x10000}, 0x28)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r4], 0x88}}, 0x20004850)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, r8, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'team0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8040)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r1, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYRES32=r0], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r1, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r9, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async)
setsockopt$packet_int(r9, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)=0xf398, 0x12)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8, 0x8000, 0x5, 0x4230, {{0x2d, 0x4, 0x1, 0x1, 0xb4, 0x66, 0x0, 0xaa, 0x4, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0x33, [@loopback]}, @timestamp_addr={0x44, 0x2c, 0xf6, 0x1, 0xa, [{@multicast1, 0x3}, {@remote, 0x8}, {@multicast2, 0x8}, {@empty, 0xfffffff8}, {@multicast1, 0x2}]}, @ssrr={0x89, 0x7, 0xf9, [@empty]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0xe, [{@loopback, 0x4}, {@private=0xa010101, 0x7}, {@multicast1, 0x4}, {@private=0xa010101, 0xa}]}, @timestamp_addr={0x44, 0x14, 0x77, 0x1, 0x0, [{@rand_addr=0x64010101, 0x6}, {@multicast1, 0x8}]}, @ssrr={0x89, 0x1f, 0x11, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010100, @local, @loopback, @local, @broadcast]}, @generic={0x82, 0xd, "c26a7375ae88d9acf8c4da"}, @end]}}}}})
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r10, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef) (async)
write$tun(r10, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef)

668.229772ms ago: executing program 0 (id=848):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1caccde486325a39e3b98d76c883f7e9d3c4a9156c404fa0c25fe0d1662795eaab6745f908ea8822ae1f9318e6aebfe7988999a1bd25246fea3b8bd56e1d8af1ef87bd9755ceafb9a654327dee6c07e46b73d8d9b2f4345f34f63a17c36182e1cb104078611f6aa239470bd54c15c522c705657eff93b6f8bb0dc47bad17af2215d755bc954751ee6d6c50b5466aa64a0338305f30a2f1651fa9a57b9fb44efb47205b4a8eb0826600"/179, @ANYRES32], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r3 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x2404e0d0}, 0x404c842)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000280))
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00a000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
write(r9, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r9, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4)

615.729384ms ago: executing program 2 (id=851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40c0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x70}, 0x1, 0xba01}, 0x0)

550.679925ms ago: executing program 0 (id=852):
socket$nl_route(0x10, 0x3, 0x0)

549.106733ms ago: executing program 2 (id=853):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[], 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r5=>0x0, 0x4, 0x5, 0x0, 0x1, 0x12, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7800, 0x10, 0x4, 0x8}})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB="10002abd7000ffdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES16=0x0, @ANYBLOB="060006004e220000060006004e21000008000700050000000800050001000000080007000900000008000700644b00000900088004000080"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20008004)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, 0x0, 0x20000000)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
socket$vsock_stream(0x28, 0x1, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000fbd, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r10, @ANYBLOB="20005080050002000200000009000800030006ac0f00000000"], 0x3c}}, 0x40000)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000002c00128009000100626f6e64000000001c000280050001000600000008000a000000000008000b00", @ANYRES32=r11], 0x4c}}, 0x28000000)

548.671674ms ago: executing program 0 (id=854):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000020756c250000000000202020611af8ff00000000bfa100000000000007010000f8ffffffb70a000008000000b70300000500001b85000000b800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$alg(0x26, 0x5, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x0) (async)
r6 = accept4(r4, 0x0, 0x0, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$sock_int(r7, 0x1, 0xb, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=@newsa={0x114, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x2}, {0x0, 0x94e, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@etimer_thresh={0x8, 0xc, 0x23}, @coaddr={0x14, 0xe, @in6=@remote}, @replay_thresh={0x8, 0xb, 0xa6d0}]}, 0x114}}, 0x4000084)
write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001680))
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

488.305755ms ago: executing program 2 (id=856):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfd58, &(0x7f0000000040)={&(0x7f0000000540)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040), 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000180)={0x1}, 0x8)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="58f76b8f1d400000975b4916f9edfadf84e76c35", @ANYRES32=r7, @ANYBLOB="00000000000000002000128008000100736974001400028006001000018000000800140008000000"], 0x40}}, 0x0)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0xfe, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', <r11=>0x0, 0x8, 0x47, 0x3, 0x1, {{0x25, 0x4, 0x2, 0x21, 0x94, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x0, [{@remote, 0x2}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x44, 0x47, 0x1, 0x5, [{@broadcast}, {@private=0xa010100, 0x81}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xf0}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0x401}, {@rand_addr=0x64010102, 0xc}]}, @rr={0x7, 0x1f, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @multicast1, @broadcast, @multicast2, @multicast2]}, @lsrr={0x83, 0x7, 0xf4, [@broadcast]}]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newchain={0x64, 0x64, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff5, 0x4}, {0xffff, 0xfff2}, {0xffe0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x3, 0xf}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xfffffff8}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xc, 0x9}}, @TCA_RATE={0x6, 0x5, {0x40, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

417.288098ms ago: executing program 0 (id=858):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
socket$packet(0x11, 0x2, 0x300)
sendmsg(0xffffffffffffffff, 0x0, 0x844) (async)
sendmsg(0xffffffffffffffff, 0x0, 0x844)
connect$inet(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) (async)
write$tun(r2, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x5, 0x9]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x3ff, 0xc2ec, 0x3ff, 0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x810)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040))
socket(0x15, 0x1, 0x5e)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140))
r7 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote, @remote, 0x0, [@netrom, @netrom, @bcast, @remote, @bcast, @bcast]}, &(0x7f0000000100)=0x40, 0x80c00)
sendto$rose(r7, &(0x7f0000000300)="dd0f2f1a673ab07c73b4ece4ddfe4a8692c1effb02565642787d2e9db9d9b22c038a2ee2f5c8367b962be9d7340d04cf7be200dc93936a60f05eb3f61bd8c4d9f6ed11b36eaa65fa9c09a65f2ff7ca9825988490af48d2a2ede1e080795f9e90c42b0a2129887144959541e3da76527af099376093c6ec6f563280401daca98c1091bfdc1a008a10e57cf7043b9bc88720dae9aacd6556c74e12d6a7b941", 0x9e, 0x80, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @null}, 0x1c)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newrule={0xa8, 0x20, 0x100, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x80, 0x5, 0x60, 0x0, 0x0, 0x7, 0x1001f}, [@FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @empty}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

311.272298ms ago: executing program 1 (id=860):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6000000013000100feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="062000000003000005000e19b437437d50ca116d019053029c7c0adb385309813acecd194c7a044626010763270400000000140003006272696467653000001700000000000024001a8018000a80140007"], 0x60}}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3f1}], 0x1, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x810)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r10, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r11, 0x4)

251.028574ms ago: executing program 1 (id=861):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0)
sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x54}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.effective_cpus\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', r4, @fallback=0xb, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbf8}, 0x10}, 0x1, 0x0, 0x0, 0x83cd5ee2fa2aa4c2}, 0x8000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

250.465927ms ago: executing program 1 (id=862):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="6200251f0a000200aaaaaaaaaa9d88"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000100)={0x80})
r3 = socket$kcm(0x21, 0x2, 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="db24c6c6b2fe40de62753a97aa9ee0722b216c4e53b3cc3414c1e86454e1b4969f4fd0ee93431829", @ANYRES16=r2, @ANYRES64=r0], 0x10b8}, 0x840)
socket$netlink(0x10, 0x3, 0x13)

249.708013ms ago: executing program 2 (id=863):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltaction={0x25c, 0x31, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2ed}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x523b464d}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d10}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff8}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9885, 0x10008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x88}]}}}]}, 0x44}}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

200.606821ms ago: executing program 1 (id=864):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6)
socket$netlink(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000180)='`', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2, 0x540}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="b4de", 0x2}], 0x1}}], 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x6c, 0x10, 0x403, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x100, 0xa608}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x1000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x8e40}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0xffe}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}, 0x1, 0xba01, 0x0, 0x8000}, 0x810)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x4, @empty}}}, 0x90)
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES8=r2], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x0, 0x7fffff7f}, 0x10}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
unshare(0x62040200)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000000000000e77d00000000", @ANYRES32=0x0, @ANYBLOB="078201001100000024001280090001006970697000000000140002800800140006000000080003007f000001"], 0x44}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0ff24e6118ec05000000000000000000000000000000000100", 0x0, 0x4, 0x81, 0x5}, 0x3c)
r6 = socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', <r7=>0x0, 0x2f, 0x3, 0x2, 0x8, 0x30, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x7800, 0xffffffc0, 0x7fffffff}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@deltfilter={0xa8, 0x2d, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6, 0x7}, {0xf, 0x4}, {0xf, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0x74, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0xe, 0x9, 0x24, 0x8000}, {0xfc00, 0x8, 0x4, 0x2}, {0x4, 0x7, 0x4, 0x63f}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x6, 0x1, 0xe1, 0x9}, {0xf4b4, 0x3, 0x2, 0xfffffff7}, {0x800, 0x5, 0x5, 0x4}, {0x0, 0x5d, 0x80, 0x5}, {0x4, 0x7f, 0x8, 0x5}]}}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x7}}, @TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0xa8}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='a0*:* w\x00'], 0x8)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, r0, 0xec1b3000)

199.828827ms ago: executing program 2 (id=865):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket(0x21, 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0x0, 0xfffd}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf251a00000005009200040000000800228004190080060021"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

71.447787ms ago: executing program 2 (id=866):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000008000000020000002f1545831ecb49537b0400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000800008500", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
r4 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00!\x00', @ANYRES16=0x0, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=0x0, @ANYBLOB="04001300060012000400000006001000fa000000"], 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x1)
sendto$inet6(r4, &(0x7f00000003c0)="00190754bba5c09a96108a9aca0a9114ba64c0482783a17fb677695356768a5a91151a60b9f37c2ff3ace9709145eb2e0cfc17562c040bb8c9b235cefc61c885f86d4c44e42a3bae18119cdbb75e3b61c459e327d1bf07db8883606ff989284257e4f8815ac3d9eef1a19feefd936c2d58c68db1dad08d774f6c82bbd55e032522e4f34ebae822c12e1a5e6d3ef3a739b6ad96dc37614bd86616cab87df77a45", 0xa0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = socket(0xa, 0x40000000002, 0x0)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x80000000000008, 0x4, 0xfffffffffffffa9f, 0x2, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r7, 0x3a, 0x1, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
socket$caif_stream(0x25, 0x1, 0x0)
socket$caif_stream(0x25, 0x1, 0x4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)

70.28735ms ago: executing program 1 (id=867):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000000700000026bdf000fcdbdf250400000004000d8008000c00", @ANYRES32=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001f00000018000180140002007665746830"], 0x2c}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80000000, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRES32], 0x110}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)

1.299036ms ago: executing program 1 (id=868):
r0 = socket(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)="3a368c0164df28ca80568342b50dc7a456b26f611074e0289e5687fc5c74c9d5ec48e962bfad1ad69f5434579942ede976a7ffde1faf75a911a9c771070565f96275f2b82a03dca9967a74c46ffae6d28061f6609ac44f03769be69f03bd32d202a96783d0c5c265c3598a36fa70f5c6778f61fbb2344bcc2bd14ca6104fbaa9a2e5ad7d069e72683a41ec0227a83b5946676207b8a68e23a438c9568c405fbf", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000)
close(r2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)

0s ago: executing program 0 (id=869):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x2b)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffe28, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef)

kernel console output (not intermixed with test programs):

te
[   46.366322][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.368597][ T5851] bridge_slave_1: entered allmulticast mode
[   46.371030][ T5851] bridge_slave_1: entered promiscuous mode
[   46.388421][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.390987][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.393660][ T5842] bridge_slave_0: entered allmulticast mode
[   46.396641][ T5842] bridge_slave_0: entered promiscuous mode
[   46.400685][ T5843] team0: Port device team_slave_0 added
[   46.403002][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.406957][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.409722][ T5842] bridge_slave_1: entered allmulticast mode
[   46.412770][ T5842] bridge_slave_1: entered promiscuous mode
[   46.423147][ T5843] team0: Port device team_slave_1 added
[   46.438006][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.447487][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.451950][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.468731][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.471450][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.482385][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.488496][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.492611][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.495692][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.505536][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.527614][ T5851] team0: Port device team_slave_0 added
[   46.543891][ T5851] team0: Port device team_slave_1 added
[   46.554422][ T5842] team0: Port device team_slave_0 added
[   46.572463][ T5842] team0: Port device team_slave_1 added
[   46.585798][ T5843] hsr_slave_0: entered promiscuous mode
[   46.588522][ T5843] hsr_slave_1: entered promiscuous mode
[   46.591510][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.594225][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.605340][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.616800][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.619607][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.629830][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.634472][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.637082][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.647331][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.652583][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.655918][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.666306][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.741423][ T5851] hsr_slave_0: entered promiscuous mode
[   46.744150][ T5851] hsr_slave_1: entered promiscuous mode
[   46.747136][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   46.749382][ T5851] Cannot create hsr debugfs directory
[   46.763875][ T5842] hsr_slave_0: entered promiscuous mode
[   46.767556][ T5842] hsr_slave_1: entered promiscuous mode
[   46.770166][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   46.772385][ T5842] Cannot create hsr debugfs directory
[   46.916360][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.929566][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.943407][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.949024][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.969435][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.974091][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.981121][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.983727][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.986745][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.989322][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.993395][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.997442][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.033436][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.045991][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.051298][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.053955][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.056822][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.059492][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.065918][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.070560][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.106222][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.115980][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.118723][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.121446][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.124075][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.132786][ T2263] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.136848][ T2263] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.141286][ T2263] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.144099][ T2263] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.147812][ T2263] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.151513][ T2263] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.171426][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   47.183793][ T2263] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.186669][ T2263] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.195268][ T2263] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.197968][ T2263] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.211029][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.240301][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   47.253523][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.258871][ T2263] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.261169][ T2263] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.280435][ T2263] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.282698][ T2263] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.306182][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   47.318883][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.321702][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.348255][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.351179][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.397698][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.410842][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.439881][ T5843] veth0_vlan: entered promiscuous mode
[   47.450681][ T5842] veth0_vlan: entered promiscuous mode
[   47.454518][ T5843] veth1_vlan: entered promiscuous mode
[   47.462727][ T5842] veth1_vlan: entered promiscuous mode
[   47.486232][ T5842] veth0_macvtap: entered promiscuous mode
[   47.491230][ T5843] veth0_macvtap: entered promiscuous mode
[   47.499173][ T5842] veth1_macvtap: entered promiscuous mode
[   47.507646][ T5843] veth1_macvtap: entered promiscuous mode
[   47.515974][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.520956][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.528798][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.537302][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.541236][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.546629][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.555824][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.563992][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.568703][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.571526][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.579854][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.587929][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.604108][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.625704][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.625890][ T5851] veth0_vlan: entered promiscuous mode
[   47.628518][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.637988][ T5851] veth1_vlan: entered promiscuous mode
[   47.656511][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.659291][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.676652][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.679913][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.680765][ T5851] veth0_macvtap: entered promiscuous mode
[   47.682545][ T4865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.686626][ T5851] veth1_macvtap: entered promiscuous mode
[   47.687649][ T4865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.711373][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.718231][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.719710][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.737570][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.741169][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.744535][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.757027][ T5914] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   47.762444][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.786979][ T5914] gretap1: entered promiscuous mode
[   47.821460][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.823960][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.843196][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.846430][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.877045][ T5920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5'.
[   47.885684][ T5923] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.898605][ T5925] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   47.901218][ T5925] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   47.985649][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.006157][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'.
[   48.045226][ T5236] Bluetooth: hci2: command tx timeout
[   48.047358][ T5847] Bluetooth: hci0: command tx timeout
[   48.054816][ T5847] Bluetooth: hci1: command tx timeout
[   48.081684][ T5939] netlink: 'syz.1.10': attribute type 11 has an invalid length.
[   48.084161][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'.
[   48.143029][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'.
[   48.146877][ T5943] 8021q: VLANs not supported on ip6_vti0
[   48.277423][ T5952] geneve2: entered promiscuous mode
[   48.332884][ T5957] Bluetooth: MGMT ver 1.23
[   48.338594][ T5957] sch_tbf: burst 127 is lower than device batadv_slave_0 mtu (1514) !
[   48.343696][ T5957] tipc: Started in network mode
[   48.347703][ T5957] tipc: Node identity cef2bc89bcae, cluster identity 4711
[   48.351247][ T5957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.357614][ T5957] syzkaller0: entered promiscuous mode
[   48.360253][ T5957] syzkaller0: entered allmulticast mode
[   48.369767][ T5957] tipc: Resetting bearer <eth:syzkaller0>
[   48.377713][ T5954] netlink: zone id is out of range
[   48.379857][ T5954] netlink: zone id is out of range
[   48.381420][ T5954] netlink: zone id is out of range
[   48.383208][ T5954] netlink: zone id is out of range
[   48.387785][ T5955] tipc: Resetting bearer <eth:syzkaller0>
[   48.392029][ T5955] tipc: Disabling bearer <eth:syzkaller0>
[   48.396332][ T5954] netlink: zone id is out of range
[   48.398239][ T5954] netlink: zone id is out of range
[   48.399869][ T5954] netlink: zone id is out of range
[   48.401536][ T5954] netlink: zone id is out of range
[   48.403569][ T5954] netlink: zone id is out of range
[   48.407387][ T5954] netlink: zone id is out of range
[   48.493842][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   48.500870][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   48.507292][ T5966] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET)
[   48.759475][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'.
[   48.817625][ T5972] lo speed is unknown, defaulting to 1000
[   48.819961][ T5972] lo speed is unknown, defaulting to 1000
[   48.822443][ T5972] lo speed is unknown, defaulting to 1000
[   48.827550][ T5972] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   48.832494][ T5972] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   48.841679][ T5972] lo speed is unknown, defaulting to 1000
[   48.843875][ T5972] lo speed is unknown, defaulting to 1000
[   48.849369][ T5972] lo speed is unknown, defaulting to 1000
[   48.877015][ T5978] tipc: Started in network mode
[   48.879076][ T5978] tipc: Node identity , cluster identity 4711
[   48.881504][ T5978] tipc: Failed to obtain node identity
[   48.883510][ T5978] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   48.888115][ T5978] syzkaller0: entered promiscuous mode
[   48.890209][ T5978] syzkaller0: entered allmulticast mode
[   48.894103][ T5978] netlink: 'syz.2.20': attribute type 3 has an invalid length.
[   49.362700][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   49.420930][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.124857][ T5236] Bluetooth: hci1: command tx timeout
[   50.124887][ T5853] Bluetooth: hci0: command tx timeout
[   50.127075][ T5236] Bluetooth: hci2: command tx timeout
[   50.264190][ T6005] pim6reg: entered allmulticast mode
[   50.268309][ T6005] pim6reg: left allmulticast mode
[   50.396567][ T6007] netlink: 'syz.0.27': attribute type 4 has an invalid length.
[   50.405005][ T6007] netlink: 'syz.0.27': attribute type 4 has an invalid length.
[   50.480532][ T6022] pimreg: entered allmulticast mode
[   50.642617][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.151528][ T6060] pim6reg: entered allmulticast mode
[   51.155449][ T6059] pim6reg: left allmulticast mode
[   51.402498][ T6069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.407168][ T6069] syzkaller0: entered promiscuous mode
[   51.409043][ T6069] syzkaller0: entered allmulticast mode
[   51.422927][ T6071] pim6reg1: entered promiscuous mode
[   51.425143][ T6071] pim6reg1: entered allmulticast mode
[   51.436869][ T6069] lo speed is unknown, defaulting to 1000
[   51.511808][ T6068] tipc: Resetting bearer <eth:syzkaller0>
[   51.516205][ T6068] tipc: Disabling bearer <eth:syzkaller0>
[   51.541662][ T6071] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.546950][ T6071] team0: Port device bond1 added
[   51.635538][ T6086] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   51.725322][ T6091] netlink: 'syz.1.52': attribute type 10 has an invalid length.
[   51.731436][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.733932][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.752191][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.755160][ T6091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.758185][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.761142][ T6091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.767232][ T6091] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   51.774992][ T6091] bridge_slave_1: left allmulticast mode
[   51.776899][ T6091] bridge_slave_1: left promiscuous mode
[   51.778826][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.786284][ T6091] bridge_slave_0: left allmulticast mode
[   51.788173][ T6091] bridge_slave_0: left promiscuous mode
[   51.790111][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.800249][ T6091] bond0: (slave bridge0): Releasing backup interface
[   51.980834][ T6101] warning: `syz.1.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.004043][ T6101] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   52.109147][ T6114] bridge_slave_0: left allmulticast mode
[   52.111199][ T6114] bridge_slave_0: left promiscuous mode
[   52.113697][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.123032][ T6114] bridge_slave_1: left allmulticast mode
[   52.127969][ T6114] bridge_slave_1: left promiscuous mode
[   52.130259][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.135309][ T6114] bond0: (slave bond_slave_0): Releasing backup interface
[   52.140845][ T6114] bond0: (slave bond_slave_1): Releasing backup interface
[   52.149532][ T6114] team0: Port device team_slave_0 removed
[   52.155569][ T6114] team0: Port device team_slave_1 removed
[   52.159022][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.161432][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.165091][ T6114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.167512][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.178110][ T6114] team0: Port device bond1 removed
[   52.180109][ T5884] lo speed is unknown, defaulting to 1000
[   52.193945][ T6112] netlink: 'syz.1.58': attribute type 4 has an invalid length.
[   52.204810][ T5236] Bluetooth: hci0: command tx timeout
[   52.205692][ T5848] Bluetooth: hci1: command tx timeout
[   52.214997][ T5848] Bluetooth: hci2: command 0x040f tx timeout
[   52.261209][ T6119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.379072][ T6119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.387695][ T6129] geneve3: entered promiscuous mode
[   52.422505][ T6119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.479662][ T6143] netlink: 'syz.0.67': attribute type 10 has an invalid length.
[   52.497382][ T6119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.633225][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.636177][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.643072][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.649625][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.718904][ T6162] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   52.759942][ T6154] lo speed is unknown, defaulting to 1000
[   52.798160][ T6167] vlan2: entered promiscuous mode
[   52.801062][ T6167] bond0: entered promiscuous mode
[   52.839228][ T6176] siw: device registration error -23
[   53.004173][ T6183] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 1, id = 0
[   53.028976][ T6185] __nla_validate_parse: 15 callbacks suppressed
[   53.028987][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'.
[   53.043319][ T6185] bond_slave_0: entered promiscuous mode
[   53.045320][ T6185] bond_slave_1: entered promiscuous mode
[   53.049052][ T6185] macvlan2: entered promiscuous mode
[   53.050946][ T6185] bond0: entered promiscuous mode
[   53.077960][ T6192] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.82'.
[   53.102112][ T5846] IPVS: starting estimator thread 0...
[   53.161490][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'.
[   53.161834][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'.
[   53.176049][ T6202] Zero length message leads to an empty skb
[   53.204734][ T6199] IPVS: using max 92 ests per chain, 220800 per kthread
[   53.221431][ T6206] netlink: 48 bytes leftover after parsing attributes in process `syz.0.83'.
[   53.338542][ T6209] bond0: (slave bond_slave_0): Releasing backup interface
[   53.341113][ T6209] bond_slave_0: left promiscuous mode
[   53.344190][ T6209] bond0: (slave bond_slave_1): Releasing backup interface
[   53.348103][ T6209] bond_slave_1: left promiscuous mode
[   53.353477][ T6209] team0: Port device team_slave_0 removed
[   53.357765][ T6209] team0: Port device team_slave_1 removed
[   53.359950][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.362222][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.366508][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.368837][ T6209] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.428890][ T6209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.85'.
[   53.432612][ T6209] netlink: 'syz.1.85': attribute type 10 has an invalid length.
[   53.440436][ T6209] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[   53.443039][ T6209] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.494376][ T6214] !: renamed from veth0_to_bond (while UP)
[   53.565525][ T6215] lo speed is unknown, defaulting to 1000
[   53.731194][ T6221] syzkaller1: entered promiscuous mode
[   53.732951][ T6221] syzkaller1: entered allmulticast mode
[   53.953762][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'.
[   53.967550][ T6239] lo speed is unknown, defaulting to 1000
[   53.990836][ T6241] netlink: 44 bytes leftover after parsing attributes in process `syz.1.95'.
[   53.991361][ T6243] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   53.993505][ T6241] netlink: 43 bytes leftover after parsing attributes in process `syz.1.95'.
[   54.000102][ T6241] netlink: 'syz.1.95': attribute type 5 has an invalid length.
[   54.006935][ T6241] netlink: 43 bytes leftover after parsing attributes in process `syz.1.95'.
[   54.007731][ T6243] bond1: (slave gretap1): making interface the new active one
[   54.012361][ T6243] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   54.025172][ T6243] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   54.037054][ T6243] syz.2.96 (6243) used greatest stack depth: 19728 bytes left
[   54.049064][ T6241] lo speed is unknown, defaulting to 1000
[   54.178195][ T6257] tipc: Started in network mode
[   54.180009][ T6257] tipc: Node identity d2f2f29df34, cluster identity 4711
[   54.182340][ T6257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.185960][ T6257] syzkaller0: entered promiscuous mode
[   54.187697][ T6257] syzkaller0: entered allmulticast mode
[   54.205455][ T6256] tipc: Resetting bearer <eth:syzkaller0>
[   54.210280][ T6256] tipc: Disabling bearer <eth:syzkaller0>
[   54.284859][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[   54.286329][ T5848] Bluetooth: hci1: command tx timeout
[   54.294724][ T5848] Bluetooth: hci0: command tx timeout
[   54.314106][ T6267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.342298][ T6267] syzkaller0: entered promiscuous mode
[   54.346425][ T6267] syzkaller0: entered allmulticast mode
[   54.365709][ T6264] tipc: Resetting bearer <eth:syzkaller0>
[   54.402562][ T6264] tipc: Disabling bearer <eth:syzkaller0>
[   54.524209][ T6273] lo speed is unknown, defaulting to 1000
[   54.966658][ T6293] team1: entered promiscuous mode
[   54.968723][ T6293] team1: entered allmulticast mode
[   54.973829][ T6293] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   55.657613][ T6296] bond0: (slave wlan1): Releasing backup interface
[   55.660961][ T6296] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[   55.696658][ T6296] team0: Mode changed to "activebackup"
[   55.696747][ T6299] net_ratelimit: 49 callbacks suppressed
[   55.696760][ T6299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.903100][ T6304] bond0: left promiscuous mode
[   55.905294][ T6304] macvlan2: left promiscuous mode
[   55.920410][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.924940][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.928456][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.933271][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.033904][ T6312] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   56.086351][ T6313] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   56.364918][ T5848] Bluetooth: hci2: command 0x040f tx timeout
[   56.545881][ T6338] tipc: Started in network mode
[   56.547491][ T6338] tipc: Node identity 7e27c9037bc2, cluster identity 4711
[   56.549753][ T6338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.552274][ T6338] syzkaller0: entered promiscuous mode
[   56.554106][ T6338] syzkaller0: entered allmulticast mode
[   56.561029][ T6338] tipc: Resetting bearer <eth:syzkaller0>
[   56.564515][ T6337] tipc: Resetting bearer <eth:syzkaller0>
[   56.569413][ T6337] tipc: Disabling bearer <eth:syzkaller0>
[   56.709848][ T6346] netlink: 'syz.0.124': attribute type 10 has an invalid length.
[   56.717378][ T6346] team0: Port device dummy0 added
[   56.721528][ T6346] netlink: 'syz.0.124': attribute type 10 has an invalid length.
[   56.728981][ T6346] team0: Port device dummy0 removed
[   56.734118][ T6346] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   57.116817][ T6348] batadv_slave_1: entered promiscuous mode
[   57.120868][ T6347] batadv_slave_1: left promiscuous mode
[   57.212139][ T6350] netlink: 'syz.2.126': attribute type 12 has an invalid length.
[   57.520694][ T6355] netlink: 'syz.0.128': attribute type 5 has an invalid length.
[   57.556235][ T6358] netlink: 'syz.0.129': attribute type 1 has an invalid length.
[   58.091182][ T6366] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.109979][ T6366] bond1: (slave gretap1): Releasing active interface
[   58.112631][ T6366] bond1: (slave gretap2): making interface the new active one
[   58.119202][ T6366] bond1: (slave gretap2): Releasing active interface
[   58.137934][ T6366] syz.2.132 (6366) used greatest stack depth: 19184 bytes left
[   58.250520][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   58.287299][ T6380] __nla_validate_parse: 19 callbacks suppressed
[   58.287339][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.135'.
[   58.372262][ T6388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.378594][ T6388] tipc: Resetting bearer <eth:syzkaller0>
[   58.449384][ T5848] Bluetooth: hci2: command 0x040f tx timeout
[   58.455551][ T6387] tipc: Disabling bearer <eth:syzkaller0>
[   58.486238][ T6402] netlink: 'syz.2.141': attribute type 1 has an invalid length.
[   58.501252][ T6402] 8021q: adding VLAN 0 to HW filter on device bond3
[   58.508975][ T6402] bond3: (slave ip6gretap1): making interface the new active one
[   58.512108][ T6402] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   58.540638][ T6402] veth3: entered promiscuous mode
[   58.546589][ T6402] bond3: (slave veth3): Enslaving as an active interface with a down link
[   58.551923][ T6402] erspan0: entered allmulticast mode
[   58.564023][ T6407] : renamed from vlan1 (while UP)
[   58.713594][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'.
[   58.719229][ T6414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.145'.
[   58.723643][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'.
[   58.747107][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'.
[   58.793918][ T6433] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   58.808793][ T6433] 8021q: adding VLAN 0 to HW filter on device bond4
[   58.812541][ T6430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.147'.
[   58.827803][ T6433] 8021q: adding VLAN 0 to HW filter on device bond4
[   58.830959][ T6433] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[   58.836707][ T6433] bond4: (slave vcan1): Error -95 calling set_mac_address
[   58.880802][ T6437] gretap3: entered promiscuous mode
[   58.892371][ T6437] bond4: (slave gretap3): making interface the new active one
[   58.896177][ T6437] bond4: (slave gretap3): Enslaving as an active interface with an up link
[   58.906803][ T6436] lo speed is unknown, defaulting to 1000
[   58.917825][ T6433] macvlan5: entered promiscuous mode
[   58.919473][ T6433] macvlan5: entered allmulticast mode
[   58.921448][ T6433] bond4: entered promiscuous mode
[   58.923416][ T6433] 8021q: adding VLAN 0 to HW filter on device macvlan5
[   58.927107][ T6433] bond4: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap3
[   58.931103][ T6433] bond4: left promiscuous mode
[   59.037471][ T6446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.043081][ T6446] syzkaller0: entered promiscuous mode
[   59.049722][ T6446] syzkaller0: entered allmulticast mode
[   59.067949][ T6446] tipc: Resetting bearer <eth:syzkaller0>
[   59.070862][ T6449] lo speed is unknown, defaulting to 1000
[   59.073322][ T6445] tipc: Resetting bearer <eth:syzkaller0>
[   59.078053][ T6445] tipc: Disabling bearer <eth:syzkaller0>
[   59.273151][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'.
[   59.277126][ T6454] netlink: 34 bytes leftover after parsing attributes in process `syz.0.154'.
[   59.369702][ T6456] lo speed is unknown, defaulting to 1000
[   59.371922][ T6456] lo speed is unknown, defaulting to 1000
[   59.374268][ T6456] lo speed is unknown, defaulting to 1000
[   59.434012][ T6456] infiniband syz0: set active
[   59.436486][ T6456] infiniband syz0: added lo
[   59.441904][   T24] lo speed is unknown, defaulting to 1000
[   59.460188][ T6456] RDS/IB: syz0: added
[   59.461950][ T6456] smc: adding ib device syz0 with port count 1
[   59.464214][ T6456] smc:    ib device syz0 port 1 has pnetid 
[   59.466601][   T24] lo speed is unknown, defaulting to 1000
[   59.469015][ T6456] lo speed is unknown, defaulting to 1000
[   59.518892][ T6456] lo speed is unknown, defaulting to 1000
[   59.593353][ T6456] lo speed is unknown, defaulting to 1000
[   59.657121][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.156'.
[   59.660307][    T9] IPVS: starting estimator thread 0...
[   59.734332][ T6466] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.754702][ T6462] IPVS: using max 92 ests per chain, 220800 per kthread
[   59.951960][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.162'.
[   59.983273][ T6482] bond0 (unregistering): Released all slaves
[   59.998683][ T6485] netlink: 'syz.0.164': attribute type 3 has an invalid length.
[   60.004060][ T6484] syz_tun: entered allmulticast mode
[   60.019485][ T6484] syz_tun: left allmulticast mode
[   60.089886][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.092787][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.184313][ T6491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.191319][ T6491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.260432][ T6491] geneve2: left promiscuous mode
[   60.266527][ T6491] team1: left promiscuous mode
[   60.268430][ T6491] team1: left allmulticast mode
[   60.270758][   T24] lo speed is unknown, defaulting to 1000
[   60.274510][   T24] syz0: Port: 1 Link DOWN
[   60.290309][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.295742][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.310871][   T24] lo speed is unknown, defaulting to 1000
[   60.318006][ T6504] lo speed is unknown, defaulting to 1000
[   60.320418][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.323847][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.328144][ T6504] lo speed is unknown, defaulting to 1000
[   60.339253][ T6507] xt_HMARK: proto mask must be zero with L3 mode
[   60.372619][ T6509] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   60.446291][ T6511] vlan1: entered promiscuous mode
[   60.448284][ T6511] macvtap0: entered promiscuous mode
[   60.477444][ T6518] syz.1.172: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   60.483810][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.1.172 Not tainted syzkaller #0 PREEMPT(full) 
[   60.483822][ T6518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.483828][ T6518] Call Trace:
[   60.483844][ T6518]  <TASK>
[   60.483849][ T6518]  dump_stack_lvl+0x189/0x250
[   60.483866][ T6518]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.483879][ T6518]  ? __pfx__printk+0x10/0x10
[   60.483894][ T6518]  ? lock_release+0x4b/0x3e0
[   60.483911][ T6518]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   60.483927][ T6518]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   60.483942][ T6518]  warn_alloc+0x214/0x310
[   60.483963][ T6518]  ? __pfx_warn_alloc+0x10/0x10
[   60.483981][ T6518]  ? __get_vm_area_node+0x28f/0x300
[   60.483999][ T6518]  ? fq_pie_init+0x430/0x840
[   60.484016][ T6518]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   60.484042][ T6518]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   60.484055][ T6518]  ? rcu_is_watching+0x15/0xb0
[   60.484063][ T6518]  ? fq_pie_init+0x430/0x840
[   60.484071][ T6518]  ? fq_pie_init+0x430/0x840
[   60.484079][ T6518]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   60.484089][ T6518]  ? fq_pie_init+0x430/0x840
[   60.484097][ T6518]  ? tcf_block_get+0x67/0xa0
[   60.484107][ T6518]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[   60.484118][ T6518]  fq_pie_init+0x430/0x840
[   60.484127][ T6518]  ? __pfx_fq_pie_init+0x10/0x10
[   60.484135][ T6518]  qdisc_create+0x7ac/0xea0
[   60.484173][ T6518]  tc_modify_qdisc+0x1538/0x20e0
[   60.484195][ T6518]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   60.484211][ T6518]  ? lock_release+0x4b/0x3e0
[   60.484221][ T6518]  ? bpf_lsm_capable+0x9/0x20
[   60.484231][ T6518]  ? security_capable+0x7e/0x2e0
[   60.484242][ T6518]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   60.484250][ T6518]  rtnetlink_rcv_msg+0x77c/0xb70
[   60.484262][ T6518]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   60.484272][ T6518]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   60.484282][ T6518]  ? __netlink_lookup+0xbd/0x810
[   60.484288][ T6518]  ? rcu_is_watching+0x15/0xb0
[   60.484296][ T6518]  ? rcu_is_watching+0x15/0xb0
[   60.484303][ T6518]  netlink_rcv_skb+0x208/0x470
[   60.484315][ T6518]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   60.484325][ T6518]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   60.484339][ T6518]  netlink_unicast+0x82f/0x9e0
[   60.484350][ T6518]  ? __pfx_netlink_unicast+0x10/0x10
[   60.484359][ T6518]  ? netlink_sendmsg+0x642/0xb30
[   60.484364][ T6518]  ? skb_put+0x11b/0x210
[   60.484372][ T6518]  netlink_sendmsg+0x805/0xb30
[   60.484380][ T6518]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.484387][ T6518]  ? futex_unqueue+0x22/0x240
[   60.484394][ T6518]  ? aa_sock_msg_perm+0xf1/0x1d0
[   60.484401][ T6518]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   60.484409][ T6518]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.484415][ T6518]  __sock_sendmsg+0x21c/0x270
[   60.484425][ T6518]  ____sys_sendmsg+0x505/0x830
[   60.484434][ T6518]  ? __pfx_____sys_sendmsg+0x10/0x10
[   60.484443][ T6518]  ? import_iovec+0x74/0xa0
[   60.484452][ T6518]  ___sys_sendmsg+0x21f/0x2a0
[   60.484463][ T6518]  ? __pfx____sys_sendmsg+0x10/0x10
[   60.484478][ T6518]  ? futex_wait+0x285/0x360
[   60.484502][ T6518]  ? __fget_files+0x2a/0x420
[   60.484513][ T6518]  ? __fget_files+0x3a0/0x420
[   60.484526][ T6518]  __x64_sys_sendmsg+0x19b/0x260
[   60.484540][ T6518]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   60.484555][ T6518]  ? rcu_is_watching+0x15/0xb0
[   60.484589][ T6518]  ? rcu_is_watching+0x15/0xb0
[   60.484603][ T6518]  do_syscall_64+0xfa/0x3b0
[   60.484616][ T6518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.484625][ T6518]  ? exc_page_fault+0x9f/0xf0
[   60.484644][ T6518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.484651][ T6518] RIP: 0033:0x7f782038ebe9
[   60.484660][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.484667][ T6518] RSP: 002b:00007f7821141038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.484675][ T6518] RAX: ffffffffffffffda RBX: 00007f78205b6180 RCX: 00007f782038ebe9
[   60.484681][ T6518] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 000000000000008f
[   60.484686][ T6518] RBP: 00007f7820411e19 R08: 0000000000000000 R09: 0000000000000000
[   60.484690][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.484694][ T6518] R13: 00007f78205b6218 R14: 00007f78205b6180 R15: 00007ffc8b1e6198
[   60.484703][ T6518]  </TASK>
[   60.633804][ T6518] Mem-Info:
[   60.635405][ T6518] active_anon:5289 inactive_anon:0 isolated_anon:0
[   60.635405][ T6518]  active_file:1193 inactive_file:38207 isolated_file:0
[   60.635405][ T6518]  unevictable:1768 dirty:1476 writeback:0
[   60.635405][ T6518]  slab_reclaimable:9763 slab_unreclaimable:53830
[   60.635405][ T6518]  mapped:19234 shmem:2443 pagetables:909
[   60.635405][ T6518]  sec_pagetables:0 bounce:0
[   60.635405][ T6518]  kernel_misc_reclaimable:0
[   60.635405][ T6518]  free:297529 free_pcp:18624 free_cma:0
[   60.650442][ T6518] Node 0 active_anon:10824kB inactive_anon:0kB active_file:4004kB inactive_file:6324kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45544kB dirty:5760kB writeback:0kB shmem:5160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8164kB pagetables:2020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.661275][ T6518] Node 1 active_anon:10332kB inactive_anon:0kB active_file:768kB inactive_file:146504kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31392kB dirty:144kB writeback:0kB shmem:4612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3684kB pagetables:1616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   60.672541][ T6518] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.682728][ T6518] lowmem_reserve[]: 0 811 811 811 811
[   60.685185][ T6518] Node 0 DMA32 free:410116kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10824kB inactive_anon:0kB active_file:4004kB inactive_file:6324kB unevictable:3536kB writepending:5760kB present:1556484kB managed:830920kB mlocked:0kB bounce:0kB free_pcp:40860kB local_pcp:20220kB free_cma:0kB
[   60.696126][ T6518] lowmem_reserve[]: 0 0 0 0 0
[   60.698259][ T6518] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   60.708639][ T6518] lowmem_reserve[]: 0 0 854 854 854
[   60.710542][ T6518] Node 1 Normal free:306024kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10332kB inactive_anon:0kB active_file:768kB inactive_file:146504kB unevictable:3536kB writepending:144kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34064kB local_pcp:20936kB free_cma:0kB
[   60.722800][ T6518] lowmem_reserve[]: 0 0 0 0 0
[   60.725845][ T6518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   60.731114][ T6518] Node 0 DMA32: 511*4kB (UM) 468*8kB (UME) 216*16kB (UME) 40*32kB (UM) 82*64kB (UM) 25*128kB (UM) 10*256kB (UME) 5*512kB (ME) 1*1024kB (M) 4*2048kB (UM) 92*4096kB (M) = 410140kB
[   60.738452][ T6518] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   60.744484][ T6518] Node 1 Normal: 46*4kB (ME) 162*8kB (UM) 88*16kB (UME) 171*32kB (UM) 53*64kB (UM) 27*128kB (UM) 14*256kB (ME) 13*512kB (UME) 6*1024kB (UME) 6*2048kB (UME) 64*4096kB (M) = 306024kB
[   60.751726][ T6518] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.755395][ T6518] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   60.758999][ T6518] 41843 total pagecache pages
[   60.760930][ T6518] 0 pages in swap cache
[   60.762696][ T6518] Free swap  = 124996kB
[   60.764506][ T6518] Total swap = 124996kB
[   60.768150][ T6518] 786301 pages RAM
[   60.769708][ T6518] 0 pages HighMem/MovableOnly
[   60.771635][ T6518] 241339 pages reserved
[   60.773414][ T6518] 0 pages cma reserved
[   60.835694][ T6525] gretap4: entered promiscuous mode
[   60.838264][ T6525] gretap4: entered allmulticast mode
[   60.886929][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.928239][ T6535] netlink: 'syz.0.174': attribute type 9 has an invalid length.
[   60.932235][ T6535] netlink: 'syz.0.174': attribute type 6 has an invalid length.
[   60.938390][ T6535] netlink: 'syz.0.174': attribute type 7 has an invalid length.
[   60.941702][ T6535] netlink: 'syz.0.174': attribute type 8 has an invalid length.
[   61.107975][ T6548] bridge_slave_0: entered promiscuous mode
[   61.112569][ T6548] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   61.252822][ T6564] veth0_macvtap: left promiscuous mode
[   61.282328][ T6566] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   61.372115][ T6577] pim6reg1: entered promiscuous mode
[   61.374529][ T6577] pim6reg1: entered allmulticast mode
[   61.467753][ T6585] netlink: 'syz.2.189': attribute type 10 has an invalid length.
[   61.478045][ T6585] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   61.481521][ T6585] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   61.625579][ T6606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.628557][ T6606] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   61.631416][ T6606] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   61.637780][ T6606] tipc: Resetting bearer <eth:syzkaller0>
[   61.784511][ T6616] geneve2: entered promiscuous mode
[   61.788235][ T6616] geneve2: entered allmulticast mode
[   61.793598][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 45994 - 0
[   61.800230][   T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 55029 - 0
[   61.803402][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 45994 - 0
[   61.807129][   T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 55029 - 0
[   61.814989][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 45994 - 0
[   61.818181][   T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 55029 - 0
[   61.821302][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 45994 - 0
[   61.835323][   T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 55029 - 0
[   61.845218][ T6620] syzkaller0: entered promiscuous mode
[   61.847320][ T6620] syzkaller0: entered allmulticast mode
[   61.866081][ T6620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.873159][ T6620] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   61.886379][ T6620] tipc: Resetting bearer <eth:syzkaller0>
[   61.889390][ T6619] tipc: Resetting bearer <eth:syzkaller0>
[   61.896841][ T6619] tipc: Disabling bearer <eth:syzkaller0>
[   61.932415][ T6629] netlink: 'syz.2.203': attribute type 3 has an invalid length.
[   61.992728][ T6629] pim6reg: entered allmulticast mode
[   62.026935][ T6636] netlink: 'syz.0.205': attribute type 4 has an invalid length.
[   62.030549][ T6636] : renamed from bond0
[   62.055288][ T6638] sctp: [Deprecated]: syz.0.206 (pid 6638) Use of int in max_burst socket option deprecated.
[   62.055288][ T6638] Use struct sctp_assoc_value instead
[   62.068181][ T6639] sctp: [Deprecated]: syz.0.206 (pid 6639) Use of int in maxseg socket option.
[   62.068181][ T6639] Use struct sctp_assoc_value instead
[   62.489642][ T5877] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.494145][ T5877] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.503407][ T5877] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.513443][ T5877] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.681807][  T971] lo speed is unknown, defaulting to 1000
[   62.684015][  T971] syz1: Port: 1 Link DOWN
[   62.754690][   T52] tipc: Node number set to 565375645
[   62.876929][ T6705] bridge3: the hash_elasticity option has been deprecated and is always 16
[   62.962265][ T6718] nbd: must specify a size in bytes for the device
[   63.019375][ T6718] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   63.921460][ T6757] __nla_validate_parse: 28 callbacks suppressed
[   63.921471][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   63.922622][ T6758] validate_nla: 7 callbacks suppressed
[   63.922652][ T6758] netlink: 'syz.0.230': attribute type 1 has an invalid length.
[   63.925593][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'.
[   63.949530][ T6758] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[   63.953443][ T6758] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   63.969568][ T6758] bond0: (slave vti0): making interface the new active one
[   63.982272][ T6758] bond0: (slave vti0): Enslaving as an active interface with an up link
[   64.081592][ T6771] netlink: 'syz.0.234': attribute type 10 has an invalid length.
[   64.084528][ T6771] : (slave dummy0): Releasing backup interface
[   64.093418][ T6771] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   64.098847][ T6771] team0: Failed to send options change via netlink (err -105)
[   64.101833][ T6771] team0: Port device dummy0 added
[   64.152103][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   64.212178][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   64.228375][ T6778] vlan2: entered promiscuous mode
[   64.230370][ T6778] bridge0: entered promiscuous mode
[   64.244249][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   64.319404][ T6799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'.
[   64.320558][ T6798] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   64.341072][ T6798] netlink: 3 bytes leftover after parsing attributes in process `syz.2.241'.
[   64.341273][ T6799] batman_adv: batadv0: Adding interface: dummy0
[   64.346628][ T6799] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.356265][ T6799] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   64.362783][ T6798] batadv1: entered promiscuous mode
[   64.364477][ T6798] batadv1: entered allmulticast mode
[   64.373451][ T6799] batman_adv: batadv0: Adding interface: ip6gretap2
[   64.376575][ T6799] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.386791][ T6799] batman_adv: batadv0: Interface activated: ip6gretap2
[   64.447358][ T6804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.471919][ T6804] syzkaller0: entered promiscuous mode
[   64.474076][ T6804] syzkaller0: entered allmulticast mode
[   64.491834][ T6804] lo speed is unknown, defaulting to 1000
[   64.509169][ T6804] lo speed is unknown, defaulting to 1000
[   64.523583][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[   64.548569][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'.
[   64.616390][ T6815] tipc: Resetting bearer <eth:syzkaller0>
[   64.663561][ T6803] tipc: Resetting bearer <eth:syzkaller0>
[   64.668442][ T6803] tipc: Disabling bearer <eth:syzkaller0>
[   64.690695][ T6820] pimreg: entered allmulticast mode
[   64.717969][ T6824] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   64.748480][ T6824] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link
[   64.757497][ T6824] veth5: entered promiscuous mode
[   64.760149][ T6824] bond1: (slave veth5): Enslaving as a backup interface with a down link
[   64.765179][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.248'.
[   64.785276][ T6824] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.786400][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.815540][ T6830] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   64.834076][ T6833] netlink: 'syz.2.251': attribute type 30 has an invalid length.
[   64.846739][ T6833] netlink: 'syz.2.251': attribute type 39 has an invalid length.
[   64.858093][ T6830] bond2: (slave gretap1): making interface the new active one
[   64.860898][ T6830] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   64.867250][ T6830] vlan1: entered allmulticast mode
[   64.868929][ T6830] bond2: entered allmulticast mode
[   64.870581][ T6830] gretap1: entered allmulticast mode
[   64.872930][ T6830] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   64.905628][ T5876] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   65.003182][ T6840] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   65.043197][ T6845] erspan0: left allmulticast mode
[   65.067217][ T6845] bridge_slave_0: left promiscuous mode
[   65.108510][ T6845] veth3: left promiscuous mode
[   65.118564][ T6845] gretap3: left promiscuous mode
[   65.120717][ T6845] gretap4: left promiscuous mode
[   65.122553][ T6845] gretap4: left allmulticast mode
[   65.126692][ T6845] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   65.128922][ T6845] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   65.131896][ T6845] geneve2: left promiscuous mode
[   65.133538][ T6845] geneve2: left allmulticast mode
[   65.138700][ T6846] veth0_to_bond: entered allmulticast mode
[   65.147784][ T6847] veth0_to_bond: left allmulticast mode
[   65.150335][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.154908][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 45994 - 0
[   65.161777][   T12] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 55029 - 0
[   65.164370][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.169335][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 45994 - 0
[   65.173065][   T12] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 55029 - 0
[   65.176172][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.178832][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 45994 - 0
[   65.181740][   T12] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 55029 - 0
[   65.184300][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.187609][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 45994 - 0
[   65.190387][   T12] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 55029 - 0
[   65.346414][ T6877] netlink: 'syz.2.261': attribute type 2 has an invalid length.
[   65.366523][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.369282][ T6877] 8021q: adding VLAN 0 to HW filter on device team0
[   65.372506][ T6877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.377877][    T9] lo speed is unknown, defaulting to 1000
[   65.379679][    T9] syz1: Port: 1 Link ACTIVE
[   65.381336][ T6875] batadv_slave_0: entered promiscuous mode
[   65.425319][ T6879] macvlan1: entered promiscuous mode
[   65.431820][ T6879] macvlan1: left promiscuous mode
[   65.453922][ T6881] netlink: 'syz.0.263': attribute type 1 has an invalid length.
[   65.459031][ T6881] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   65.667889][ T6909] netlink: zone id is out of range
[   65.673538][ T6909] netlink: zone id is out of range
[   65.677394][ T6909] netlink: get zone limit has 8 unknown bytes
[   65.894059][ T6917] netlink: 'syz.1.273': attribute type 2 has an invalid length.
[   65.903922][ T6917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.941637][ T6923] : entered promiscuous mode
[   65.949951][ T6925] xfrm1: entered promiscuous mode
[   65.952090][ T6925] xfrm1: entered allmulticast mode
[   66.033882][ T6936] lo speed is unknown, defaulting to 1000
[   66.036797][ T6936] lo speed is unknown, defaulting to 1000
[   66.330969][ T6950] syzkaller1: entered promiscuous mode
[   66.333283][ T6950] syzkaller1: entered allmulticast mode
[   66.479685][ T6960] IPVS: Scheduler module ip_vs_sip not found
[   66.592857][ T6975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.597245][ T6974] tipc: Resetting bearer <eth:syzkaller0>
[   66.600976][ T6974] tipc: Disabling bearer <eth:syzkaller0>
[   66.618435][ T6980] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   66.719711][ T6985] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.767794][ T6999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.010559][ T7012] vlan1: entered promiscuous mode
[   67.012199][ T7012] vlan1: entered allmulticast mode
[   67.013852][ T7012] hsr_slave_1: entered allmulticast mode
[   67.036749][ T7017] geneve3: entered promiscuous mode
[   67.038724][ T7017] geneve3: entered allmulticast mode
[   67.041222][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   67.045065][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   67.049160][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   67.053876][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   67.150106][ T7021] wireguard0: entered promiscuous mode
[   67.151911][ T7021] wireguard0: entered allmulticast mode
[   67.158208][ T7022] wireguard0: entered promiscuous mode
[   67.159927][ T7022] wireguard0: entered allmulticast mode
[   67.450856][ T7034] 8021q: adding VLAN 0 to HW filter on device 
[   67.454085][ T7034] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[   67.461941][ T5897] lo speed is unknown, defaulting to 1000
[   67.464266][ T5897] syz0: Port: 1 Link ACTIVE
[   67.466596][ T5897] lo speed is unknown, defaulting to 1000
[   67.514540][ T7037] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   67.518954][ T7037] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   67.522491][ T7037] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   67.530166][ T7039] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   67.535188][ T7039] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   67.813458][ T7053] vlan1: left allmulticast mode
[   67.815450][ T7053] hsr_slave_1: left allmulticast mode
[   67.863476][ T7057] 8021q: adding VLAN 0 to HW filter on device bond4
[   67.877444][ T7057] 8021q: adding VLAN 0 to HW filter on device bond4
[   67.881980][ T7057] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   67.887328][ T7057] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   67.991414][ T7067] bond5: (slave ip6gretap1): making interface the new active one
[   67.995763][ T7067] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[   68.026313][ T7071] pim6reg: entered allmulticast mode
[   68.030535][ T7071] pim6reg: left allmulticast mode
[   68.104419][ T7079] lo speed is unknown, defaulting to 1000
[   68.108034][ T7079] lo speed is unknown, defaulting to 1000
[   68.199920][ T7082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.208526][ T7082] syzkaller0: entered promiscuous mode
[   68.210542][ T7082] syzkaller0: entered allmulticast mode
[   68.220080][ T7082] tipc: Resetting bearer <eth:syzkaller0>
[   68.223449][ T7081] tipc: Resetting bearer <eth:syzkaller0>
[   68.230276][ T7081] tipc: Disabling bearer <eth:syzkaller0>
[   68.335146][ T7099] : renamed from pim6reg1
[   68.362500][ T7105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.365715][ T7105] syzkaller0: entered promiscuous mode
[   68.367783][ T7105] syzkaller0: entered allmulticast mode
[   68.373295][ T7105] tipc: Resetting bearer <eth:syzkaller0>
[   68.403983][ T7105] bond6: (slave bridge4): making interface the new active one
[   68.411101][ T7105] bond6: (slave bridge4): Enslaving as an active interface with an up link
[   68.415997][ T7108] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.427639][ T7104] tipc: Resetting bearer <eth:syzkaller0>
[   68.431765][ T7104] tipc: Disabling bearer <eth:syzkaller0>
[   68.451054][ T7108] bond0: (slave wlan1): Releasing backup interface
[   68.454873][ T7108] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   68.469692][ T7108] bond3: (slave ip6gretap1): Releasing active interface
[   68.472987][ T7108] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 7e:df:f6:ca:74:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   68.479327][ T7108] bond3: (slave veth3): Releasing active interface
[   68.482079][ T7108] bond4: (slave gretap3): Releasing active interface
[   68.598508][ T7120] veth1_to_bond: entered allmulticast mode
[   68.610070][ T7122] pimreg: left allmulticast mode
[   68.618323][ T7119] veth1_to_bond (unregistering): left allmulticast mode
[   68.689132][ T7125] lo speed is unknown, defaulting to 1000
[   68.692975][ T7125] lo speed is unknown, defaulting to 1000
[   68.737990][ T7128] lo speed is unknown, defaulting to 1000
[   68.806316][ T7128] lo speed is unknown, defaulting to 1000
[   68.961674][ T7146] validate_nla: 12 callbacks suppressed
[   68.961691][ T7146] netlink: 'syz.2.341': attribute type 2 has an invalid length.
[   68.990713][ T7146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.002856][ T7146] __nla_validate_parse: 95 callbacks suppressed
[   69.002870][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'.
[   69.009808][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'.
[   69.084325][ T7154] vlan2: entered promiscuous mode
[   69.093881][ T7154] vlan2: entered allmulticast mode
[   69.099753][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   69.103488][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   69.105603][ T7154] hsr_slave_1: entered allmulticast mode
[   69.122298][ T7155] netlink: 96 bytes leftover after parsing attributes in process `syz.2.344'.
[   69.126470][ T7154] openvswitch: netlink: IP tunnel TTL not specified.
[   69.138944][ T7158] 8021q: VLANs not supported on ip6_vti0
[   69.141363][ T7159] 8021q: VLANs not supported on ip6_vti0
[   69.209332][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[   69.278683][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.347'.
[   69.437192][ T7179] syzkaller0: entered promiscuous mode
[   69.439553][ T7179] syzkaller0: entered allmulticast mode
[   69.519176][ T7184] lo speed is unknown, defaulting to 1000
[   69.522122][ T7184] lo speed is unknown, defaulting to 1000
[   69.642560][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   69.672600][ T7200] netlink: 104 bytes leftover after parsing attributes in process `syz.0.356'.
[   69.681202][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.356'.
[   69.687737][ T7200] xfrm1: entered promiscuous mode
[   69.689271][ T7200] xfrm1: entered allmulticast mode
[   69.795393][ T7204] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.010046][ T7227] netlink: 'syz.0.363': attribute type 21 has an invalid length.
[   70.017221][ T7227] ipvlan2: entered promiscuous mode
[   70.020178][ T7227] bridge0: port 3(ipvlan2) entered blocking state
[   70.022868][ T7227] bridge0: port 3(ipvlan2) entered disabled state
[   70.026564][ T7227] ipvlan2: entered allmulticast mode
[   70.028716][ T7227] erspan0: entered allmulticast mode
[   70.031692][ T7227] ipvlan2: left allmulticast mode
[   70.033690][ T7227] erspan0: left allmulticast mode
[   70.072485][ T7231] netlink: 'syz.1.365': attribute type 12 has an invalid length.
[   70.118013][ T7237] bond0: entered promiscuous mode
[   70.121012][ T7237] dummy0: entered promiscuous mode
[   70.124276][ T7237] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   70.130058][ T7237] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network
[   70.133896][ T7237] hsr1: entered promiscuous mode
[   70.135914][ T7237] hsr1: entered allmulticast mode
[   70.138072][ T7237] bond0: entered allmulticast mode
[   70.140038][ T7237] dummy0: entered allmulticast mode
[   70.238165][ T7247] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   70.265560][ T7253] netlink: 'syz.2.372': attribute type 1 has an invalid length.
[   70.292239][ T7253] bond6: entered promiscuous mode
[   70.294514][ T7253] 8021q: adding VLAN 0 to HW filter on device bond6
[   70.302860][ T7253] 8021q: adding VLAN 0 to HW filter on device bond6
[   70.308551][ T7253] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address
[   70.312632][ T7253] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[   70.319494][ T7253] bond6: (slave wireguard1): making interface the new active one
[   70.322503][ T7253] wireguard1: entered promiscuous mode
[   70.325874][ T7253] bond6: (slave wireguard1): Enslaving as an active interface with an up link
[   70.331491][ T7253] netlink: 'syz.2.372': attribute type 1 has an invalid length.
[   70.358491][ T7268] ip6gre0: entered promiscuous mode
[   70.360572][ T7268] ip6gre0: entered allmulticast mode
[   70.375959][ T7256] netlink: 'syz.1.371': attribute type 13 has an invalid length.
[   70.384850][ T7256] netlink: 'syz.1.371': attribute type 17 has an invalid length.
[   70.413526][ T7256] 8021q: adding VLAN 0 to HW filter on device team0
[   70.416893][ T7256] batman_adv: batadv0: Interface activated: dummy0
[   70.419169][ T7256] batadv0: mtu less than device minimum
[   70.421483][ T7256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   70.425457][ T7256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   70.429287][ T7256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   70.433158][ T7256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   70.436824][ T7256] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   70.451586][ T7270] 8021q: VLANs not supported on vxcan1
[   70.480348][ T7277] netlink: 'syz.2.375': attribute type 10 has an invalid length.
[   70.484796][ T7277] bond0: (slave wlan1): Opening slave failed
[   70.567960][ T7286] netlink: 'syz.2.377': attribute type 1 has an invalid length.
[   70.580055][ T7286] gretap5: entered allmulticast mode
[   70.583049][ T7286] bond7: (slave gretap5): making interface the new active one
[   70.586362][ T7286] bond7: (slave gretap5): Enslaving as an active interface with an up link
[   70.818992][ T7305] veth5: entered allmulticast mode
[   71.148262][ T7315] netlink: 'syz.1.383': attribute type 4 has an invalid length.
[   71.206528][ T7317] team0: entered promiscuous mode
[   71.211182][ T7317] team0 (unregistering): left promiscuous mode
[   71.282558][ T7325] : left promiscuous mode
[   71.321793][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802efadc00: rx timeout, send abort
[   71.340613][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.414266][ T7331] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   71.437181][ T7331] bond0 (unregistering): Released all slaves
[   71.462990][ T7333] lo speed is unknown, defaulting to 1000
[   71.471984][ T7333] lo speed is unknown, defaulting to 1000
[   71.664974][ T7347] bond3: (slave ip6gretap4): Enslaving as a backup interface with an up link
[   71.669425][ T7347] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.700220][ T7347] veth3: entered promiscuous mode
[   71.704078][ T7347] bond3: (slave veth3): Enslaving as a backup interface with a down link
[   71.725605][ T7347] batman_adv: batadv0: Interface deactivated: dummy0
[   71.729449][ T7347] batman_adv: batadv0: Removing interface: dummy0
[   71.743092][ T7347] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   71.749955][ T7347] batman_adv: batadv0: Removing interface: ip6gretap2
[   71.759037][ T7347] bond3: (slave ip6gretap4): Removing an active aggregator
[   71.762691][ T7347] bond3: (slave ip6gretap4): Releasing backup interface
[   71.765609][ T7347] bond3: (slave ip6gretap4): the permanent HWaddr of slave - 72:46:b6:bd:98:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   71.774814][ T7347] bond3: (slave veth3): Releasing backup interface
[   71.788661][ T7350] lo speed is unknown, defaulting to 1000
[   71.794321][ T7350] lo speed is unknown, defaulting to 1000
[   71.835573][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802efadc00: abort rx timeout. Force session deactivation
[   72.119871][ T7390] 8021q: VLANs not supported on sit0
[   72.215486][ T7398] macvlan4: entered promiscuous mode
[   72.217619][ T7398] macvlan4: entered allmulticast mode
[   72.219983][ T7398] bond0: (slave macvlan4): Opening slave failed
[   72.339846][ T7405] gretap0: entered promiscuous mode
[   72.341845][ T7405] vlan3: entered promiscuous mode
[   72.742720][ T7436] gtp1: entered promiscuous mode
[   72.772975][ T7444] netlink: 'syz.1.418': attribute type 11 has an invalid length.
[   72.806409][ T7446] 8021q: adding VLAN 0 to HW filter on device bond4
[   72.822564][ T7449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.826335][ T7449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   72.907823][ T7449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.911772][ T7449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   72.928309][ T7455] pim6reg: entered allmulticast mode
[   72.930903][ T7455] pim6reg: left allmulticast mode
[   72.956598][ T7449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.960618][ T7449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.007693][ T7449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.011322][ T7449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   73.050161][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.052819][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   73.061870][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.064373][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   73.072037][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.075421][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   73.081641][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.095619][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   73.114549][ T7461] lo speed is unknown, defaulting to 1000
[   73.117316][ T7461] lo speed is unknown, defaulting to 1000
[   73.168992][ T7465] sit0: entered promiscuous mode
[   73.175913][ T7466] veth1_vlan: left promiscuous mode
[   73.177703][ T7466] veth1_vlan: entered promiscuous mode
[   73.179773][ T7466] veth1_vlan: entered allmulticast mode
[   73.254388][ T7471] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   73.283800][ T7474] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   73.289001][ T7474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.291964][ T7473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   73.301558][ T7474] syzkaller0: entered promiscuous mode
[   73.303864][ T7474] syzkaller0: entered allmulticast mode
[   73.313342][ T7472] tipc: Resetting bearer <eth:syzkaller0>
[   73.317162][ T7472] tipc: Disabling bearer <eth:syzkaller0>
[   73.635942][ T7492] syzkaller1: entered promiscuous mode
[   73.638237][ T7492] syzkaller1: entered allmulticast mode
[   73.744278][ T7496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.748318][ T7496] syzkaller0: entered promiscuous mode
[   73.750221][ T7496] syzkaller0: entered allmulticast mode
[   73.765868][ T7497] tipc: Resetting bearer <eth:syzkaller0>
[   73.770260][ T7497] tipc: Disabling bearer <eth:syzkaller0>
[   73.832170][ T7501] lo speed is unknown, defaulting to 1000
[   73.835212][ T7501] lo speed is unknown, defaulting to 1000
[   73.993351][   T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[   74.092206][ T7521] lo speed is unknown, defaulting to 1000
[   74.094748][ T7521] lo speed is unknown, defaulting to 1000
[   74.343263][ T7527] __nla_validate_parse: 38 callbacks suppressed
[   74.343280][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[   74.351993][ T7527] validate_nla: 9 callbacks suppressed
[   74.352008][ T7527] netlink: 'syz.2.439': attribute type 1 has an invalid length.
[   74.386926][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[   74.808277][ T7536] net_ratelimit: 16 callbacks suppressed
[   74.808288][ T7536] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   74.881049][ T7538] 8021q: adding VLAN 0 to HW filter on device bond5
[   74.887016][ T7538] team0: Port device bond5 added
[   74.940811][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'.
[   74.951210][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.444'.
[   75.235575][ T7553] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   75.319893][ T7565] ieee802154 phy0 wpan0: encryption failed: -22
[   75.328523][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[   75.453262][ T7575] lo speed is unknown, defaulting to 1000
[   75.457855][ T7575] lo speed is unknown, defaulting to 1000
[   75.692339][ T7582] netlink: 224 bytes leftover after parsing attributes in process `syz.1.456'.
[   75.700545][ T7582] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   75.708570][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'.
[   75.771037][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'.
[   76.052174][ T7596] syzkaller1: entered promiscuous mode
[   76.054323][ T7596] syzkaller1: entered allmulticast mode
[   76.068565][ T7595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.459'.
[   76.159998][ T7602] bond0: entered promiscuous mode
[   76.162341][ T7602] batadv0: entered promiscuous mode
[   76.164402][ T7602] debugfs: 'hsr1' already exists in 'hsr'
[   76.166409][ T7602] Cannot create hsr debugfs directory
[   76.168719][ T7602] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   76.172723][ T7602] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   76.178732][ T7602] hsr1: entered allmulticast mode
[   76.181006][ T7602] bond0: entered allmulticast mode
[   76.183205][ T7602] batadv0: entered allmulticast mode
[   76.186474][ T7602] 8021q: adding VLAN 0 to HW filter on device hsr1
[   76.190483][ T7602] bond0: left promiscuous mode
[   76.193125][ T7602] batadv0: left promiscuous mode
[   76.264552][ T7610] bond6 (unregistering): Released all slaves
[   76.269446][ T7613] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[   76.284530][ T7613] 8021q: adding VLAN 0 to HW filter on device bond8
[   76.293428][ T7613] 8021q: adding VLAN 0 to HW filter on device bond8
[   76.299418][ T7613] bond8: (slave vcan0): The slave device specified does not support setting the MAC address
[   76.304443][ T7613] bond8: (slave vcan0): Error -95 calling set_mac_address
[   76.346751][ T7615] macvlan4: entered promiscuous mode
[   76.349467][ T7615] macvlan4: entered allmulticast mode
[   76.352703][ T7615] bond8: entered promiscuous mode
[   76.356094][ T7615] 8021q: adding VLAN 0 to HW filter on device macvlan4
[   76.359853][ T7615] bond8: left promiscuous mode
[   76.505595][ T7621] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   76.508698][ T7621] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   76.893382][ T7626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   76.901460][ T7628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.904207][ T7628] IPv6: NLM_F_CREATE should be set when creating new route
[   76.945113][ T7639] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.469'.
[   77.053189][ T7647] 8021q: adding VLAN 0 to HW filter on device bond6
[   77.069961][ T7647] macvlan2: entered promiscuous mode
[   77.071706][ T7647] macvlan2: entered allmulticast mode
[   77.082360][ T7647] bond6: entered promiscuous mode
[   77.087124][ T7647] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.090200][ T7647] bond6: left promiscuous mode
[   77.115714][ T7658] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[   77.121624][ T7658] netlink: 'syz.0.475': attribute type 13 has an invalid length.
[   77.125231][ T7658] netlink: 'syz.0.475': attribute type 17 has an invalid length.
[   77.154362][ T7658] sit0: left promiscuous mode
[   77.192101][ T7658] 8021q: adding VLAN 0 to HW filter on device team0
[   77.196709][ T7658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.202469][ T7662] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   77.206557][ T7662] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   77.220752][ T7664] lo speed is unknown, defaulting to 1000
[   77.223086][ T7664] lo speed is unknown, defaulting to 1000
[   77.273789][ T7665] batman_adv: batadv0: Adding interface: ip6gretap2
[   77.279650][ T7665] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.299702][ T7665] batman_adv: batadv0: Interface activated: ip6gretap2
[   77.496546][ T7690] netlink: 'syz.1.482': attribute type 1 has an invalid length.
[   78.124218][ T7756] netlink: 'syz.0.494': attribute type 1 has an invalid length.
[   78.152462][ T7756] veth7: entered promiscuous mode
[   78.157849][ T7756] bond7: (slave veth7): Enslaving as a backup interface with a down link
[   78.362021][ T7767] netlink: 'syz.1.497': attribute type 21 has an invalid length.
[   78.369889][ T7767] netlink: 'syz.1.497': attribute type 21 has an invalid length.
[   78.369923][ T7588] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.376753][ T7588] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.380206][ T7588] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.383632][ T7588] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.429009][ T7769] bridge9: port 1(bond7) entered blocking state
[   78.431699][ T7769] bridge9: port 1(bond7) entered disabled state
[   78.434407][ T7769] bond7: entered allmulticast mode
[   78.518351][ T7777] vlan2: entered allmulticast mode
[   78.520621][ T7777] gretap0: entered allmulticast mode
[   78.928105][ T7794] tls_set_device_offload_rx: netdev not found
[   79.330463][ T7808] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.371563][ T7810] pim6reg1: entered promiscuous mode
[   79.373526][ T7810] pim6reg1: entered allmulticast mode
[   79.386229][ T7811] validate_nla: 4 callbacks suppressed
[   79.386242][ T7811] netlink: 'syz.0.509': attribute type 12 has an invalid length.
[   79.460446][ T7813] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.642342][ T7816] 8021q: adding VLAN 0 to HW filter on device bond8
[   79.649240][ T7816] team0: Port device bond8 added
[   79.717311][ T7829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   79.792251][ T7841] bond2: option mode: unable to set because the bond device is up
[   79.799960][ T7841] bond6: (slave wireguard1): Releasing backup interface
[   79.802198][ T7843] __nla_validate_parse: 17 callbacks suppressed
[   79.802206][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.518'.
[   79.805977][ T7841] wireguard1: left promiscuous mode
[   79.820773][ T7841] bond7: (slave gretap5): Releasing active interface
[   79.824538][ T7841] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   79.827383][ T7841] batman_adv: batadv0: Removing interface: ip6gretap2
[   79.839578][ T7839] lo speed is unknown, defaulting to 1000
[   79.842391][ T7839] lo speed is unknown, defaulting to 1000
[   79.935419][ T7848] ip6gre0: left promiscuous mode
[   79.937069][ T7848] ip6gre0: left allmulticast mode
[   79.946606][ T7848] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   79.948994][ T7848] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   79.951623][ T7848] xfrm1: left promiscuous mode
[   79.954214][ T7848] xfrm1: left allmulticast mode
[   79.956874][ T7848] vlan2: left promiscuous mode
[   79.958399][ T7848] vlan2: left allmulticast mode
[   79.960074][ T7848] hsr_slave_1: left allmulticast mode
[   79.962640][ T7848] bond6: left promiscuous mode
[   79.965377][ T7848] gretap5: left allmulticast mode
[   79.967154][ T7848] veth5: left allmulticast mode
[   79.974016][ T5897] lo speed is unknown, defaulting to 1000
[   79.976009][ T5897] syz1: Port: 1 Link DOWN
[   79.992419][ T7853] netlink: 'syz.0.521': attribute type 10 has an invalid length.
[   79.995466][ T7853] macvlan0: entered promiscuous mode
[   79.998666][ T7853] : (slave macvlan0): Enslaving as an active interface with an up link
[   80.033055][ T7858] vxcan3: entered allmulticast mode
[   80.093940][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[   80.098414][ T7866] netlink: 'syz.0.525': attribute type 1 has an invalid length.
[   80.109794][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'.
[   80.117624][ T7866] vlan3: entered allmulticast mode
[   80.119284][ T7866] bond8: entered allmulticast mode
[   80.184297][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[   80.214115][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.530'.
[   80.223535][ T7884] warn_alloc: 1 callbacks suppressed
[   80.223546][ T7884] syz.1.529: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[   80.225826][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'.
[   80.233953][ T7884] ,cpuset=/,mems_allowed=0-1
[   80.236472][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.1.529 Not tainted syzkaller #0 PREEMPT(full) 
[   80.236483][ T7884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.236488][ T7884] Call Trace:
[   80.236491][ T7884]  <TASK>
[   80.236494][ T7884]  dump_stack_lvl+0x189/0x250
[   80.236510][ T7884]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.236519][ T7884]  ? __pfx__printk+0x10/0x10
[   80.236528][ T7884]  ? lock_release+0x4b/0x3e0
[   80.236540][ T7884]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   80.236549][ T7884]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   80.236558][ T7884]  warn_alloc+0x214/0x310
[   80.236571][ T7884]  ? __pfx_warn_alloc+0x10/0x10
[   80.236582][ T7884]  ? __get_vm_area_node+0x28f/0x300
[   80.236592][ T7884]  ? xskq_create+0xbf/0x170
[   80.236603][ T7884]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   80.236619][ T7884]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   80.236629][ T7884]  ? xsk_setsockopt+0x502/0x8d0
[   80.236638][ T7884]  ? __kasan_kmalloc+0x93/0xb0
[   80.236648][ T7884]  vmalloc_user_noprof+0xad/0xf0
[   80.236687][ T7884]  ? xskq_create+0xbf/0x170
[   80.236697][ T7884]  xskq_create+0xbf/0x170
[   80.236707][ T7884]  xsk_init_queue+0xb0/0x110
[   80.236717][ T7884]  xsk_setsockopt+0x57b/0x8d0
[   80.236726][ T7884]  ? __pfx_xsk_setsockopt+0x10/0x10
[   80.236735][ T7884]  ? __pfx_aa_sk_perm+0x10/0x10
[   80.236745][ T7884]  ? lock_release+0x4b/0x3e0
[   80.236756][ T7884]  ? aa_sock_opt_perm+0xff/0x1b0
[   80.236763][ T7884]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   80.236772][ T7884]  ? __pfx_xsk_setsockopt+0x10/0x10
[   80.236781][ T7884]  do_sock_setsockopt+0x17c/0x1b0
[   80.236790][ T7884]  __x64_sys_setsockopt+0x13f/0x1b0
[   80.236798][ T7884]  do_syscall_64+0xfa/0x3b0
[   80.236807][ T7884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.236818][ T7884]  ? exc_page_fault+0x9f/0xf0
[   80.236834][ T7884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.236846][ T7884] RIP: 0033:0x7f782038ebe9
[   80.236856][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.236863][ T7884] RSP: 002b:00007f7821141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   80.236872][ T7884] RAX: ffffffffffffffda RBX: 00007f78205b6180 RCX: 00007f782038ebe9
[   80.236877][ T7884] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[   80.236882][ T7884] RBP: 00007f7820411e19 R08: 0000000000000004 R09: 0000000000000000
[   80.236888][ T7884] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   80.236896][ T7884] R13: 00007f78205b6218 R14: 00007f78205b6180 R15: 00007ffc8b1e6198
[   80.236908][ T7884]  </TASK>
[   80.236912][ T7884] Mem-Info:
[   80.335778][ T7884] active_anon:5252 inactive_anon:0 isolated_anon:0
[   80.335778][ T7884]  active_file:1323 inactive_file:38216 isolated_file:0
[   80.335778][ T7884]  unevictable:1768 dirty:24 writeback:0
[   80.335778][ T7884]  slab_reclaimable:10176 slab_unreclaimable:76571
[   80.335778][ T7884]  mapped:18265 shmem:2412 pagetables:973
[   80.335778][ T7884]  sec_pagetables:0 bounce:0
[   80.335778][ T7884]  kernel_misc_reclaimable:0
[   80.335778][ T7884]  free:270495 free_pcp:19969 free_cma:0
[   80.350737][ T7884] Node 0 active_anon:10516kB inactive_anon:0kB active_file:4260kB inactive_file:6328kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41504kB dirty:88kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8532kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   80.361710][ T7884] Node 1 active_anon:10492kB inactive_anon:0kB active_file:1032kB inactive_file:146536kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31556kB dirty:8kB writeback:0kB shmem:4656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3880kB pagetables:1560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   80.373190][ T7884] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   80.384691][ T7884] lowmem_reserve[]: 0 811 811 811 811
[   80.385163][ T7888] bridge5: port 1(veth9) entered blocking state
[   80.386714][ T7884] Node 0 DMA32 free:326792kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10516kB inactive_anon:0kB active_file:4260kB inactive_file:6328kB unevictable:3536kB writepending:88kB present:1556484kB managed:830920kB mlocked:0kB bounce:0kB free_pcp:47320kB local_pcp:27064kB free_cma:0kB
[   80.388919][ T7888] bridge5: port 1(veth9) entered disabled state
[   80.399963][ T7884] lowmem_reserve[]: 0 0 0 0 0
[   80.404899][ T7888] veth9: entered allmulticast mode
[   80.407708][ T7888] veth9: entered promiscuous mode
[   80.410953][ T7884] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   80.413295][ T7889] bridge5: port 2(veth0_to_bond) entered blocking state
[   80.421939][ T7884] lowmem_reserve[]: 0 0 854 854 854
[   80.426689][ T7884] Node 1 Normal free:281212kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10560kB inactive_anon:0kB active_file:1032kB inactive_file:146536kB unevictable:3536kB writepending:8kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32676kB local_pcp:17472kB free_cma:0kB
[   80.436418][ T7889] bridge5: port 2(veth0_to_bond) entered disabled state
[   80.439405][ T7884] lowmem_reserve[]: 0 0 0 0 0
[   80.441609][ T7889] veth0_to_bond: entered allmulticast mode
[   80.442881][ T7884] Node 0 DMA: 
[   80.448503][ T7889] veth0_to_bond: entered promiscuous mode
[   80.449239][ T7884] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   80.459059][ T7884] Node 0 DMA32: 998*4kB (UM) 418*8kB (UME) 186*16kB (UM) 32*32kB (UM) 25*64kB (UME) 16*128kB (UME) 10*256kB (UM) 12*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 72*4096kB (M) = 326792kB
[   80.472156][ T7884] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   80.478499][ T7884] Node 1 Normal: 368*4kB (UME) 331*8kB (UME) 249*16kB (UME) 119*32kB (UM) 110*64kB (UM) 39*128kB (UM) 23*256kB (UME) 9*512kB (UME) 7*1024kB (M) 3*2048kB (ME) 57*4096kB (M) = 281224kB
[   80.485620][ T7884] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   80.488835][ T7884] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   80.492071][ T7884] 41968 total pagecache pages
[   80.493690][ T7884] 0 pages in swap cache
[   80.495939][ T7884] Free swap  = 124996kB
[   80.508320][ T7884] Total swap = 124996kB
[   80.509982][ T7884] 786301 pages RAM
[   80.511553][ T7884] 0 pages HighMem/MovableOnly
[   80.513473][ T7884] 241339 pages reserved
[   80.515314][ T7884] 0 pages cma reserved
[   80.548481][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'.
[   80.556734][ T7900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.533'.
[   80.622971][ T7915] vlan2: entered allmulticast mode
[   80.641681][ T7917] netlink: 68 bytes leftover after parsing attributes in process `syz.1.537'.
[   80.654002][ T7918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.691934][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'.
[   80.695797][ T7923] hsr_slave_0: left promiscuous mode
[   80.698800][ T7923] hsr_slave_1: left promiscuous mode
[   81.252933][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.423836][ T7950] team0: entered promiscuous mode
[   81.425625][ T7950] team_slave_0: entered promiscuous mode
[   81.427483][ T7950] team_slave_1: entered promiscuous mode
[   81.429532][ T7950] dummy0: entered promiscuous mode
[   81.434523][ T7950] team0 (unregistering): left promiscuous mode
[   81.441842][ T7950] team_slave_0: left promiscuous mode
[   81.460654][ T7950] team_slave_1: left promiscuous mode
[   81.462706][ T7950] dummy0: left promiscuous mode
[   81.467167][ T7950] team0 (unregistering): Port device team_slave_0 removed
[   81.470628][ T7950] team0 (unregistering): Port device team_slave_1 removed
[   81.474541][ T7950] team0 (unregistering): Port device dummy0 removed
[   81.563601][ T7969] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[   81.567281][ T3148] cfg80211: failed to load regulatory.db
[   81.574242][ T7969] 8021q: adding VLAN 0 to HW filter on device bond9
[   81.589613][ T7969] 8021q: adding VLAN 0 to HW filter on device bond9
[   81.595420][ T7969] bond9: (slave vcan0): The slave device specified does not support setting the MAC address
[   81.599863][ T7969] bond9: (slave vcan0): Error -95 calling set_mac_address
[   81.690387][ T7975] netlink: 'syz.1.548': attribute type 10 has an invalid length.
[   81.693187][ T7975] netlink: 'syz.1.548': attribute type 10 has an invalid length.
[   81.696749][ T7975] netlink: 'syz.1.548': attribute type 10 has an invalid length.
[   81.734809][ T2285] tipc: Node number set to 1918680201
[   81.793107][ T7981] vlan3: entered promiscuous mode
[   81.821124][ T7981] batadv0: entered promiscuous mode
[   81.823496][ T7981] batadv0: left promiscuous mode
[   81.856803][ T7984] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   81.907468][ T7986] lo speed is unknown, defaulting to 1000
[   81.910511][ T7986] lo speed is unknown, defaulting to 1000
[   82.220115][ T8002] bridge_slave_0: entered promiscuous mode
[   82.490072][ T8006] ieee802154 phy0 wpan0: encryption failed: -22
[   82.556002][ T8006] lo speed is unknown, defaulting to 1000
[   82.558826][ T8006] lo speed is unknown, defaulting to 1000
[   82.688354][ T8011] netlink: 'syz.2.559': attribute type 10 has an invalid length.
[   82.691721][ T8010] netlink: 'syz.2.559': attribute type 10 has an invalid length.
[   82.732165][ T8018] netlink: 'syz.2.561': attribute type 4 has an invalid length.
[   82.797290][ T8022] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   82.826173][ T8023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.843630][ T8025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   82.849362][ T8025] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   82.852285][ T8025] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   83.124814][ T8043] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   83.196461][ T8048] 8021q: adding VLAN 0 to HW filter on device bond10
[   83.202329][ T8048] vlan0: entered promiscuous mode
[   83.204047][ T8048] bond10: entered promiscuous mode
[   83.205869][ T8048] vlan0: entered allmulticast mode
[   83.207492][ T8048] bond10: entered allmulticast mode
[   83.247385][ T8052] lo speed is unknown, defaulting to 1000
[   83.249707][ T8052] lo speed is unknown, defaulting to 1000
[   83.668147][ T8073] 8021q: adding VLAN 0 to HW filter on device bond9
[   83.681981][ T8073] 8021q: adding VLAN 0 to HW filter on device bond9
[   83.684479][ T8073] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[   83.688607][ T8073] bond9: (slave vxcan3): Error -95 calling set_mac_address
[   83.729346][ T4865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.732472][ T4865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.863907][ T8097] bond10: entered promiscuous mode
[   83.876150][ T8098] pim6reg99999999: entered allmulticast mode
[   83.946357][ T4865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.949884][ T4865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.962955][ T8109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.969411][ T8109] syzkaller0: entered promiscuous mode
[   83.971914][ T8109] syzkaller0: entered allmulticast mode
[   83.989678][ T8109] tipc: Resetting bearer <eth:syzkaller0>
[   83.994444][ T8106] tipc: Resetting bearer <eth:syzkaller0>
[   84.000068][ T8106] tipc: Disabling bearer <eth:syzkaller0>
[   84.155759][ T8127] 8021q: adding VLAN 0 to HW filter on device bond11
[   84.174398][ T8129] bond11: (slave gretap2): making interface the new active one
[   84.178335][ T8129] bond11: (slave gretap2): Enslaving as an active interface with an up link
[   84.181960][ T8136] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   84.271711][ T8143] : entered promiscuous mode
[   84.309072][ T8145] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.317090][ T8145] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   84.369644][ T8145] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.372684][ T8145] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   84.391093][ T8161] 8021q: adding VLAN 0 to HW filter on device bond12
[   84.418281][ T8145] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.422232][ T8145] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   84.442894][ T8167] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   84.467287][ T8145] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.471990][ T8145] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   84.518594][ T8172] validate_nla: 9 callbacks suppressed
[   84.518605][ T8172] netlink: 'syz.1.591': attribute type 1 has an invalid length.
[   84.526783][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.530433][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   84.542377][ T8172] 8021q: adding VLAN 0 to HW filter on device bond13
[   84.548071][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.550666][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   84.553257][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.556284][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   84.560295][ T8172] bond13: (slave wlan0): Enslaving as an active interface with a down link
[   84.572550][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.584763][ T5877] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   84.803708][ T8219] lo speed is unknown, defaulting to 1000
[   84.807050][ T8219] lo speed is unknown, defaulting to 1000
[   84.843837][ T8224] __nla_validate_parse: 83 callbacks suppressed
[   84.843854][ T8224] netlink: 228 bytes leftover after parsing attributes in process `syz.0.596'.
[   84.967955][ T8222] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.597'.
[   85.024051][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'.
[   85.036551][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'.
[   85.042937][ T8235] syzkaller0: MTU too low for tipc bearer
[   85.045570][ T8235] tipc: Disabling bearer <eth:syzkaller0>
[   85.109815][ T8240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'.
[   85.166202][ T8240] syzkaller0: entered promiscuous mode
[   85.168423][ T8240] syzkaller0: entered allmulticast mode
[   85.234027][ T7588] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.237467][ T7588] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.242343][ T7588] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.246037][ T7588] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.041779][ T8262] bond13: (slave wlan0): Releasing active interface
[   86.047362][ T8262] team0: Port device bond5 removed
[   86.049849][ T8262] bond7: left allmulticast mode
[   86.051899][ T8262] bridge9: port 1(bond7) entered disabled state
[   86.057920][ T8262] team0: Port device bond8 removed
[   86.068543][ T8262] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   86.074991][ T8263] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   86.102999][ T8265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.607'.
[   86.111863][ T8265] openvswitch: netlink: Flow actions attr not present in new flow.
[   86.123427][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.607'.
[   86.317316][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'.
[   86.494897][ T8280] macvtap0: entered promiscuous mode
[   86.496625][ T8280] macvtap0: entered allmulticast mode
[   86.521908][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'.
[   86.529259][ T5858] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.531919][ T5858] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.534831][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'.
[   86.535982][ T5858] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.541273][ T5858] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.569895][ T8289] syz_tun: entered promiscuous mode
[   87.452793][ T8311] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.492694][ T8314] syz_tun: left promiscuous mode
[   87.505013][ T8314] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   87.507492][ T8314] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   87.513672][ T8314] macvtap0: left promiscuous mode
[   87.516564][ T8314] macvtap0: left allmulticast mode
[   87.520272][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.523099][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.526877][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.529869][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   87.657657][ T8327] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.664872][ T8327] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   87.667742][ T8327] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   87.685001][ T8326] bridge_slave_1: left allmulticast mode
[   87.686825][ T8326] bridge_slave_1: left promiscuous mode
[   87.688672][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.692229][ T8326] bridge_slave_0: left allmulticast mode
[   87.694453][ T8326] bridge_slave_0: left promiscuous mode
[   87.698221][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.915902][ T8345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.947319][ T8352] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.953976][ T8354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.008207][ T8361] ipvlan1: mtu less than device minimum
[   88.051971][ T8358] netlink: 'syz.0.636': attribute type 10 has an invalid length.
[   88.212974][ T8377] syzkaller0: entered promiscuous mode
[   88.215411][ T8377] syzkaller0: entered allmulticast mode
[   88.271759][ T8381] sctp: [Deprecated]: syz.0.642 (pid 8381) Use of int in max_burst socket option.
[   88.271759][ T8381] Use struct sctp_assoc_value instead
[   88.541167][ T8400] batadv_slave_0: left promiscuous mode
[   88.547734][ T8400] macvlan0: left promiscuous mode
[   88.562517][ T8400] veth5: left promiscuous mode
[   88.565991][ T8400] vlan1: left promiscuous mode
[   88.568792][ T8400] geneve3: left promiscuous mode
[   88.570776][ T8400] geneve3: left allmulticast mode
[   88.577253][ T8400] xfrm1: left promiscuous mode
[   88.579197][ T8400] xfrm1: left allmulticast mode
[   88.582153][ T8400] veth7: left promiscuous mode
[   88.588569][ T8400] bond10: left promiscuous mode
[   88.595879][    T9] lo speed is unknown, defaulting to 1000
[   88.598304][    T9] syz0: Port: 1 Link DOWN
[   88.598328][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.603319][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   88.607238][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.611832][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   88.615850][    T9] lo speed is unknown, defaulting to 1000
[   88.618180][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.621552][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   88.626544][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.629878][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   88.683178][ T8404] netlink: 'syz.0.650': attribute type 10 has an invalid length.
[   88.686342][ T8406] netlink: 'syz.0.650': attribute type 10 has an invalid length.
[   88.689470][ T8406] dummy0: entered promiscuous mode
[   88.691523][ T8406] dummy0: entered allmulticast mode
[   88.696996][ T8406] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   88.703445][ T8404] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   88.786333][ T8411] netlink: 'syz.0.652': attribute type 1 has an invalid length.
[   88.995598][ T8432] bond5: option mode: unable to set because the bond device has slaves
[   89.000095][ T8432] veth0_to_bond: left allmulticast mode
[   89.002061][ T8432] veth0_to_bond: left promiscuous mode
[   89.004069][ T8432] bridge5: port 2(veth0_to_bond) entered disabled state
[   89.009430][ T8432] : (slave bond_slave_0): Releasing backup interface
[   89.013242][ T8432] : (slave bond_slave_1): Releasing backup interface
[   89.017019][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.020718][ T8432] : (slave macvlan0): Releasing backup interface
[   89.026422][ T8432] bond0: (slave vti0): Releasing backup interface
[   89.029161][ T8432] bond1: (slave ip6gretap0): Removing an active aggregator
[   89.032429][ T8432] bond1: (slave ip6gretap0): Releasing backup interface
[   89.035917][ T8432] bond1: (slave ip6gretap0): the permanent HWaddr of slave - 2e:8b:a1:ad:f1:4c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   89.041956][ T8432] bond1: (slave veth5): Releasing backup interface
[   89.045544][ T8432] bond2: (slave gretap1): Releasing active interface
[   89.047650][ T8432] gretap1: left allmulticast mode
[   89.050121][ T8432] bond5: (slave ip6gretap1): Releasing active interface
[   89.053687][ T8432] bond6: (slave bridge4): Releasing active interface
[   89.057714][ T8432] bond7: (slave veth7): Releasing backup interface
[   89.060862][ T8432] veth9: left allmulticast mode
[   89.062779][ T8432] veth9: left promiscuous mode
[   89.064865][ T8432] bridge5: port 1(veth9) entered disabled state
[   89.068471][ T8432] bond11: (slave gretap2): Releasing active interface
[   89.104396][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.108319][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.162336][ T8444] netlink: 'syz.0.657': attribute type 10 has an invalid length.
[   89.167023][ T8444] dummy0: left promiscuous mode
[   89.168892][ T8444] dummy0: left allmulticast mode
[   89.228312][ T8447] netlink: 'syz.2.660': attribute type 7 has an invalid length.
[   89.230898][ T8447] netlink: 'syz.2.660': attribute type 3 has an invalid length.
[   89.234532][ T8447] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   89.292611][ T8449] netlink: 'syz.2.661': attribute type 1 has an invalid length.
[   89.318525][ T8449] 8021q: adding VLAN 0 to HW filter on device bond9
[   89.342228][ T8454] netlink: 'syz.2.662': attribute type 39 has an invalid length.
[   89.466266][ T8456] 8021q: adding VLAN 0 to HW filter on device bond10
[   89.475125][ T8456] bond10: (slave wlan0): Enslaving as an active interface with a down link
[   89.482142][ T8456] vlan3: entered allmulticast mode
[   89.484265][ T8456] veth1: entered allmulticast mode
[   89.487241][ T8456] bond10: (slave vlan3): Opening slave failed
[   89.595796][ T8460] pim6reg1: entered promiscuous mode
[   89.597922][ T8460] pim6reg1: entered allmulticast mode
[   89.779461][ T8477] validate_nla: 33 callbacks suppressed
[   89.779473][ T8477] netlink: 'syz.1.669': attribute type 4 has an invalid length.
[   89.786774][ T8477] netlink: 'syz.1.669': attribute type 4 has an invalid length.
[   89.870090][ T8483] __nla_validate_parse: 20 callbacks suppressed
[   89.870104][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'.
[   89.914135][ T8485] lo speed is unknown, defaulting to 1000
[   89.917198][ T8485] lo speed is unknown, defaulting to 1000
[   89.965395][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'.
[   89.969007][ T8486] netlink: 360 bytes leftover after parsing attributes in process `syz.1.672'.
[   89.974699][ T8489] netlink: 48 bytes leftover after parsing attributes in process `syz.0.673'.
[   89.982358][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'.
[   89.996022][ T8489] hsr_slave_1 (unregistering): left promiscuous mode
[   90.007133][ T8487] lo speed is unknown, defaulting to 1000
[   90.010403][ T8487] lo speed is unknown, defaulting to 1000
[   90.161952][ T8493] syzkaller0: entered promiscuous mode
[   90.164236][ T8493] syzkaller0: entered allmulticast mode
[   90.168624][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.675'.
[   90.235972][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'.
[   90.251947][ T2263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.254781][ T2263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.349954][ T8512] netlink: 'syz.1.678': attribute type 1 has an invalid length.
[   90.352284][ T8512] netlink: 15 bytes leftover after parsing attributes in process `syz.1.678'.
[   90.357328][ T8512] netlink: 'syz.1.678': attribute type 1 has an invalid length.
[   90.359718][ T8512] netlink: 15 bytes leftover after parsing attributes in process `syz.1.678'.
[   90.462322][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.680'.
[   90.584786][ T8523] nbd: socks must be embedded in a SOCK_ITEM attr
[   90.587369][ T8523] block nbd0: shutting down sockets
[   90.606864][ T8525] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   90.664205][ T8527] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   90.668256][ T8528] bond10: (slave wlan0): Releasing active interface
[   90.675495][ T8528] netlink: 'syz.2.682': attribute type 10 has an invalid length.
[   90.678847][ T8528] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   90.684292][ T8528] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.689211][ T8528] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.847167][ T8537] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[   90.932239][ T8537] sctp: [Deprecated]: syz.1.686 (pid 8537) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.932239][ T8537] Use struct sctp_sack_info instead
[   91.016297][ T8540] netlink: 'syz.1.687': attribute type 32 has an invalid length.
[   91.018878][ T8540] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   91.102863][ T8545] 8021q: adding VLAN 0 to HW filter on device bond15
[   91.230346][ T8556] netlink: 'syz.0.692': attribute type 1 has an invalid length.
[   91.435300][ T8565] netlink: 'syz.0.693': attribute type 1 has an invalid length.
[   91.725287][ T8567] netlink: 'syz.1.694': attribute type 4 has an invalid length.
[   91.730780][ T8567] netlink: 'syz.1.694': attribute type 4 has an invalid length.
[   91.936308][ T8585] siw: device registration error -23
[   91.979509][ T8595] vlan1: entered allmulticast mode
[   91.981424][ T8595] bridge_slave_0: entered allmulticast mode
[   92.033277][ T8600] sctp: [Deprecated]: syz.1.702 (pid 8600) Use of int in max_burst socket option.
[   92.033277][ T8600] Use struct sctp_assoc_value instead
[   92.038263][ T8599] sctp: [Deprecated]: syz.1.702 (pid 8599) Use of int in max_burst socket option.
[   92.038263][ T8599] Use struct sctp_assoc_value instead
[   92.126736][ T8608] TC_ACT_REPEAT abuse ?
[   92.128375][    C0] TC_ACT_REPEAT abuse ?
[   92.182360][ T2285] lo speed is unknown, defaulting to 1000
[   92.185256][ T2285] syz0: Port: 1 Link ACTIVE
[   92.187194][ T2285] lo speed is unknown, defaulting to 1000
[   92.303687][ T8623] syz.0.708 uses old SIOCAX25GETINFO
[   92.409002][ T8627] lo speed is unknown, defaulting to 1000
[   92.411653][ T8627] lo speed is unknown, defaulting to 1000
[   92.498012][ T8632] bond0: Unable to set down delay as MII monitoring is disabled
[   93.017526][ T8655] TC_ACT_REPEAT abuse ?
[   93.019453][    C0] TC_ACT_REPEAT abuse ?
[   93.186823][ T8681] tap2: tun_chr_ioctl cmd 1074025677
[   93.188872][ T8681] tap2: linktype set to 0
[   93.238632][ T8691] syzkaller0: entered promiscuous mode
[   93.241056][ T8691] syzkaller0: entered allmulticast mode
[   93.247751][ T8691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.256421][ T8693] : renamed from bond_slave_0
[   93.306796][ T8697] 8021q: adding VLAN 0 to HW filter on device bond17
[   93.313041][ T8696] lo speed is unknown, defaulting to 1000
[   93.318335][ T8697] macvlan0: entered promiscuous mode
[   93.320338][ T8697] macvlan0: entered allmulticast mode
[   93.322784][ T8697] bond17: entered promiscuous mode
[   93.324945][ T8697] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   93.327732][ T8697] bond17: left promiscuous mode
[   93.332094][ T8696] lo speed is unknown, defaulting to 1000
[   93.415017][ T8704] 8021q: adding VLAN 0 to HW filter on device bond18
[   93.585512][ T8723] IPVS: persistence engine module ip_vs_pe_ not found
[   93.589454][ T8723] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0
[   94.089259][ T8771] lo speed is unknown, defaulting to 1000
[   94.092573][ T8771] lo speed is unknown, defaulting to 1000
[   94.581172][ T8802] bond15: option mode: unable to set because the bond device is up
[   94.709078][ T8805] lo speed is unknown, defaulting to 1000
[   94.716116][ T8805] lo speed is unknown, defaulting to 1000
[   94.790788][ T8820] validate_nla: 15 callbacks suppressed
[   94.790800][ T8820] netlink: 'syz.1.757': attribute type 10 has an invalid length.
[   94.805810][ T8820] team0: Device dummy0 failed to register rx_handler
[   94.896941][ T8824] netlink: 'syz.0.758': attribute type 21 has an invalid length.
[   94.913243][ T8824] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   94.917420][ T8824] __nla_validate_parse: 37 callbacks suppressed
[   94.917437][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'.
[   94.997683][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'.
[   95.053018][ T8831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'.
[   95.125735][ T8835] netlink: 'syz.2.761': attribute type 10 has an invalid length.
[   95.128773][ T8835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.761'.
[   95.132331][ T8835] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   95.326135][ T8848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.330578][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'.
[   95.447925][ T8859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'.
[   95.451541][ T8859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'.
[   95.456107][ T8859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'.
[   95.460020][ T8859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'.
[   95.463666][ T8859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'.
[   95.477269][ T8862] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[   95.480767][ T8862] netlink: 'syz.0.766': attribute type 4 has an invalid length.
[   95.531828][ T8864] netlink: 'syz.0.767': attribute type 15 has an invalid length.
[   95.536491][ T8866] tap2: tun_chr_ioctl cmd 1074025677
[   95.541978][ T8866] tap2: linktype set to 0
[   95.595011][ T8872] syzkaller0: MTU too low for tipc bearer
[   95.597077][ T8872] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.628794][ T8879] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   95.633605][ T8880] netlink: 'syz.1.772': attribute type 1 has an invalid length.
[   95.648936][ T8880] 8021q: adding VLAN 0 to HW filter on device bond19
[   95.673822][ T8886] netlink: 'syz.1.774': attribute type 2 has an invalid length.
[   95.677997][ T8886] netlink: 'syz.1.774': attribute type 1 has an invalid length.
[   95.685393][ T8886] pimreg3: entered allmulticast mode
[   95.688219][ T8886] netlink: 'syz.1.774': attribute type 2 has an invalid length.
[   95.694991][ T8887] : (slave dummy0): Enslaving as an active interface with an up link
[   95.746020][ T8898] syzkaller1: entered promiscuous mode
[   95.748210][ T8898] syzkaller1: entered allmulticast mode
[   95.830234][ T8910] : (slave dummy0): Releasing backup interface
[   95.897692][ T8919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.986093][ T8932] sctp: [Deprecated]: syz.2.785 (pid 8932) Use of int in maxseg socket option.
[   95.986093][ T8932] Use struct sctp_assoc_value instead
[   96.044125][ T8932] vlan3: entered promiscuous mode
[   96.049848][ T8932] bridge0: entered promiscuous mode
[   96.266858][ T8946] bond11: entered promiscuous mode
[   96.268749][ T8946] 8021q: adding VLAN 0 to HW filter on device bond11
[   96.301083][ T8948] delete_channel: no stack
[   96.377651][   T24] lo speed is unknown, defaulting to 1000
[   96.381788][   T24] syz1: Port: 1 Link ACTIVE
[   96.553566][ T8959] syzkaller1: entered promiscuous mode
[   96.556019][ T8959] syzkaller1: entered allmulticast mode
[   96.671749][ T8966] nbd: must specify a size in bytes for the device
[   96.699238][ T8966] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   96.702257][ T8966] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   96.706977][ T8966] tipc: Resetting bearer <eth:syzkaller0>
[   96.910723][ T8982] 8021q: adding VLAN 0 to HW filter on device team0
[   96.917353][ T8982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.970226][ T8989] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.973884][ T8989] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   96.977142][ T8989] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   96.986547][ T8989] tipc: Resetting bearer <eth:syzkaller0>
[   96.991096][ T8989] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   96.994368][ T8989] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   97.099508][ T9004] syzkaller1: entered promiscuous mode
[   97.101778][ T9004] syzkaller1: entered allmulticast mode
[   97.127365][ T8991] TC_ACT_REPEAT abuse ?
[   97.301748][ T9012] 8021q: adding VLAN 0 to HW filter on device bond12
[   97.316352][ T9012] bond12: (slave geneve4): making interface the new active one
[   97.321421][ T9012] bond12: (slave geneve4): Enslaving as an active interface with an up link
[   97.328751][ T7588] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.339089][ T9012] syz.2.809 (9012) used greatest stack depth: 18792 bytes left
[   97.342320][ T7588] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.351035][ T7588] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.357885][ T7588] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.556798][ T9029] veth5: entered promiscuous mode
[   98.008947][ T9076] 8021q: adding VLAN 0 to HW filter on device 
[   98.046116][ T9076] net_ratelimit: 1 callbacks suppressed
[   98.046121][ T9076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.131449][ T9078] bridge_slave_0: left promiscuous mode
[   98.142805][ T9078] hsr1: left promiscuous mode
[   98.144437][ T9078] hsr1: left allmulticast mode
[   98.147117][ T9078] dummy0: left allmulticast mode
[   98.150125][ T9078] veth3: left promiscuous mode
[   98.152493][ T9078] gtp1: left promiscuous mode
[   98.157643][ T9078] syzkaller0: left promiscuous mode
[   98.159400][ T9078] syzkaller0: left allmulticast mode
[   98.162885][ T9078] vlan2: left allmulticast mode
[   98.166719][ T9078] bond0: left allmulticast mode
[   98.168421][ T9078] vlan0: left promiscuous mode
[   98.169935][ T9078] bond10: left promiscuous mode
[   98.172030][ T9078] vlan0: left allmulticast mode
[   98.174111][ T9078] bond10: left allmulticast mode
[   98.961122][ T9110] tipc: Resetting bearer <eth:syzkaller0>
[   99.049121][ T9119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.058799][ T9119] syzkaller0: entered promiscuous mode
[   99.062906][ T9119] syzkaller0: entered allmulticast mode
[   99.066062][ T9123] openvswitch: netlink: IP tunnel TTL not specified.
[   99.073460][ T9119] tipc: Resetting bearer <eth:syzkaller0>
[   99.094519][ T9118] tipc: Resetting bearer <eth:syzkaller0>
[   99.105922][ T9118] tipc: Disabling bearer <eth:syzkaller0>
[   99.163129][ T9131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.212422][ T9135] vlan1: entered allmulticast mode
[   99.214549][ T9135] batadv0: entered allmulticast mode
[   99.241347][ T9137] bond0: entered promiscuous mode
[   99.244095][ T9137] batadv0: entered promiscuous mode
[   99.251328][ T9137] debugfs: 'hsr1' already exists in 'hsr'
[   99.253605][ T9137] Cannot create hsr debugfs directory
[   99.266917][ T9137] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   99.270716][ T9137] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   99.276249][ T9137] hsr1: entered allmulticast mode
[   99.279098][ T9137] 8021q: adding VLAN 0 to HW filter on device hsr1
[   99.288861][ T9137] bond0: left promiscuous mode
[   99.300439][ T9137] batadv0: left promiscuous mode
[   99.467315][ T9161] 8021q: adding VLAN 0 to HW filter on device bond20
[   99.484106][ T9161] ipvlan0: entered allmulticast mode
[   99.487113][ T9161] bond20: entered allmulticast mode
[   99.500988][ T9161] bond20: (slave gretap4): making interface the new active one
[   99.504055][ T9161] gretap4: entered allmulticast mode
[   99.511233][ T9161] bond20: (slave gretap4): Enslaving as an active interface with an up link
[   99.556435][ T9171] syzkaller1: entered promiscuous mode
[   99.560895][ T9171] syzkaller1: entered allmulticast mode
[   99.604558][ T9175] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   99.608093][ T9175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.780152][ T9189] 8021q: adding VLAN 0 to HW filter on device bond21
[   99.800369][ T9194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.824690][ T9200] validate_nla: 20 callbacks suppressed
[   99.824706][ T9200] netlink: 'syz.1.850': attribute type 1 has an invalid length.
[   99.825576][ T9199] netlink: 'syz.1.850': attribute type 1 has an invalid length.
[   99.851798][ T2285] lo speed is unknown, defaulting to 1000
[   99.854075][ T2285] syz0: Port: 1 Link DOWN
[   99.873706][ T2285] lo speed is unknown, defaulting to 1000
[   99.882350][ T9203] ip6gre1: entered allmulticast mode
[   99.882591][ T9199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   99.904091][ T9200] 8021q: adding VLAN 0 to HW filter on device bond22
[   99.952379][ T9209] __nla_validate_parse: 87 callbacks suppressed
[   99.952394][ T9209] netlink: 52 bytes leftover after parsing attributes in process `syz.0.854'.
[   99.956761][ T9212] 8021q: adding VLAN 0 to HW filter on device bond13
[   99.959245][ T9209] netlink: 'syz.0.854': attribute type 1 has an invalid length.
[   99.966575][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.855'.
[   99.989365][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.855'.
[   99.996099][ T9215] bond0: (slave rose0): Error: Device can not be enslaved while up
[  100.035124][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'.
[  100.085423][ T9222] netlink: 'syz.0.858': attribute type 83 has an invalid length.
[  100.125577][ T9234] netlink: 56 bytes leftover after parsing attributes in process `syz.1.860'.
[  100.190176][ T9240] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  100.285275][ T9250] lo speed is unknown, defaulting to 1000
[  100.292033][ T9250] lo speed is unknown, defaulting to 1000
[  100.292292][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'.
[  100.298011][ T9253] netlink: 'syz.2.865': attribute type 5 has an invalid length.
[  100.300916][ T9253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.865'.
[  100.311497][ T9253] geneve5: entered promiscuous mode
[  100.313535][ T9253] geneve5: entered allmulticast mode
[  100.316835][ T5877] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  100.321909][ T5877] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  100.331081][ T5877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  100.339996][ T5877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  100.343474][ T9254] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.864'.
[  100.492185][ T9265] ==================================================================
[  100.494935][ T9265] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  100.497663][ T9265] Read of size 1 at addr ffff88802ecc0c30 by task syz.1.868/9265
[  100.501650][ T9265] 
[  100.502632][ T9265] CPU: 1 UID: 0 PID: 9265 Comm: syz.1.868 Not tainted syzkaller #0 PREEMPT(full) 
[  100.502652][ T9265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.502662][ T9265] Call Trace:
[  100.502670][ T9265]  <TASK>
[  100.502678][ T9265]  dump_stack_lvl+0x189/0x250
[  100.502703][ T9265]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.502722][ T9265]  ? lock_release+0x4b/0x3e0
[  100.502747][ T9265]  ? __virt_addr_valid+0x4a5/0x5c0
[  100.502768][ T9265]  print_report+0xca/0x240
[  100.502783][ T9265]  ? __xfrm_state_insert+0x8af/0x1450
[  100.502798][ T9265]  kasan_report+0x118/0x150
[  100.502822][ T9265]  ? __xfrm_state_insert+0x8af/0x1450
[  100.502849][ T9265]  __xfrm_state_insert+0x8af/0x1450
[  100.502871][ T9265]  xfrm_state_insert+0x54/0x60
[  100.502886][ T9265]  ipcomp6_init_state+0x655/0x900
[  100.502904][ T9265]  __xfrm_init_state+0xa76/0x13f0
[  100.502923][ T9265]  ? __xfrm_init_state+0x7ef/0x13f0
[  100.502942][ T9265]  xfrm_init_state+0x18/0xa0
[  100.502957][ T9265]  pfkey_add+0x1d38/0x2e00
[  100.502978][ T9265]  ? __pfx_pfkey_add+0x10/0x10
[  100.502991][ T9265]  ? kmem_cache_free+0x18f/0x400
[  100.503015][ T9265]  pfkey_sendmsg+0xbfe/0x1090
[  100.503034][ T9265]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  100.503055][ T9265]  ? aa_sock_msg_perm+0xf1/0x1d0
[  100.503069][ T9265]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  100.503086][ T9265]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  100.503103][ T9265]  __sock_sendmsg+0x21c/0x270
[  100.503154][ T9265]  ____sys_sendmsg+0x505/0x830
[  100.503174][ T9265]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.503193][ T9265]  ? import_iovec+0x74/0xa0
[  100.503212][ T9265]  ___sys_sendmsg+0x21f/0x2a0
[  100.503228][ T9265]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.503245][ T9265]  ? futex_wake+0x4b2/0x560
[  100.503275][ T9265]  ? __fget_files+0x2a/0x420
[  100.503288][ T9265]  ? __fget_files+0x3a0/0x420
[  100.503304][ T9265]  __x64_sys_sendmsg+0x19b/0x260
[  100.503320][ T9265]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  100.503339][ T9265]  ? rcu_is_watching+0x15/0xb0
[  100.503354][ T9265]  ? rcu_is_watching+0x15/0xb0
[  100.503369][ T9265]  do_syscall_64+0xfa/0x3b0
[  100.503383][ T9265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.503397][ T9265]  ? exc_page_fault+0x9f/0xf0
[  100.503419][ T9265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.503434][ T9265] RIP: 0033:0x7f782038ebe9
[  100.503449][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.503463][ T9265] RSP: 002b:00007f7821162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.503479][ T9265] RAX: ffffffffffffffda RBX: 00007f78205b6090 RCX: 00007f782038ebe9
[  100.503490][ T9265] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  100.503499][ T9265] RBP: 00007f7820411e19 R08: 0000000000000000 R09: 0000000000000000
[  100.503509][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.503518][ T9265] R13: 00007f78205b6128 R14: 00007f78205b6090 R15: 00007ffc8b1e6198
[  100.503535][ T9265]  </TASK>
[  100.503541][ T9265] 
[  100.614557][ T9265] Allocated by task 7177:
[  100.616343][ T9265]  kasan_save_track+0x3e/0x80
[  100.618281][ T9265]  __kasan_slab_alloc+0x6c/0x80
[  100.620281][ T9265]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  100.622473][ T9265]  xfrm_state_alloc+0x24/0x2f0
[  100.624431][ T9265]  __find_acq_core+0x8a7/0x1c00
[  100.626418][ T9265]  xfrm_find_acq+0x78/0xa0
[  100.628246][ T9265]  xfrm_alloc_userspi+0x6b3/0xc90
[  100.630326][ T9265]  xfrm_user_rcv_msg+0x7a3/0xab0
[  100.632304][ T9265]  netlink_rcv_skb+0x208/0x470
[  100.634373][ T9265]  xfrm_netlink_rcv+0x79/0x90
[  100.636324][ T9265]  netlink_unicast+0x82f/0x9e0
[  100.638251][ T9265]  netlink_sendmsg+0x805/0xb30
[  100.640087][ T9265]  __sock_sendmsg+0x21c/0x270
[  100.641934][ T9265]  ____sys_sendmsg+0x505/0x830
[  100.643812][ T9265]  ___sys_sendmsg+0x21f/0x2a0
[  100.645646][ T9265]  __x64_sys_sendmsg+0x19b/0x260
[  100.647633][ T9265]  do_syscall_64+0xfa/0x3b0
[  100.649254][ T9265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.651563][ T9265] 
[  100.652510][ T9265] Freed by task 3148:
[  100.654055][ T9265]  kasan_save_track+0x3e/0x80
[  100.655919][ T9265]  kasan_save_free_info+0x46/0x50
[  100.657910][ T9265]  __kasan_slab_free+0x5b/0x80
[  100.659790][ T9265]  kmem_cache_free+0x18f/0x400
[  100.661643][ T9265]  xfrm_state_gc_task+0x52d/0x6b0
[  100.663548][ T9265]  process_scheduled_works+0xae1/0x17b0
[  100.665704][ T9265]  worker_thread+0x8a0/0xda0
[  100.667476][ T9265]  kthread+0x711/0x8a0
[  100.669052][ T9265]  ret_from_fork+0x3fc/0x770
[  100.670861][ T9265]  ret_from_fork_asm+0x1a/0x30
[  100.672749][ T9265] 
[  100.673702][ T9265] The buggy address belongs to the object at ffff88802ecc0900
[  100.673702][ T9265]  which belongs to the cache xfrm_state of size 928
[  100.679215][ T9265] The buggy address is located 816 bytes inside of
[  100.679215][ T9265]  freed 928-byte region [ffff88802ecc0900, ffff88802ecc0ca0)
[  100.684589][ T9265] 
[  100.685397][ T9265] The buggy address belongs to the physical page:
[  100.687376][ T9265] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ecc0d80 pfn:0x2ecc0
[  100.690961][ T9265] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  100.693868][ T9265] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  100.696498][ T9265] page_type: f5(slab)
[  100.698085][ T9265] raw: 00fff00000000040 ffff888104a0fb40 dead000000000122 0000000000000000
[  100.700884][ T9265] raw: ffff88802ecc0d80 00000000800e000c 00000000f5000000 0000000000000000
[  100.703678][ T9265] head: 00fff00000000040 ffff888104a0fb40 dead000000000122 0000000000000000
[  100.706531][ T9265] head: ffff88802ecc0d80 00000000800e000c 00000000f5000000 0000000000000000
[  100.709547][ T9265] head: 00fff00000000002 ffffea0000bb3001 00000000ffffffff 00000000ffffffff
[  100.712244][ T9265] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  100.714878][ T9265] page dumped because: kasan: bad access detected
[  100.716875][ T9265] page_owner tracks the page as allocated
[  100.718792][ T9265] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6128, tgid 6126 (syz.0.63), ts 52300617699, free_ts 52267922553
[  100.725432][ T9265]  post_alloc_hook+0x240/0x2a0
[  100.727332][ T9265]  get_page_from_freelist+0x21e4/0x22c0
[  100.729370][ T9265]  __alloc_frozen_pages_noprof+0x181/0x370
[  100.731542][ T9265]  alloc_pages_mpol+0x232/0x4a0
[  100.733519][ T9265]  allocate_slab+0x8a/0x370
[  100.734953][ T9265]  ___slab_alloc+0xbeb/0x1410
[  100.736378][ T9265]  kmem_cache_alloc_noprof+0x283/0x3c0
[  100.737997][ T9265]  xfrm_state_alloc+0x24/0x2f0
[  100.739405][ T9265]  xfrm_add_acquire+0xf7/0xb20
[  100.740978][ T9265]  xfrm_user_rcv_msg+0x7a3/0xab0
[  100.742640][ T9265]  netlink_rcv_skb+0x208/0x470
[  100.744461][ T9265]  xfrm_netlink_rcv+0x79/0x90
[  100.746494][ T9265]  netlink_unicast+0x82f/0x9e0
[  100.748451][ T9265]  netlink_sendmsg+0x805/0xb30
[  100.750429][ T9265]  __sock_sendmsg+0x21c/0x270
[  100.752267][ T9265]  ____sys_sendmsg+0x505/0x830
[  100.753940][ T9265] page last free pid 6119 tgid 6118 stack trace:
[  100.756394][ T9265]  __free_frozen_pages+0xbc4/0xd30
[  100.758486][ T9265]  stack_depot_save_flags+0x436/0x860
[  100.760618][ T9265]  kasan_save_track+0x4f/0x80
[  100.762616][ T9265]  __kasan_kmalloc+0x93/0xb0
[  100.764481][ T9265]  __kmalloc_cache_noprof+0x230/0x3d0
[  100.766540][ T9265]  kobject_uevent_env+0x27c/0x8c0
[  100.768453][ T9265]  device_del+0x73a/0x8e0
[  100.770207][ T9265]  unregister_netdevice_many_notify+0x1a6b/0x1ff0
[  100.772736][ T9265]  unregister_netdevice_queue+0x33c/0x380
[  100.775059][ T9265]  nsim_destroy+0x1dd/0x670
[  100.776907][ T9265]  __nsim_dev_port_del+0x14d/0x1b0
[  100.778931][ T9265]  nsim_dev_reload_destroy+0x288/0x490
[  100.781181][ T9265]  nsim_dev_reload_down+0x8a/0xc0
[  100.783218][ T9265]  devlink_reload+0x1b6/0x8d0
[  100.785195][ T9265]  devlink_nl_reload_doit+0xb35/0xd50
[  100.787387][ T9265]  genl_family_rcv_msg_doit+0x215/0x300
[  100.789598][ T9265] 
[  100.790570][ T9265] Memory state around the buggy address:
[  100.792767][ T9265]  ffff88802ecc0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.795814][ T9265]  ffff88802ecc0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.798937][ T9265] >ffff88802ecc0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.802042][ T9265]                                      ^
[  100.804220][ T9265]  ffff88802ecc0c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  100.807365][ T9265]  ffff88802ecc0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  100.810449][ T9265] ==================================================================
[  100.813592][ T9265] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  100.816244][ T9265] CPU: 1 UID: 0 PID: 9265 Comm: syz.1.868 Not tainted syzkaller #0 PREEMPT(full) 
[  100.819254][ T9265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.822714][ T9265] Call Trace:
[  100.824047][ T9265]  <TASK>
[  100.825195][ T9265]  dump_stack_lvl+0x99/0x250
[  100.826993][ T9265]  ? __asan_memcpy+0x40/0x70
[  100.828771][ T9265]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.830800][ T9265]  ? __pfx__printk+0x10/0x10
[  100.832629][ T9265]  vpanic+0x281/0x750
[  100.834181][ T9265]  ? __pfx_vpanic+0x10/0x10
[  100.835649][ T9265]  ? rcu_is_watching+0x15/0xb0
[  100.837266][ T9265]  panic+0xb9/0xc0
[  100.838447][ T9265]  ? __pfx_panic+0x10/0x10
[  100.840124][ T9265]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  100.841980][ T9265]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  100.843983][ T9265]  ? __xfrm_state_insert+0x8af/0x1450
[  100.846045][ T9265]  check_panic_on_warn+0x89/0xb0
[  100.847934][ T9265]  ? __xfrm_state_insert+0x8af/0x1450
[  100.849934][ T9265]  end_report+0x78/0x160
[  100.851466][ T9265]  kasan_report+0x129/0x150
[  100.853226][ T9265]  ? __xfrm_state_insert+0x8af/0x1450
[  100.855085][ T9265]  __xfrm_state_insert+0x8af/0x1450
[  100.857137][ T9265]  xfrm_state_insert+0x54/0x60
[  100.858700][ T9265]  ipcomp6_init_state+0x655/0x900
[  100.860501][ T9265]  __xfrm_init_state+0xa76/0x13f0
[  100.862509][ T9265]  ? __xfrm_init_state+0x7ef/0x13f0
[  100.864212][ T9265]  xfrm_init_state+0x18/0xa0
[  100.865785][ T9265]  pfkey_add+0x1d38/0x2e00
[  100.867077][ T9265]  ? __pfx_pfkey_add+0x10/0x10
[  100.868743][ T9265]  ? kmem_cache_free+0x18f/0x400
[  100.870282][ T9265]  pfkey_sendmsg+0xbfe/0x1090
[  100.872007][ T9265]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  100.873888][ T9265]  ? aa_sock_msg_perm+0xf1/0x1d0
[  100.875532][ T9265]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  100.877346][ T9265]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  100.879027][ T9265]  __sock_sendmsg+0x21c/0x270
[  100.880667][ T9265]  ____sys_sendmsg+0x505/0x830
[  100.882249][ T9265]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.883893][ T9265]  ? import_iovec+0x74/0xa0
[  100.885267][ T9265]  ___sys_sendmsg+0x21f/0x2a0
[  100.886731][ T9265]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.888492][ T9265]  ? futex_wake+0x4b2/0x560
[  100.889810][ T9265]  ? __fget_files+0x2a/0x420
[  100.891495][ T9265]  ? __fget_files+0x3a0/0x420
[  100.893181][ T9265]  __x64_sys_sendmsg+0x19b/0x260
[  100.894777][ T9265]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  100.896605][ T9265]  ? rcu_is_watching+0x15/0xb0
[  100.898140][ T9265]  ? rcu_is_watching+0x15/0xb0
[  100.899678][ T9265]  do_syscall_64+0xfa/0x3b0
[  100.901386][ T9265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.903689][ T9265]  ? exc_page_fault+0x9f/0xf0
[  100.905117][ T9265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.907277][ T9265] RIP: 0033:0x7f782038ebe9
[  100.908939][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.915394][ T9265] RSP: 002b:00007f7821162038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.917976][ T9265] RAX: ffffffffffffffda RBX: 00007f78205b6090 RCX: 00007f782038ebe9
[  100.920429][ T9265] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005
[  100.922932][ T9265] RBP: 00007f7820411e19 R08: 0000000000000000 R09: 0000000000000000
[  100.925430][ T9265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.927894][ T9265] R13: 00007f78205b6128 R14: 00007f78205b6090 R15: 00007ffc8b1e6198
[  100.930370][ T9265]  </TASK>
[  100.931930][ T9265] Kernel Offset: disabled
[  100.933391][ T9265] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:16:32  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff825dbb8d RBX=ffff88810ae02400 RCX=ffff88801c2f5640 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88810ae023c0 RBP=dffffc0000000000 RSP=ffffc900000f7680
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed10215c0479
R12=1ffffffff1f4768e R13=dffffc0000000000 R14=1ffff110215c0480 R15=ffff88810ae023c0
RIP=ffffffff825dbb9d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003000 CR3=00000000271f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7205212e53
XMM06=0000000000000000 00007f7205212e4d XMM07=0000000000000000 00007f7205212e61
XMM08=0000000000000000 00007f7205212ee7 XMM09=0000000000000000 00007f7205212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000012b8 RDI=00000000000012b9 RBP=ffffffff99df0670 RSP=ffffc90007dd6d50
R8 =ffff8881075a8237 R9 =1ffff11020eb5046 R10=dffffc0000000000 R11=ffffffff854f21f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f2267 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f78211626c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d77dd CR3=000000003317a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7820587498 00007f7820587470 XMM03=00007f78205874a8 00007f78205874a0
XMM04=00007f78210ed100 00007f7820587460 XMM05=00007f7820587478 00007f78205874c0
XMM06=00007f78205874b8 00007f78205874b0 XMM07=00007f78205874a8 00007f78205874a0
XMM08=c6f570fa368a59c3 65c2c5d08367a902 XMM09=0000000000000000 00007f7820412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
