last executing test programs:

979.191248ms ago: executing program 1 (id=2094):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xde}]}, 0x24}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000600)="c1465baf0e1d1115558728f5ef20463f", &(0x7f00000003c0)=""/6, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f00000001c0)='veth1_to_team\x00')
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r5=>0x0, @local, @private}, &(0x7f0000000100)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000500)={'syztnl0\x00', r5, 0x8000, 0x20, 0x7, 0x5, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x23, 0x3, [{0x2, 0x12, "b52439ce79c9024d0995df6b245cd488"}, {0x7, 0xb, "bfbe9fc536a0ca8bb8"}]}, @cipso={0x86, 0x46, 0xfffffffffffffffe, [{0x0, 0x4, '@7'}, {0x5, 0xf, "989a56ce587f65e7c051129cb5"}, {0x5, 0xe, "9d8ee6e3d0461f6e3078b0fa"}, {0x1, 0x4, "f4a1"}, {0x7, 0x6, "f8a08f51"}, {0x0, 0x5, "d9088a"}, {0x7, 0x10, "896b52330ee0114e126c2de7d0ff"}]}, @end, @noop]}}}}})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f35", 0xc7}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r1, &(0x7f0000000380)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1)

978.115147ms ago: executing program 1 (id=2095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000a"], 0x2c}, 0x1, 0xc00000000000000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000a"], 0x2c}, 0x1, 0xc00000000000000}, 0x0) (async)

903.704442ms ago: executing program 1 (id=2096):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

903.213838ms ago: executing program 1 (id=2097):
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3, 0xff, 0x29}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000091ff0000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

784.312612ms ago: executing program 1 (id=2098):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbf, &(0x7f0000000e80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "000000000000e2e7000000000000"}, {0x6, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x22}]}}, "ef"}}}}}, 0x0)

783.662745ms ago: executing program 1 (id=2099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r3, r4}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x48000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead0"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r7, &(0x7f0000000180), 0x400008a, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r8, 0x1, 0x28, &(0x7f0000000040), 0x4)
recvmsg(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2)
sendmsg$key(r7, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r10, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)

477.511816ms ago: executing program 0 (id=2108):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x6, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x880)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x11}, 0x8)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0)
mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08ba000)

413.429881ms ago: executing program 0 (id=2109):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={<r1=>0x0, 0xb4a2, 0x30}, &(0x7f0000000100)=0xc)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={<r2=>r1, 0xc3}, &(0x7f0000000180)=0x8)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getpeername$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10)
write$nbd(r0, &(0x7f0000000240)={0x67446698, 0x1, 0x2, 0x1, 0x1, "0bdd0f5c838ca409b9e5708ccdd2dbbde7ea236d11a5d770"}, 0x28)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000300)={0x7, 'nr0\x00', {0x80000000}, 0xc45d})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
read$alg(r0, &(0x7f0000000340)=""/97, 0x61)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1411, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r6=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
connect$netrom(r0, &(0x7f0000000500)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @default, @null]}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c003}, 0x40010)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000700)={r2, @in={{0x2, 0x4e21, @multicast1}}, [0x6, 0x8a, 0x101, 0x1, 0x8, 0x5, 0x1, 0x5, 0x7, 0x62, 0x2, 0x1, 0xffe000000000000, 0x81, 0x7]}, &(0x7f0000000800)=0x100)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r4)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r7, 0x1020, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x440d4}, 0x400c014)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x8c, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x78dd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x44}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x4)
sendto$inet(r3, &(0x7f0000000d80)="9a0af9cc76dfa852989644ca5ea618b3bdd8806bb1e26eb13ff4dc3c49b270964be208824902228b723c4dad7f194ea02e15e416c442788ecbe8401ff5e96512f7ad3205d127222cbd2f99009dcebf059702691e79332d89b899da0eeb3f456918f81af024c7cd5abbaef63850b3466bc7cd0a499cb70d4473dcf25f647c64eed6f5f1e9202f3216f9e50c5dbb4e973e780499e3c88ff70886abdac324a10de0b49094f80725b08049a2d1577a71a803a94f206417d0a9996ca1ca1925ec90f960340c3a5f947c759c076c9ba2df24cbfc4a68726c3520d67692a5ba72cb902674e02ca4ec83898fac0c5e0823869e", 0xef, 0x8000040, &(0x7f0000000e80)={0x2, 0x4e24, @remote}, 0x10)
getpeername$packet(r0, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000f00)=0x14)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), r5)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r9, 0x20, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}]}, 0x4c}}, 0x0)
listen(r0, 0x0)
splice(r5, &(0x7f00000010c0)=0x1, r5, &(0x7f0000001100)=0xb31, 0x7f, 0x4)

413.083777ms ago: executing program 0 (id=2110):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r0, &(0x7f00000002c0), 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) (async)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002640)={r3, 0x8, 0x34fa, 0x3}) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) (async)
recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r7, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r8, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r10 = socket(0x10, 0x3, 0x0)
ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x7) (async)
sendmsg$kcm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0)

364.664007ms ago: executing program 0 (id=2112):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000000)="fc0000", 0x3)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x1bb18000)
r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r4, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x2000)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='p \x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2070}, 0x1, 0x0, 0x0, 0x80}, 0x20040000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sched_process_exec\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'})
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'})

293.468221ms ago: executing program 0 (id=2114):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14e4efff37000107fcffffff00000000060000003019c6a43bd4dbc6316724d38aa7b147ddd185656a3fb90bc0ad98ffc579ec698d67baa5b70af1ccef4ddbfce0bfd43959b7f98463623d595f9b12c02bf49922b5e8dc0c8ecacfa59b32b047718b18dfd847842cf6fbbdca3647b8849e31117d426413ed555e15655fe30f957e63fe5f0b46c61d5087f799db0063aa5984506a481fca58975d43477ac57205b63fdc1829e8844be9878dc7d80c57daa9d46005c6348109e55d0fdd1b90c5b65ad516b7cdc0476db336c46fc4dc4c65c1e30649646ae5c36828b8a40e4b7ed64c016b664107c632b9c6b48d"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000040), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

173.437436ms ago: executing program 0 (id=2119):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0)
listen(r2, 0xfff)
r3 = accept(r2, 0xfffffffffffffffd, &(0x7f0000000680))
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x91a}, 0x8)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="f7255a68f6a985d5e98f47776923c0c145c41463ca261a4c8dab81bc6db6aa1f239bf64aea51f5e9e3960e4b3def464f1262927639eb5cc13ae2b00e0400d7a2c8d950209415348e75880e1f0d2690ab7613262aa3c89dae5ef44ecdca4821e8e5a3a93115303850d766707df4948d97ae46910db0c6108d5a2a902d013f905dfe55a678065148ffbd325c5468e8000000acb101e5c1c34b53dc3aafe8c9f3d22d577d096103ebf13a6c6b12a6e0f7d3f60df33ac16529dfad6a7b2c75e6b52a26b47b70c8db29f830d973fc792efafa1a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="02002a9b7000fedbdf250220000006000a0000000000c72e78ac5da6774b00519fb9d35374b13337e8ca3329887da2262c7f41c6e1b83c23cac5966f270d24f625c182691c1e05caa5b2a5879591d38a861cfffffc26b410d3e91278"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000680)={0x0, <r8=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, <r9=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r9}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r8, 0x0, 0x10}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r8, 0x10}, 0xc)
listen(r0, 0x8)
accept4$inet(r0, &(0x7f0000000100), 0x0, 0x80800)

171.817559ms ago: executing program 2 (id=2120):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r3=>0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=<r4=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r3, r4}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
close(0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0xff03}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x70}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)

84.753519ms ago: executing program 2 (id=2121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a"], 0x28}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='module_request\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2517000000500006800800060006000000440004"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4804)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r8=>0x0})
r9 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x0, 0x70bd2a, 0x5, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x63}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf}, @NL80211_ATTR_DURATION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4000000)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

4.731792ms ago: executing program 2 (id=2122):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x40000000015, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf251704000050000680180006"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x400)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000500)=0x39)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071104f000000000095000000000000003a7de91e92f180d223cbe3a5594826e3a2510468561a83db5c9298934cc7035fc36af65c5fb290fb0d546dfe6562698ec3f6e13e1dc746fcd8fb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

3.997995ms ago: executing program 2 (id=2123):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r2, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0)

3.414837ms ago: executing program 2 (id=2124):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
socket$inet6(0xa, 0x1, 0x0) (async)
socket$inet6(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0) (async)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket(0x10, 0x803, 0x0) (async)
socket(0x1, 0x803, 0x0) (async, rerun: 64)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 64)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe8000000000000000000000000000aa"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x1)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x9, 0x83}) (async)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async, rerun: 32)
r6 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000080))

0s ago: executing program 2 (id=2125):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x55}, 0x20)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xe, 0x0, &(0x7f0000000300)=0xaf00)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100fcffff07000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000100000046c0000004ba5648900000200000000000000004b0000000002000000008000000000000000006ab9fcaa74829a4338e9000000000000000000000000000000000000000000487d00000000000004000000000000000000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001060000000000000000480003006465666c617465000000754f2e5d3f6000b200"/240], 0x138}}, 0x20000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xef2, 0x0, 0x7fffffff, 0x3, 0x94}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x6, 0x1, 0x3, 0xcfdb, 0xfffffffffffffff1, 0xffffffffffffff35, 0xffffffffffff4a4c, 0x9e5, 0x1cf9, 0xff, 0x1000, 0x4, 0x9, 0x6]}, &(0x7f0000000140)=0x100)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00f000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4)
syz_emit_ethernet(0x112, &(0x7f0000000480)={@link_local, @random="dfc774e60d03", @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@x25={0x805, {0x0, 0x1, 0x1, "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"}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x55}, 0x20) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0xe, 0x0, &(0x7f0000000300)=0xaf00) (async)
socket$key(0xf, 0x3, 0x2) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100fcffff07000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000100000046c0000004ba5648900000200000000000000004b0000000002000000008000000000000000006ab9fcaa74829a4338e9000000000000000000000000000000000000000000487d00000000000004000000000000000000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000000000000fcffffff000000000a0001060000000000000000480003006465666c617465000000754f2e5d3f6000b200"/240], 0x138}}, 0x20000000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}}, 0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xef2, 0x0, 0x7fffffff, 0x3, 0x94}}}}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x4, 0x6, 0x1, 0x3, 0xcfdb, 0xfffffffffffffff1, 0xffffffffffffff35, 0xffffffffffff4a4c, 0x9e5, 0x1cf9, 0xff, 0x1000, 0x4, 0x9, 0x6]}, &(0x7f0000000140)=0x100) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00f000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) (async)
syz_emit_ethernet(0x112, &(0x7f0000000480)={@link_local, @random="dfc774e60d03", @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@x25={0x805, {0x0, 0x1, 0x1, "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"}}}}, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56792' (ED25519) to the list of known hosts.
syzkaller login: [   40.806587][ T5819] cgroup: Unknown subsys name 'net'
[   40.886784][ T5819] cgroup: Unknown subsys name 'cpuset'
[   40.890123][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.157681][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.098271][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.101534][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.104818][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.108478][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.111424][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.117440][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.121502][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.125200][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.137824][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.143498][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.146384][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.149486][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.153257][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.157773][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.164031][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.342174][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   45.346873][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   45.362351][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   45.418347][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.420821][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.423698][ T5842] bridge_slave_0: entered allmulticast mode
[   45.426418][ T5842] bridge_slave_0: entered promiscuous mode
[   45.429274][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.431503][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.433998][ T5842] bridge_slave_1: entered allmulticast mode
[   45.436297][ T5842] bridge_slave_1: entered promiscuous mode
[   45.438694][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.440994][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.444339][ T5837] bridge_slave_0: entered allmulticast mode
[   45.446912][ T5837] bridge_slave_0: entered promiscuous mode
[   45.458044][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.460876][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.463563][ T5837] bridge_slave_1: entered allmulticast mode
[   45.466072][ T5837] bridge_slave_1: entered promiscuous mode
[   45.496338][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.500329][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.504188][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.507377][ T5846] bridge_slave_0: entered allmulticast mode
[   45.510601][ T5846] bridge_slave_0: entered promiscuous mode
[   45.515438][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.519154][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.522253][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.526091][ T5846] bridge_slave_1: entered allmulticast mode
[   45.529364][ T5846] bridge_slave_1: entered promiscuous mode
[   45.533616][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.540203][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.569699][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.584686][ T5842] team0: Port device team_slave_0 added
[   45.587519][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.591733][ T5837] team0: Port device team_slave_0 added
[   45.595014][ T5842] team0: Port device team_slave_1 added
[   45.597990][ T5837] team0: Port device team_slave_1 added
[   45.621410][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.624210][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.635097][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.647363][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.650175][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.659858][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.666652][ T5846] team0: Port device team_slave_0 added
[   45.668906][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.671251][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.681271][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.690111][ T5846] team0: Port device team_slave_1 added
[   45.692372][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.694881][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.702975][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.722924][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.725701][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.734410][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.739958][ T5842] hsr_slave_0: entered promiscuous mode
[   45.742194][ T5842] hsr_slave_1: entered promiscuous mode
[   45.750108][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.752383][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.762478][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.802205][ T5846] hsr_slave_0: entered promiscuous mode
[   45.805285][ T5846] hsr_slave_1: entered promiscuous mode
[   45.807369][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   45.809280][ T5846] Cannot create hsr debugfs directory
[   45.820685][ T5837] hsr_slave_0: entered promiscuous mode
[   45.822941][ T5837] hsr_slave_1: entered promiscuous mode
[   45.826146][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   45.828557][ T5837] Cannot create hsr debugfs directory
[   45.929458][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.933692][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.938703][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.944707][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.962694][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.969233][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.973094][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.979238][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.993340][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.995705][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.998200][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.000546][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.011335][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.015066][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.025374][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.029798][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.046650][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.049580][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.052376][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.054922][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.069646][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.072446][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.075533][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.078367][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.096236][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.108796][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.111912][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.115672][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.118733][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.121966][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.125395][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.136022][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   46.146424][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.149170][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.152573][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.155695][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.166886][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.182800][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   46.194505][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.197132][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.208452][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.211152][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.217505][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.247880][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   46.264373][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.268044][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.276530][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.279515][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.283181][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.286248][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.340491][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.367316][ T5842] veth0_vlan: entered promiscuous mode
[   46.373724][ T5842] veth1_vlan: entered promiscuous mode
[   46.406076][ T5842] veth0_macvtap: entered promiscuous mode
[   46.415430][ T5842] veth1_macvtap: entered promiscuous mode
[   46.432920][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.445486][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.451348][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.458009][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.464225][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.472691][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.477468][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.489363][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.511172][ T5846] veth0_vlan: entered promiscuous mode
[   46.530321][ T3147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.534090][ T3147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.537649][ T5846] veth1_vlan: entered promiscuous mode
[   46.556205][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.559239][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.564094][ T5837] veth0_vlan: entered promiscuous mode
[   46.575296][ T5846] veth0_macvtap: entered promiscuous mode
[   46.579888][ T5837] veth1_vlan: entered promiscuous mode
[   46.585137][ T5846] veth1_macvtap: entered promiscuous mode
[   46.586345][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.606166][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.619939][ T5837] veth0_macvtap: entered promiscuous mode
[   46.628647][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.639376][ T5837] veth1_macvtap: entered promiscuous mode
[   46.644190][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.652095][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.664252][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.667966][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.673457][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.678288][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.697712][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.709216][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.714530][ T5909] tipc: Started in network mode
[   46.716238][ T5909] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[   46.719071][ T5909] tipc: Enabled bearer <eth:geneve1>, priority 10
[   46.721612][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.722625][ T5909] netlink: 212172 bytes leftover after parsing attributes in process `syz.0.4'.
[   46.726048][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.768062][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.771332][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.800130][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.806881][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.829279][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.832009][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.835604][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.838856][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.887584][ T5919] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.894634][ T5913] Zero length message leads to an empty skb
[   46.894742][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   46.904012][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5'.
[   46.907730][ T5913] ip6_vti0: entered promiscuous mode
[   46.912760][ T5913] ip6_vti0: entered allmulticast mode
[   46.924528][ T5919] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   47.145153][ T5949] netlink: 'syz.0.11': attribute type 18 has an invalid length.
[   47.184110][   T55] Bluetooth: hci0: command tx timeout
[   47.186469][   T55] Bluetooth: hci1: command tx timeout
[   47.188663][   T55] Bluetooth: hci2: command tx timeout
[   47.209650][ T5956] netlink: 248 bytes leftover after parsing attributes in process `syz.0.13'.
[   47.275087][ T5953] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET)
[   47.493028][ T5980] netlink: 83 bytes leftover after parsing attributes in process `syz.2.17'.
[   47.499010][ T5985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18'.
[   47.511086][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'.
[   47.516029][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'.
[   47.520907][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18'.
[   47.574738][ T5994] syzkaller1: entered promiscuous mode
[   47.576736][ T5994] syzkaller1: entered allmulticast mode
[   47.593456][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.596705][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.600423][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.607363][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.723432][ T5911] tipc: Node number set to 15444650
[   48.573931][ T6007] netlink: 'syz.2.21': attribute type 20 has an invalid length.
[   48.579102][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   48.579377][ T6007] netlink: 'syz.2.21': attribute type 20 has an invalid length.
[   48.582663][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   48.589568][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   48.592992][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   48.682881][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.744386][ T6019] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.810971][ T6025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   49.263511][ T5845] Bluetooth: hci2: command tx timeout
[   49.263549][   T55] Bluetooth: hci1: command tx timeout
[   49.265893][ T5845] Bluetooth: hci0: command tx timeout
[   49.532798][ T6031] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.628176][ T6035] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   49.759936][ T6047] Bluetooth: MGMT ver 1.23
[   49.835518][ T6056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.865630][ T6060] veth0: entered promiscuous mode
[   50.252441][ T6088] netlink: 'syz.2.50': attribute type 12 has an invalid length.
[   50.440068][ T6101] ieee802154 phy0 wpan0: encryption failed: -22
[   50.509402][    T9] IPVS: starting estimator thread 0...
[   50.592031][ T6046] veth0: left promiscuous mode
[   50.606579][ T6116] IPVS: using max 134 ests per chain, 321600 per kthread
[   51.345190][ T5845] Bluetooth: hci1: command tx timeout
[   51.345221][   T55] Bluetooth: hci2: command tx timeout
[   51.347467][ T5845] Bluetooth: hci0: command tx timeout
[   51.546386][ T6206] netlink: 'syz.0.76': attribute type 3 has an invalid length.
[   51.630448][ T6212] tipc: New replicast peer: 255.255.255.255
[   51.635489][ T6212] tipc: Enabled bearer <udp:syz2>, priority 10
[   51.802649][    T9] IPVS: starting estimator thread 0...
[   51.904261][ T6226] IPVS: using max 72 ests per chain, 172800 per kthread
[   52.204866][ T6238] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.208587][ T6238] bond0: (slave bond1): Enslaving as an active interface with an up link
[   52.231442][ T6241] __nla_validate_parse: 18 callbacks suppressed
[   52.231458][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'.
[   52.237998][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'.
[   52.241135][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'.
[   52.372661][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   52.404658][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   52.408887][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   52.412588][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   52.416489][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   52.420139][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   52.423975][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   52.459302][ T6257] 8021q: adding VLAN 0 to HW filter on device bond2
[   53.423468][ T5845] Bluetooth: hci0: command tx timeout
[   53.423594][ T5839] Bluetooth: hci2: command tx timeout
[   53.427958][ T5839] Bluetooth: hci1: command tx timeout
[   53.552228][ T6339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   53.585165][ T6342] netlink: 'syz.1.120': attribute type 8 has an invalid length.
[   53.703615][ T6363] netlink: 'syz.1.126': attribute type 1 has an invalid length.
[   53.942610][ T6383] netlink: 'syz.0.132': attribute type 2 has an invalid length.
[   53.946438][ T6383] netlink: 'syz.0.132': attribute type 1 has an invalid length.
[   54.260413][ T6414] ieee802154 phy0 wpan0: encryption failed: -22
[   54.301248][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.314264][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.325742][ T6437] tipc: Started in network mode
[   54.328445][ T6437] tipc: Node identity d6b1b8958d08, cluster identity 4711
[   54.333033][ T6437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.340217][ T6437] syzkaller0: entered promiscuous mode
[   54.342473][ T6437] syzkaller0: entered allmulticast mode
[   54.349005][ T6437] tipc: Resetting bearer <eth:syzkaller0>
[   54.350983][ T6437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   54.355415][ T6436] tipc: Resetting bearer <eth:syzkaller0>
[   54.359574][ T6436] tipc: Disabling bearer <eth:syzkaller0>
[   54.364089][ T6442] netlink: 'syz.2.150': attribute type 10 has an invalid length.
[   54.371061][ T6442] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   54.587952][ T6459] dvmrp0: entered allmulticast mode
[   54.723724][ T6469] tls_set_device_offload_rx: netdev not found
[   54.935493][ T6518] netlink: 'syz.2.170': attribute type 16 has an invalid length.
[   54.991818][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   54.995840][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.000584][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.005066][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.724117][ T6544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   55.726562][ T6544] IPv6: NLM_F_CREATE should be set when creating new route
[   55.728975][ T6544] IPv6: NLM_F_CREATE should be set when creating new route
[   56.104437][ T6571] veth2: entered allmulticast mode
[   56.250921][ T6589] openvswitch: netlink: Flow key attr not present in new flow.
[   56.384676][ T6601] IPv6: addrconf: prefix option has invalid lifetime
[   56.431071][ T6609] netlink: 'syz.2.198': attribute type 10 has an invalid length.
[   56.488334][ T6613] unsupported nlmsg_type 40
[   56.768022][ T6631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.779794][ T6635] delete_channel: no stack
[   56.818624][ T6639] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   56.911481][ T6658] delete_channel: no stack
[   57.146247][ T6692] openvswitch: netlink: Key type 67 is out of range max 32
[   57.320610][ T6708] __nla_validate_parse: 33 callbacks suppressed
[   57.320624][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'.
[   57.394789][ T6620] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   57.418982][ T6721] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   57.492549][ T6729] netlink: 'syz.0.236': attribute type 1 has an invalid length.
[   57.495365][ T6731] netlink: 232 bytes leftover after parsing attributes in process `syz.2.237'.
[   57.496701][ T6729] netlink: 224 bytes leftover after parsing attributes in process `syz.0.236'.
[   57.667253][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.242'.
[   57.674189][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.242'.
[   57.791376][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'.
[   57.983405][   T55] Bluetooth: hci2: command tx timeout
[   58.378815][ T6763] veth0: entered promiscuous mode
[   58.381486][ T6763] openvswitch: netlink: Missing valid actions attribute.
[   58.384777][ T6763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.389687][ T6762] veth0: left promiscuous mode
[   58.414666][ T6767] netlink: 'syz.2.249': attribute type 9 has an invalid length.
[   58.502448][ T6773] tipc: Started in network mode
[   58.504720][ T6773] tipc: Node identity ae6d044626e1, cluster identity 4711
[   58.507487][ T6773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.512871][ T6773] syzkaller0: entered promiscuous mode
[   58.517533][ T6773] syzkaller0: entered allmulticast mode
[   58.534529][ T6773] tipc: Resetting bearer <eth:syzkaller0>
[   58.587921][ T6775] tipc: Resetting bearer <eth:syzkaller0>
[   58.594956][ T6775] tipc: Disabling bearer <eth:syzkaller0>
[   58.623782][   T55] Bluetooth: hci0: command 0x0401 tx timeout
[   58.641613][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'.
[   58.671967][ T6786] tap0: tun_chr_ioctl cmd 1074025680
[   58.678536][ T6786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.681370][ T6786] syzkaller0: entered promiscuous mode
[   58.685205][ T6786] syzkaller0: entered allmulticast mode
[   58.699362][ T6786] tipc: Resetting bearer <eth:syzkaller0>
[   58.762292][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   58.765912][ T6789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'.
[   58.796587][ T6785] tipc: Resetting bearer <eth:syzkaller0>
[   58.819615][ T6785] tipc: Disabling bearer <eth:syzkaller0>
[   58.918743][ T6801] netlink: 27 bytes leftover after parsing attributes in process `syz.2.258'.
[   59.074852][ T6822] xt_limit: Overflow, try lower: 271964/0
[   59.085626][ T6832] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   59.093172][ T6832] team0: Device ipvlan2 is already an upper device of the team interface
[   59.131667][ T6836] delete_channel: no stack
[   59.158070][ T6842] hsr_slave_0: left promiscuous mode
[   59.161427][ T6842] hsr_slave_1: left promiscuous mode
[   59.293152][ T6862] nbd: must specify at least one socket
[   59.520854][ T6888] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.529352][ T6888] syzkaller0: entered promiscuous mode
[   59.534475][ T6888] syzkaller0: entered allmulticast mode
[   59.549385][ T6888] tipc: Resetting bearer <eth:syzkaller0>
[   59.585170][ T6887] tipc: Resetting bearer <eth:syzkaller0>
[   59.590293][ T6887] tipc: Disabling bearer <eth:syzkaller0>
[   59.752974][ T6912] netlink: 'syz.2.296': attribute type 1 has an invalid length.
[   59.761187][ T6912] 8021q: adding VLAN 0 to HW filter on device bond3
[   59.768961][ T6912] bond3: (slave gretap1): making interface the new active one
[   59.772287][ T6912] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   60.498974][ T6931] nbd: must specify at least one socket
[   60.576319][ T6935] netlink: 'syz.1.304': attribute type 1 has an invalid length.
[   60.772611][ T6956] tap0: tun_chr_ioctl cmd 1074025678
[   60.777936][ T6956] tap0: group set to 0
[   61.100369][ T6990] netlink: 'syz.2.327': attribute type 5 has an invalid length.
[   61.106252][ T6992] netlink: 'syz.1.328': attribute type 11 has an invalid length.
[   61.525057][ T7025] netlink: 'syz.1.337': attribute type 10 has an invalid length.
[   61.536276][ T7025] team0: Port device dummy0 added
[   61.593863][ T7032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.597036][ T7032] syzkaller0: entered promiscuous mode
[   61.599265][ T7032] syzkaller0: entered allmulticast mode
[   61.610554][ T7032] tipc: Resetting bearer <eth:syzkaller0>
[   61.614181][ T7031] tipc: Resetting bearer <eth:syzkaller0>
[   61.619110][ T7031] tipc: Disabling bearer <eth:syzkaller0>
[   61.812305][ T7042] trusted_key: syz.2.342 sent an empty control message without MSG_MORE.
[   61.908439][ T7055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.941217][ T7062] netlink: 'syz.0.347': attribute type 1 has an invalid length.
[   61.952283][ T7062] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.025149][ T7074] nbd: illegal input index -1
[   62.038860][ T7075] tipc: Cannot configure node identity twice
[   62.288750][ T7025] syz.1.337 (7025) used greatest stack depth: 20112 bytes left
[   62.540494][   T33] audit: type=1800 audit(1755865426.689:2): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.363" name="blkio.bfq.time_recursive" dev="tmpfs" ino=560 res=0 errno=0
[   62.566184][   T33] audit: type=1800 audit(1755865426.689:3): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.363" name="blkio.bfq.time_recursive" dev="tmpfs" ino=560 res=0 errno=0
[   62.898049][   T33] audit: type=1800 audit(1755865427.049:4): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.366" name="memory.events" dev="tmpfs" ino=576 res=0 errno=0
[   63.070417][ T7159] vlan2: entered allmulticast mode
[   63.174398][ T7182] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[   63.177028][ T7182] netlink: 'syz.0.379': attribute type 3 has an invalid length.
[   63.181679][ T7182] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[   63.187571][ T7182] __nla_validate_parse: 37 callbacks suppressed
[   63.187579][ T7182] netlink: 204 bytes leftover after parsing attributes in process `syz.0.379'.
[   63.203512][ T7182] NCSI netlink: No device for ifindex 1109110511
[   63.240988][ T7193] dvmrp0: entered allmulticast mode
[   63.340514][ T7210] syzkaller1: entered promiscuous mode
[   63.342378][ T7210] syzkaller1: entered allmulticast mode
[   63.478960][ T7223] vcan0: tx drop: invalid da for name 0xfffffffffffffffb
[   63.525896][ T7236] team_slave_0: entered promiscuous mode
[   63.527919][ T7236] team_slave_1: entered promiscuous mode
[   63.530097][ T7236] dummy0: entered promiscuous mode
[   63.532031][ T7236] macsec0: entered promiscuous mode
[   63.534366][ T7236] team0: entered promiscuous mode
[   63.537171][ T7236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'.
[   63.560667][ T7243] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   64.249411][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[   64.252356][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'.
[   64.256708][ T7268] netlink: 'syz.0.407': attribute type 20 has an invalid length.
[   64.259498][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[   64.262874][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'.
[   64.266793][ T7268] netlink: 'syz.0.407': attribute type 20 has an invalid length.
[   64.384849][ T7276] batadv_slave_1: entered promiscuous mode
[   64.387370][ T7275] batadv_slave_1: left promiscuous mode
[   64.436646][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'.
[   64.441421][ T7286] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   64.470140][ T7291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.473191][ T7291] syzkaller0: entered promiscuous mode
[   64.475558][ T7291] syzkaller0: entered allmulticast mode
[   64.496438][ T7291] tipc: Resetting bearer <eth:syzkaller0>
[   64.519593][ T7290] tipc: Resetting bearer <eth:syzkaller0>
[   64.526072][ T7290] tipc: Disabling bearer <eth:syzkaller0>
[   64.586343][ T7302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.418'.
[   64.621048][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'.
[   64.626073][ T7320] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   64.660894][ T7328] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   64.669599][ T7328] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   64.675949][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.428'.
[   64.756575][ T5869] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.761442][ T5869] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.767358][ T5869] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.771594][ T7342] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   64.775494][ T5869] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.289270][ T7398] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   65.615472][ T7443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.618405][ T7443] syzkaller0: entered promiscuous mode
[   65.620309][ T7443] syzkaller0: entered allmulticast mode
[   65.627204][ T7443] tipc: Resetting bearer <eth:syzkaller0>
[   65.638389][ T7442] tipc: Resetting bearer <eth:syzkaller0>
[   65.641933][ T7442] tipc: Disabling bearer <eth:syzkaller0>
[   65.774733][ T7454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   65.807067][ T7457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.819268][ T7459] dummy0: entered promiscuous mode
[   65.821858][ T7458] dummy0: left promiscuous mode
[   65.865087][ T7462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   65.916896][ T7471] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.922559][ T7471] bond_slave_0: entered promiscuous mode
[   65.924567][ T7471] bond_slave_1: entered promiscuous mode
[   65.934662][ T7471] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   65.940984][ T7472] bond2: (slave macvlan3): Error -98 calling set_mac_address
[   66.071824][ T7492] pim6reg: entered allmulticast mode
[   66.090923][ T7494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.373900][ T7523] validate_nla: 2 callbacks suppressed
[   66.374016][ T7523] netlink: 'syz.2.470': attribute type 2 has an invalid length.
[   66.380350][ T7523] netlink: 'syz.2.470': attribute type 2 has an invalid length.
[   66.628878][ T7571] netlink: 'syz.2.484': attribute type 10 has an invalid length.
[   66.954786][ T7618] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[   67.111429][ T7649] geneve0: entered promiscuous mode
[   67.114525][ T7649] vlan2: entered promiscuous mode
[   67.393965][ T7668] IPv6: NLM_F_CREATE should be specified when creating new route
[   68.098477][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.101002][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.110028][ T7706] bond_slave_0: left promiscuous mode
[   68.111874][ T7706] bond_slave_1: left promiscuous mode
[   68.118423][   T10] cfg80211: failed to load regulatory.db
[   68.154803][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.160399][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.232920][ T5733] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.236016][ T5733] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.243404][ T5733] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.247471][ T5733] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.252773][ T5733] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.256858][ T5733] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.259973][ T5733] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   68.263488][ T5733] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.315769][ T7736] __nla_validate_parse: 21 callbacks suppressed
[   68.315784][ T7736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.527'.
[   68.377824][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.531'.
[   68.399538][ T7756] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003
[   69.162072][ T7790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.546'.
[   69.237944][ T7806] netlink: 'syz.2.549': attribute type 7 has an invalid length.
[   69.473163][ T7834] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   69.524298][ T7846] netlink: 88 bytes leftover after parsing attributes in process `syz.0.563'.
[   69.546637][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.564'.
[   69.576383][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'.
[   69.579870][ T7859] chnl_net:caif_netlink_parms(): no params data found
[   69.739594][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[   69.744805][ T7869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'.
[   69.786624][ T7875] openvswitch: netlink: Actions may not be safe on all matching packets
[   69.794732][ T7877] syz_tun: entered allmulticast mode
[   69.875052][ T7876] syz_tun: left allmulticast mode
[   69.898087][ T7881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.908569][ T7881] netlink: 128 bytes leftover after parsing attributes in process `syz.1.576'.
[   69.912414][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'.
[   70.029111][ T7903] bridge_slave_0: left allmulticast mode
[   70.031134][ T7903] bridge_slave_0: left promiscuous mode
[   70.033069][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.037328][ T7903] bridge_slave_1: left allmulticast mode
[   70.039306][ T7903] bridge_slave_1: left promiscuous mode
[   70.041328][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.045773][ T7903] bond0: (slave bond_slave_0): Releasing backup interface
[   70.050109][ T7903] bond0: (slave bond_slave_1): Releasing backup interface
[   70.057636][ T7903] team0: Port device team_slave_0 removed
[   70.061787][ T7903] team0: Port device team_slave_1 removed
[   70.065765][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.068265][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.071280][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.075310][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.088785][ T7904] vlan0: entered promiscuous mode
[   70.096018][ T7904] team0: Port device vlan0 added
[   70.117384][ T7908] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.198459][ T7923] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   70.273197][ T7927] netlink: 'syz.0.590': attribute type 1 has an invalid length.
[   70.321450][ T7933] netlink: 'syz.1.592': attribute type 4 has an invalid length.
[   70.353099][ T7938] netlink: 'syz.0.593': attribute type 2 has an invalid length.
[   70.356859][ T7938] netlink: 'syz.0.593': attribute type 3 has an invalid length.
[   70.356900][ T7941] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   70.363742][ T7941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.396658][ T7943] netlink: 'syz.0.595': attribute type 3 has an invalid length.
[   70.481283][ T7963] netlink: 'syz.1.602': attribute type 15 has an invalid length.
[   70.546775][ T7971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.550363][ T7971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.600443][ T7976] ieee802154 phy0 wpan0: encryption failed: -22
[   70.600635][ T7971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.606985][ T7971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.652183][ T7983] tipc: Enabled bearer <udp:syz0>, priority 10
[   70.687228][ T7971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.691057][ T7971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.733245][ T7996] bridge_slave_0: left allmulticast mode
[   70.735793][ T7996] bridge_slave_0: left promiscuous mode
[   70.737797][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.741517][ T7996] bridge_slave_1: left allmulticast mode
[   70.745614][ T7996] bridge_slave_1: left promiscuous mode
[   70.747864][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.752819][ T7996] bond0: (slave bond_slave_0): Releasing backup interface
[   70.758985][ T7996] bond0: (slave bond_slave_1): Releasing backup interface
[   70.765837][ T7996] team0: Port device team_slave_0 removed
[   70.771180][ T7996] team0: Port device team_slave_1 removed
[   70.774515][ T7996] bond0: (slave batadv_slave_0): Releasing backup interface
[   70.784412][ T7996] bond0: (slave bond1): Releasing backup interface
[   70.789567][ T7996] bond3: (slave gretap1): Releasing active interface
[   70.805102][ T7971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.809874][ T7971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.819591][ T7998] team0: Mode changed to "broadcast"
[   70.845824][ T8001] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   70.871772][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.880154][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.897513][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.900589][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.908811][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.911890][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.918124][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.921553][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.950027][ T8016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.954188][ T8016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   71.195910][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.198632][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.399045][ T8043] v: renamed from ip6_vti0 (while UP)
[   71.643358][ T5872] tipc: Node number set to 2290877510
[   71.934897][ T8050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.937536][ T8050] syzkaller0: entered promiscuous mode
[   71.939347][ T8050] syzkaller0: entered allmulticast mode
[   71.945264][ T8050] tipc: Resetting bearer <eth:syzkaller0>
[   71.948396][ T8049] tipc: Resetting bearer <eth:syzkaller0>
[   71.956055][ T8049] tipc: Disabling bearer <eth:syzkaller0>
[   72.082931][ T8064] ip6gre1: entered allmulticast mode
[   72.102620][ T8066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.107123][ T8066] syzkaller0: entered promiscuous mode
[   72.109452][ T8066] syzkaller0: entered allmulticast mode
[   72.115348][ T8066] syzkaller0: mtu less than device minimum
[   72.118267][ T8065] tipc: Resetting bearer <eth:syzkaller0>
[   72.122923][ T8065] tipc: Disabling bearer <eth:syzkaller0>
[   72.229761][ T8076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.248762][ T8078] validate_nla: 1 callbacks suppressed
[   72.248775][ T8078] netlink: 'syz.2.643': attribute type 21 has an invalid length.
[   72.289434][ T8086] netlink: 'syz.2.645': attribute type 1 has an invalid length.
[   72.292461][ T8086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.294936][ T8087] syzkaller0: entered promiscuous mode
[   72.296843][ T8087] syzkaller0: entered allmulticast mode
[   72.305565][ T8088] tipc: Resetting bearer <eth:syzkaller0>
[   72.310315][ T8088] tipc: Disabling bearer <eth:syzkaller0>
[   72.371357][ T8091] lo speed is unknown, defaulting to 1000
[   72.373505][ T8091] lo speed is unknown, defaulting to 1000
[   72.375648][ T8091] lo speed is unknown, defaulting to 1000
[   72.378604][ T8091] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.382886][ T8091] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   72.389702][ T8091] lo speed is unknown, defaulting to 1000
[   72.392068][ T8091] lo speed is unknown, defaulting to 1000
[   72.394759][ T8091] lo speed is unknown, defaulting to 1000
[   72.455955][ T8097] raw_sendmsg: syz.2.649 forgot to set AF_INET. Fix it!
[   72.537917][ T8110] netlink: 'syz.2.651': attribute type 11 has an invalid length.
[   72.908275][ T8143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.911325][ T8143] syzkaller0: entered promiscuous mode
[   72.914573][ T8143] syzkaller0: entered allmulticast mode
[   72.922117][ T8142] tipc: Resetting bearer <eth:syzkaller0>
[   72.928412][ T8142] tipc: Disabling bearer <eth:syzkaller0>
[   73.185091][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.185486][ T8155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.726473][ T8167] __nla_validate_parse: 21 callbacks suppressed
[   73.726483][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.672'.
[   73.734565][ T8167] bond0: entered promiscuous mode
[   73.736975][ T8167] bond0: left promiscuous mode
[   73.808369][ T8176] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20000
[   73.811430][ T8177] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20000
[   73.871631][ T8177] lo speed is unknown, defaulting to 1000
[   74.601355][ T8182] netlink: 104 bytes leftover after parsing attributes in process `syz.1.677'.
[   74.672902][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'.
[   74.699325][ T8192] netlink: 380 bytes leftover after parsing attributes in process `syz.2.679'.
[   74.718748][ T8194] netlink: 224 bytes leftover after parsing attributes in process `syz.2.680'.
[   74.736055][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'.
[   74.761504][ T8199] ipvlan1: entered promiscuous mode
[   74.765123][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'.
[   74.768932][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'.
[   74.772629][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'.
[   74.775800][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'.
[   74.789197][ T8199] ipvlan1: left promiscuous mode
[   74.791179][ T7708] lo speed is unknown, defaulting to 1000
[   75.069135][ T8228] netlink: 'syz.0.692': attribute type 1 has an invalid length.
[   75.481481][ T8259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.669689][ T8279] netlink: 'syz.1.714': attribute type 2 has an invalid length.
[   75.723162][ T8288] netlink: 'syz.1.717': attribute type 1 has an invalid length.
[   75.725815][ T8288] NCSI netlink: No device for ifindex 0
[   75.772572][ T8295] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   76.008174][ T8319] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[   76.017012][ T8319] 8021q: adding VLAN 0 to HW filter on device bond6
[   76.934035][ T8362] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   76.939524][ T8362] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   77.517711][ T8374] netlink: 'syz.0.745': attribute type 1 has an invalid length.
[   77.520232][ T8374] netlink: 'syz.0.745': attribute type 2 has an invalid length.
[   77.782798][ T8401] netlink: 'syz.0.753': attribute type 21 has an invalid length.
[   77.785414][ T8401] netlink: 'syz.0.753': attribute type 22 has an invalid length.
[   77.788030][ T8401] netlink: 'syz.0.753': attribute type 23 has an invalid length.
[   77.790567][ T8401] netlink: 'syz.0.753': attribute type 25 has an invalid length.
[   77.793119][ T8401] netlink: 'syz.0.753': attribute type 26 has an invalid length.
[   77.981835][ T8423] syzkaller1: entered promiscuous mode
[   77.985684][ T8423] syzkaller1: entered allmulticast mode
[   78.066882][ T8430] openvswitch: netlink: Actions may not be safe on all matching packets
[   78.131515][ T8439] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[   78.272059][ T8446] infiniband syz1: set active
[   78.273938][ T8446] infiniband syz1: added macvlan1
[   78.284893][ T8446] RDS/IB: syz1: added
[   78.286334][ T8446] smc: adding ib device syz1 with port count 1
[   78.288939][ T8446] smc:    ib device syz1 port 1 has pnetid 
[   78.455988][ T8461] dvmrp0: entered promiscuous mode
[   78.744427][ T8481] "syz.0.779" (8481) uses obsolete ecb(arc4) skcipher
[   78.787146][ T8488] netlink: 'syz.0.781': attribute type 1 has an invalid length.
[   78.797867][ T8488] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   78.802215][ T8488] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   78.837446][ T8488] gretap1: entered promiscuous mode
[   78.840338][ T8488] bond2: (slave gretap1): making interface the new active one
[   78.843568][ T8488] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   78.850481][ T8488] netlink: 'syz.0.781': attribute type 23 has an invalid length.
[   78.965854][ T8497] lo speed is unknown, defaulting to 1000
[   79.065080][ T8504] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   79.069308][ T8504] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   79.072967][ T8504] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   79.155511][ T8513] __nla_validate_parse: 194 callbacks suppressed
[   79.155521][ T8513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.788'.
[   79.252276][ T8530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.793'.
[   79.277716][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[   79.281273][ T8530] bridge_slave_1: left allmulticast mode
[   79.284596][ T8530] bridge_slave_1: left promiscuous mode
[   79.289182][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.294218][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'.
[   79.298118][ T8530] bridge_slave_0: left promiscuous mode
[   79.300434][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.472443][ T8540] netlink: 244 bytes leftover after parsing attributes in process `syz.0.796'.
[   79.556734][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[   79.725978][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[   79.729082][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[   79.786496][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'.
[   79.834851][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'.
[   80.036695][ T8604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.042167][ T8604] tipc: Resetting bearer <eth:syzkaller0>
[   80.045836][ T8602] tipc: Disabling bearer <eth:syzkaller0>
[   80.349806][ T8662] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   80.560843][ T8684] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   81.055956][ T8757] bridge3: entered promiscuous mode
[   81.057997][ T8757] bridge3: entered allmulticast mode
[   81.112426][ T8763] IPv6: sit2: Disabled Multicast RS
[   81.210380][ T8780] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   81.213857][ T8775] sctp: [Deprecated]: syz.2.877 (pid 8775) Use of int in max_burst socket option deprecated.
[   81.213857][ T8775] Use struct sctp_assoc_value instead
[   81.403250][ T8800] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[   81.407398][ T8800] bond4: (slave vxcan1): Error -95 calling set_mac_address
[   81.453998][ T8802] macvlan3: entered promiscuous mode
[   81.456849][ T8802] macvlan3: entered allmulticast mode
[   81.459371][ T8802] bond4: (slave macvlan3): Error -98 calling set_mac_address
[   81.652522][ T8821] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   82.222964][ T8860] 8021q: adding VLAN 0 to HW filter on device bond5
[   82.233471][ T8863] bond5: (slave veth3): Enslaving as an active interface with a down link
[   82.599285][ T8832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   82.627922][ T8871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.724420][ T8883] lo speed is unknown, defaulting to 1000
[   82.759138][ T8888] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   82.934380][ T8905] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   82.954766][ T8911] tc_dump_action: action bad kind
[   83.097311][ T8923] team0: Port device vlan0 removed
[   83.119185][   T36] smc: removing ib device syz1
[   83.125878][ T5911] syz1: Port: 1 Link DOWN
[   83.251263][ T8937] validate_nla: 11 callbacks suppressed
[   83.251275][ T8937] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[   83.295043][ T8942] netlink: 'syz.2.931': attribute type 4 has an invalid length.
[   83.323927][ T8933] block nbd0: server does not support multiple connections per device.
[   83.327235][ T8933] block nbd0: shutting down sockets
[   83.359048][ T8946] netlink: 'syz.1.933': attribute type 1 has an invalid length.
[   83.362194][ T8946] netlink: 'syz.1.933': attribute type 4 has an invalid length.
[   83.379456][ T8951] netlink: 'syz.1.935': attribute type 83 has an invalid length.
[   83.459589][ T8967] netlink: 'syz.0.939': attribute type 13 has an invalid length.
[   83.598911][ T8984] IPv6: sit1: Disabled Multicast RS
[   83.601771][ T8984] sit1: entered allmulticast mode
[   83.737185][ T9004] netlink: 'syz.1.951': attribute type 4 has an invalid length.
[   84.264102][ T9041] __nla_validate_parse: 38 callbacks suppressed
[   84.264113][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'.
[   84.300135][ T9047] syzkaller0: entered promiscuous mode
[   84.302487][ T9047] syzkaller0: entered allmulticast mode
[   84.542970][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'.
[   84.572832][ T9083] netlink: 'syz.1.971': attribute type 8 has an invalid length.
[   84.589582][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[   84.662008][   T33] audit: type=1800 audit(1755865448.809:5): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.974" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2022 res=0 errno=0
[   84.677484][   T33] audit: type=1800 audit(1755865448.829:6): pid=9093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.974" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2022 res=0 errno=0
[   84.689178][ T9096] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   84.698093][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'.
[   84.702512][ T9096] bond0: (slave batadv_slave_0): Releasing backup interface
[   84.709767][ T9096] bond2: (slave gretap1): Releasing active interface
[   84.715342][ T9096] bond5: (slave veth3): Releasing active interface
[   84.722959][ T9096] netlink: 'syz.0.975': attribute type 10 has an invalid length.
[   84.728386][ T9096] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   84.735676][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.739766][ T9096] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.787104][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'.
[   84.994762][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'.
[   85.049679][ T9126] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   85.087733][ T9133] lo speed is unknown, defaulting to 1000
[   85.340438][ T9147] xt_time: unknown flags 0xf4
[   85.404013][ T9155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'.
[   85.599274][ T9189] dvmrp8: entered allmulticast mode
[   85.632019][ T9191] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1004'.
[   85.765064][ T9213] dvmrp0: entered allmulticast mode
[   85.784581][ T9217] Driver unsupported XDP return value 0 on prog  (id 238) dev N/A, expect packet loss!
[   85.825084][ T9228] veth0_to_bond: entered allmulticast mode
[   85.872468][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'.
[   85.969175][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1019'.
[   85.975631][ T9249] gretap0: entered promiscuous mode
[   85.978896][ T9249] gretap0: left promiscuous mode
[   86.141006][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ee93400: rx timeout, send abort
[   86.144666][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802ee91000: rx timeout, send abort
[   86.148419][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ee93400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   86.154485][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ee91000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   86.266973][ T9275] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003
[   86.376299][ T9287] netlink: 'syz.2.1032': attribute type 1 has an invalid length.
[   86.403913][ T9292] sctp: [Deprecated]: syz.2.1034 (pid 9292) Use of int in maxseg socket option.
[   86.403913][ T9292] Use struct sctp_assoc_value instead
[   86.528838][ T9313] ip6gretap0: entered promiscuous mode
[   86.598687][ T9320] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.602912][ T9320] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.645481][ T9320] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.649206][ T9320] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.706138][ T9320] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.709376][ T9320] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.805098][ T9320] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.808487][ T9320] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.813923][ T9324] tipc: Cannot configure node identity twice
[   86.816027][ T9324] tipc: Cannot configure node identity twice
[   86.853713][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.857247][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.861980][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.865495][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.871825][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.874971][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.880738][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.883464][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.913988][ T9329] 8021q: adding VLAN 0 to HW filter on device bond6
[   87.296061][ T9366] C: renamed from lo (while UP)
[   87.299698][ T9366] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   87.495990][ T9376] syzkaller0: entered promiscuous mode
[   87.498780][ T9376] syzkaller0: entered allmulticast mode
[   87.583395][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[   87.817473][ T9402] can: request_module (can-proto-4) failed.
[   87.850077][ T9416] sctp: [Deprecated]: syz.2.1074 (pid 9416) Use of int in max_burst socket option.
[   87.850077][ T9416] Use struct sctp_assoc_value instead
[   88.190966][ T9445] geneve2: entered promiscuous mode
[   88.262833][ T9451] validate_nla: 4 callbacks suppressed
[   88.262847][ T9451] netlink: 'syz.0.1088': attribute type 1 has an invalid length.
[   88.346922][ T9467] openvswitch: netlink: IP tunnel attribute has 10520 unknown bytes.
[   88.451622][ T9479] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   88.455811][ T9480] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   88.482525][ T9483] tipc: Enabled bearer <eth:gre0>, priority 10
[   88.749776][ T9500] dvmrp8: entered allmulticast mode
[   89.456828][ T9502] tipc: Enabled bearer <eth:team0>, priority 0
[   89.482971][ T9504] __nla_validate_parse: 16 callbacks suppressed
[   89.482981][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[   89.518163][ T9506] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1107'.
[   89.522601][ T9506] netlink: zone id is out of range
[   89.525881][ T9497] dvmrp8: left allmulticast mode
[   89.529117][ T9506] netlink: zone id is out of range
[   89.531430][ T9506] netlink: zone id is out of range
[   89.534360][ T9506] netlink: zone id is out of range
[   89.536197][ T9506] netlink: zone id is out of range
[   89.538351][ T9506] netlink: get zone limit has 8 unknown bytes
[   89.626332][ T9512] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   89.663523][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[   90.358052][ T9537] lo speed is unknown, defaulting to 1000
[   90.525874][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1115'.
[   90.595974][ T9552] openvswitch: netlink: IPv4 tun info is not correct
[   90.804806][ T9567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.829476][ T9570] tipc: Disabling bearer <eth:syzkaller0>
[   90.868445][ T9572] ieee802154 phy0 wpan0: encryption failed: -22
[   90.871685][ T9572] netlink: 'syz.1.1122': attribute type 1 has an invalid length.
[   90.874825][ T9572] netlink: 'syz.1.1122': attribute type 2 has an invalid length.
[   90.972255][ T9579] pim6reg: entered allmulticast mode
[   90.976032][ T9579] pim6reg: left allmulticast mode
[   91.038015][ T9579] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   91.042139][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'.
[   91.045761][ T9579] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[   91.049021][ T9579] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[   91.052138][ T9579] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[   91.073391][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'.
[   91.083386][ T9579] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1126'.
[   91.087104][ T9579] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[   91.092300][ T9579] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[   91.095521][ T9579] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[   91.099109][ T9579] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1126'.
[   91.102588][ T9579] netlink: 1632 bytes leftover after parsing attributes in process `syz.0.1126'.
[   91.706636][ T9620] lo speed is unknown, defaulting to 1000
[   91.863400][ T9630] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1142'.
[   92.089584][ T9652] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   92.401279][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1155'.
[   92.494842][ T9682] netlink: 'syz.2.1159': attribute type 12 has an invalid length.
[   92.538754][ T9675] lo speed is unknown, defaulting to 1000
[   92.545168][ T9687] lo speed is unknown, defaulting to 1000
[   93.045618][ T9663] delete_channel: no stack
[   94.086954][ T9740] bond0: entered promiscuous mode
[   94.088706][ T9740] bond_slave_0: entered promiscuous mode
[   94.090784][ T9740] bond_slave_1: entered promiscuous mode
[   94.093839][ T9740] bond0: left promiscuous mode
[   94.095765][ T9740] bond_slave_0: left promiscuous mode
[   94.097720][ T9743] syz.0.1173: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   94.097755][ T9740] bond_slave_1: left promiscuous mode
[   94.102493][ T9743] CPU: 1 UID: 0 PID: 9743 Comm: syz.0.1173 Not tainted syzkaller #0 PREEMPT(full) 
[   94.102504][ T9743] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.102509][ T9743] Call Trace:
[   94.102513][ T9743]  <TASK>
[   94.102517][ T9743]  dump_stack_lvl+0x189/0x250
[   94.102531][ T9743]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.102564][ T9743]  ? __pfx__printk+0x10/0x10
[   94.102574][ T9743]  ? lock_release+0x4b/0x3e0
[   94.102586][ T9743]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   94.102597][ T9743]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   94.102606][ T9743]  warn_alloc+0x214/0x310
[   94.102619][ T9743]  ? stack_depot_save_flags+0x40/0x860
[   94.102628][ T9743]  ? __pfx_warn_alloc+0x10/0x10
[   94.102638][ T9743]  ? kasan_save_track+0x4f/0x80
[   94.102646][ T9743]  ? xskq_create+0x56/0x170
[   94.102657][ T9743]  ? xsk_init_queue+0xb0/0x110
[   94.102665][ T9743]  ? xsk_setsockopt+0x4dc/0x8d0
[   94.102673][ T9743]  ? do_sock_setsockopt+0x17c/0x1b0
[   94.102680][ T9743]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   94.102686][ T9743]  ? do_syscall_64+0xfa/0x3b0
[   94.102693][ T9743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.102701][ T9743]  __vmalloc_node_range_noprof+0x125/0x12f0
[   94.102716][ T9743]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   94.102726][ T9743]  ? xskq_create+0x56/0x170
[   94.102737][ T9743]  ? __kasan_kmalloc+0x93/0xb0
[   94.102747][ T9743]  vmalloc_user_noprof+0xad/0xf0
[   94.102757][ T9743]  ? xskq_create+0xbf/0x170
[   94.102766][ T9743]  xskq_create+0xbf/0x170
[   94.102775][ T9743]  xsk_init_queue+0xb0/0x110
[   94.102784][ T9743]  xsk_setsockopt+0x4dc/0x8d0
[   94.102793][ T9743]  ? __pfx_xsk_setsockopt+0x10/0x10
[   94.102802][ T9743]  ? __pfx_aa_sk_perm+0x10/0x10
[   94.102812][ T9743]  ? lock_release+0x4b/0x3e0
[   94.102821][ T9743]  ? aa_sock_opt_perm+0xff/0x1b0
[   94.102828][ T9743]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   94.102836][ T9743]  ? __pfx_xsk_setsockopt+0x10/0x10
[   94.102845][ T9743]  do_sock_setsockopt+0x17c/0x1b0
[   94.102852][ T9743]  __x64_sys_setsockopt+0x13f/0x1b0
[   94.102859][ T9743]  do_syscall_64+0xfa/0x3b0
[   94.102865][ T9743]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.102871][ T9743]  ? exc_page_fault+0x9f/0xf0
[   94.102881][ T9743]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.102888][ T9743] RIP: 0033:0x7fd2ddf8ebe9
[   94.102895][ T9743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.102901][ T9743] RSP: 002b:00007fd2dee93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   94.102909][ T9743] RAX: ffffffffffffffda RBX: 00007fd2de1b6090 RCX: 00007fd2ddf8ebe9
[   94.102914][ T9743] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[   94.102918][ T9743] RBP: 00007fd2de011e19 R08: 0000000000000004 R09: 0000000000000000
[   94.102923][ T9743] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.102927][ T9743] R13: 00007fd2de1b6128 R14: 00007fd2de1b6090 R15: 00007ffca01a36d8
[   94.102934][ T9743]  </TASK>
[   94.102937][ T9743] Mem-Info:
[   94.216971][ T9743] active_anon:4477 inactive_anon:0 isolated_anon:0
[   94.216971][ T9743]  active_file:1465 inactive_file:38226 isolated_file:0
[   94.216971][ T9743]  unevictable:1768 dirty:110 writeback:0
[   94.216971][ T9743]  slab_reclaimable:9982 slab_unreclaimable:56168
[   94.216971][ T9743]  mapped:19203 shmem:2458 pagetables:901
[   94.216971][ T9743]  sec_pagetables:0 bounce:0
[   94.216971][ T9743]  kernel_misc_reclaimable:0
[   94.216971][ T9743]  free:292054 free_pcp:22430 free_cma:0
[   94.236610][ T9743] Node 0 active_anon:11540kB inactive_anon:0kB active_file:3844kB inactive_file:9140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51060kB dirty:240kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5520kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.247054][ T9743] Node 1 active_anon:6232kB inactive_anon:0kB active_file:2016kB inactive_file:143764kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25752kB dirty:200kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6752kB pagetables:1420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.247898][ T9749] IPv6: addrconf: prefix option has invalid lifetime
[   94.257796][ T9743] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   94.260881][ T9742] bond0: entered promiscuous mode
[   94.269412][ T9743] lowmem_reserve[]: 0 811 811 811 811
[   94.269434][ T9743] Node 0 DMA32 free:411476kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11608kB inactive_anon:0kB active_file:3844kB inactive_file:9140kB unevictable:3536kB writepending:240kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:40356kB local_pcp:19652kB free_cma:0kB
[   94.269458][ T9743] lowmem_reserve[]: 0 0 0 0 0
[   94.269473][ T9743] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   94.269494][ T9743] lowmem_reserve[]: 0 0 854 854 854
[   94.269509][ T9743] Node 1 Normal free:282000kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6232kB inactive_anon:0kB active_file:2016kB inactive_file:143764kB unevictable:3536kB writepending:200kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49632kB local_pcp:27352kB free_cma:0kB
[   94.269552][ T9743] lowmem_reserve[]: 0 0 0 0 0
[   94.269568][ T9743] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   94.269622][ T9743] Node 0 DMA32: 1171*4kB (UM) 633*8kB (UME) 376*16kB (UME) 
[   94.275802][ T9742] bond_slave_0: entered promiscuous mode
[   94.293911][ T9743] 550*32kB 
[   94.300626][ T9742] bond_slave_1: entered promiscuous mode
[   94.301265][ T9742] bond0: left promiscuous mode
[   94.311581][ T9743] (UME) 
[   94.323644][ T9742] bond_slave_0: left promiscuous mode
[   94.323783][ T9742] bond_slave_1: left promiscuous mode
[   94.325787][ T9743] 92*64kB (UM) 46*128kB (UM) 23*256kB (UME) 4*512kB (UME) 0*1024kB 3*2048kB (UME) 86*4096kB (M) = 411476kB
[   94.336064][ T9743] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   94.336238][ T9746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.341448][ T9743] Node 1 Normal: 654*4kB (UM) 435*8kB (UM) 230*16kB (UM) 285*32kB (UME) 21*64kB (UE) 14*128kB (UE) 9*256kB (UE) 3*512kB (UM) 8*1024kB (UME) 3*2048kB (UME) 61*4096kB (M) = 290064kB
[   94.341515][ T9743] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.345082][ T9747] syzkaller0: entered promiscuous mode
[   94.350732][ T9743] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.354837][ T9747] syzkaller0: entered allmulticast mode
[   94.355578][ T9743] 42149 total pagecache pages
[   94.355583][ T9743] 0 pages in swap cache
[   94.355586][ T9743] Free swap  = 124996kB
[   94.355589][ T9743] Total swap = 124996kB
[   94.355593][ T9743] 786301 pages RAM
[   94.355596][ T9743] 0 pages HighMem/MovableOnly
[   94.355598][ T9743] 241337 pages reserved
[   94.355601][ T9743] 0 pages cma reserved
[   94.495692][ T9768] __nla_validate_parse: 7 callbacks suppressed
[   94.495703][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'.
[   94.534518][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'.
[   94.537965][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'.
[   94.541324][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1182'.
[   94.868619][ T9738] tipc: Resetting bearer <eth:syzkaller0>
[   94.873425][ T9738] tipc: Disabling bearer <eth:syzkaller0>
[   95.317053][ T9806] validate_nla: 1 callbacks suppressed
[   95.317068][ T9806] netlink: 'syz.1.1190': attribute type 21 has an invalid length.
[   95.322055][ T9806] netlink: 'syz.1.1190': attribute type 6 has an invalid length.
[   95.325127][ T9806] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1190'.
[   95.372935][ T9815] netlink: del zone limit has 4 unknown bytes
[   95.409890][ T9823] smc: net device bond0 applied user defined pnetid SYZ2
[   95.419842][ T9821] smc: net device bond0 erased user defined pnetid SYZ2
[   95.485773][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'.
[   95.608355][ T9856] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.611610][ T9856] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   95.758165][ T9867] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1213'.
[   95.930447][ T9885] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   95.989689][ T9885] netlink: 'syz.0.1219': attribute type 21 has an invalid length.
[   95.992232][ T9885] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1219'.
[   96.430285][ T9905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.433976][ T9905] syzkaller0: entered promiscuous mode
[   96.436137][ T9905] syzkaller0: entered allmulticast mode
[   96.437095][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1226'.
[   96.448471][ T9905] tipc: Resetting bearer <eth:syzkaller0>
[   96.452502][ T9904] tipc: Resetting bearer <eth:syzkaller0>
[   96.456410][ T9904] tipc: Disabling bearer <eth:syzkaller0>
[   96.462281][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'.
[   96.476750][ T9910] bridge3: port 1(veth9) entered blocking state
[   96.478927][ T9910] bridge3: port 1(veth9) entered disabled state
[   96.481142][ T9910] veth9: entered allmulticast mode
[   96.483397][ T9910] veth9: entered promiscuous mode
[   96.489326][ T9910] bridge3: port 2(veth0_to_bond) entered blocking state
[   96.492499][ T9910] bridge3: port 2(veth0_to_bond) entered disabled state
[   96.496436][ T9910] veth0_to_bond: entered allmulticast mode
[   96.499441][ T9910] veth0_to_bond: entered promiscuous mode
[   96.507688][ T9910] vlan0: entered allmulticast mode
[   96.512797][ T9910] veth0_to_hsr: entered allmulticast mode
[   96.524838][ T9910] bridge3: port 3(vlan0) entered blocking state
[   96.527726][ T9910] bridge3: port 3(vlan0) entered disabled state
[   96.531447][ T9910] vlan0: entered promiscuous mode
[   96.534190][ T9910] veth0_to_hsr: entered promiscuous mode
[   96.699414][ T9951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.702169][ T9954] syzkaller0: entered promiscuous mode
[   96.706013][ T9954] syzkaller0: entered allmulticast mode
[   96.726824][ T9954] tipc: Resetting bearer <eth:syzkaller0>
[   96.737654][ T9954] tipc: Disabling bearer <eth:syzkaller0>
[   96.806691][ T9975] netlink: 'syz.2.1246': attribute type 3 has an invalid length.
[   96.843812][ T9978] netlink: 'syz.1.1247': attribute type 2 has an invalid length.
[   96.861847][ T9985] lo speed is unknown, defaulting to 1000
[   97.069008][T10003] netlink: 'syz.1.1257': attribute type 1 has an invalid length.
[   97.102929][T10001] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[   97.246458][T10011] lo speed is unknown, defaulting to 1000
[   97.252466][T10015] netlink: 'syz.0.1261': attribute type 2 has an invalid length.
[   97.642941][T10041] veth1_macvtap: left promiscuous mode
[   97.647285][T10041] macsec0: entered promiscuous mode
[   97.649142][T10041] macsec0: entered allmulticast mode
[   97.654658][T10041] veth1_macvtap: entered promiscuous mode
[   97.657946][T10041] veth1_macvtap: entered allmulticast mode
[   97.660036][T10041] macsec0: left promiscuous mode
[   97.662091][T10041] macsec0: left allmulticast mode
[   97.664283][T10041] veth1_macvtap: left allmulticast mode
[   97.680702][T10047] netlink: 'syz.0.1273': attribute type 1 has an invalid length.
[   97.714810][T10054] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.719795][T10054] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.751212][T10060] pimreg3: entered allmulticast mode
[   97.799413][T10068] openvswitch: netlink: Missing key (keys=40, expected=80)
[   97.929705][T10087] netlink: 'syz.2.1288': attribute type 9 has an invalid length.
[   97.934925][T10087] hsr0: entered promiscuous mode
[   97.936729][T10087] macvlan0: entered promiscuous mode
[   97.938651][T10087] macvlan0: entered allmulticast mode
[   97.940562][T10087] hsr0: entered allmulticast mode
[   97.942333][T10087] hsr_slave_0: entered allmulticast mode
[   97.945413][T10087] hsr_slave_1: entered allmulticast mode
[   98.107256][T10116] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[   98.211153][T10128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.229992][T10136] vlan1: entered allmulticast mode
[   98.231854][T10136] bridge_slave_0: entered allmulticast mode
[   98.704377][T10166] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   98.939630][T10183] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   99.076597][   T33] audit: type=1107 audit(1755865463.229:7): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   99.085198][T10198] dummy0: left promiscuous mode
[   99.088635][T10198] team0: Port device dummy0 removed
[   99.091613][T10198] bond0: (slave bond_slave_0): Releasing backup interface
[   99.096731][T10198] bond0: (slave bond_slave_1): Releasing backup interface
[   99.100338][T10198] team_slave_0: left promiscuous mode
[   99.103419][T10198] team0: Port device team_slave_0 removed
[   99.105919][T10198] team_slave_1: left promiscuous mode
[   99.108353][T10198] team0: Port device team_slave_1 removed
[   99.111382][T10198] bond2: (slave macvlan2): Removing an active aggregator
[   99.114556][T10198] bond2: (slave macvlan2): Releasing backup interface
[   99.125631][T10198] team0: Mode changed to "broadcast"
[   99.180761][T10203] syzkaller0: entered promiscuous mode
[   99.183264][T10203] syzkaller0: refused to change device tx_queue_len
[   99.422181][   T33] audit: type=1800 audit(1755865463.569:8): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1331" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2592 res=0 errno=0
[   99.432194][   T33] audit: type=1800 audit(1755865463.589:9): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1331" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2592 res=0 errno=0
[   99.455816][   T33] audit: type=1800 audit(1755865463.599:10): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1331" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2592 res=0 errno=0
[   99.517708][T10238] __nla_validate_parse: 163 callbacks suppressed
[   99.517725][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1335'.
[   99.543474][T10240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1336'.
[   99.591524][T10246] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1339'.
[   99.598053][T10245] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[   99.672173][T10253] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   99.696467][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1342'.
[   99.719712][T10265] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   99.830521][T10274] batadv_slave_1: entered promiscuous mode
[   99.847419][T10274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1346'.
[   99.857179][T10272] batadv_slave_1: left promiscuous mode
[  100.057385][T10289] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  100.090110][T10289] ip6gre1: left allmulticast mode
[  100.107529][T10289] hsr0: left allmulticast mode
[  100.109150][T10289] hsr_slave_0: left allmulticast mode
[  100.110883][T10289] hsr_slave_1: left allmulticast mode
[  100.113367][T10289] macvlan0: left promiscuous mode
[  100.115248][T10289] macvlan0: left allmulticast mode
[  100.119485][ T7721] lo speed is unknown, defaulting to 1000
[  100.121722][ T5869] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.121795][ T7721] syz2: Port: 1 Link DOWN
[  100.124948][ T5869] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.138017][ T5869] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.141367][ T5869] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.147648][ T5869] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.153985][ T5869] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.157179][ T5869] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.160214][ T5869] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.185640][T10303] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  100.189343][T10303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1355'.
[  100.192565][T10303] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  100.202606][T10314] C: renamed from lo
[  100.208144][T10314] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  100.214677][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'.
[  100.222218][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  100.264074][T10323] pim6reg: entered allmulticast mode
[  100.270296][T10322] pim6reg: left allmulticast mode
[  100.304571][T10329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1362'.
[  100.308005][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  100.345920][T10333] validate_nla: 2 callbacks suppressed
[  100.345931][T10333] netlink: 'syz.1.1363': attribute type 1 has an invalid length.
[  100.358123][T10333] 8021q: adding VLAN 0 to HW filter on device bond4
[  100.363954][T10333] vlan0: entered promiscuous mode
[  100.365670][T10333] bond4: entered promiscuous mode
[  100.367465][T10333] vlan0: entered allmulticast mode
[  100.369304][T10333] bond4: entered allmulticast mode
[  100.375636][T10333] bond4: (slave gretap2): making interface the new active one
[  100.378330][T10333] gretap2: entered promiscuous mode
[  100.380225][T10333] gretap2: entered allmulticast mode
[  100.383056][T10333] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  100.406660][T10333] syz.1.1363 (10333) used greatest stack depth: 18952 bytes left
[  100.510885][T10347] bridge3: entered allmulticast mode
[  100.552176][T10349] C speed is unknown, defaulting to 1000
[  100.567326][T10350] C speed is unknown, defaulting to 1000
[  101.597554][T10396] team0: Device gtp0 is up. Set it down before adding it as a team port
[  102.015788][T10467] batadv_slave_0: entered promiscuous mode
[  102.022758][T10467] batadv_slave_0: left promiscuous mode
[  102.121739][T10485] netlink: 'syz.1.1412': attribute type 2 has an invalid length.
[  102.125609][T10485] netlink: 'syz.1.1412': attribute type 2 has an invalid length.
[  102.128194][T10485] netlink: 'syz.1.1412': attribute type 2 has an invalid length.
[  102.131006][T10485] netlink: 'syz.1.1412': attribute type 2 has an invalid length.
[  102.138891][T10485] netlink: 'syz.1.1412': attribute type 2 has an invalid length.
[  102.160907][T10494] netlink: 'syz.1.1416': attribute type 8 has an invalid length.
[  102.178140][T10491] syzkaller0: entered promiscuous mode
[  102.179900][T10491] syzkaller0: entered allmulticast mode
[  102.226562][T10499] netlink: 'syz.1.1418': attribute type 1 has an invalid length.
[  102.229230][T10499] netlink: 'syz.1.1418': attribute type 2 has an invalid length.
[  102.236387][T10499] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  102.401214][T10517] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  102.621006][T10555] netdevsim0: entered allmulticast mode
[  102.777104][T10574] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  102.786209][T10574] netlink: 'syz.0.1436': attribute type 1 has an invalid length.
[  102.816913][T10574] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  102.822037][T10574] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  102.828359][T10574] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  102.921296][T10595] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  102.947688][T10595] team0: Mode "" not found
[  102.983784][T10602] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  102.987389][T10602] syzkaller0: entered promiscuous mode
[  102.989537][T10602] syzkaller0: entered allmulticast mode
[  104.036032][T10734] vlan1: entered promiscuous mode
[  104.039426][T10734] bridge0: entered promiscuous mode
[  104.349928][T10775] only policy match revision 0 supported
[  104.349943][T10775] unable to load match
[  104.895380][T10795] __nla_validate_parse: 67 callbacks suppressed
[  104.895392][T10795] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1482'.
[  104.901196][T10795] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  104.906301][T10795] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  105.102663][T10810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.142002][T10815] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20002
[  105.287875][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'.
[  105.383757][T10839] ieee802154 phy0 wpan0: encryption failed: -22
[  105.389715][T10838] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  105.395625][T10838] syzkaller0: entered promiscuous mode
[  105.399264][T10838] syzkaller0: entered allmulticast mode
[  105.406681][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'.
[  105.418333][T10842] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1497'.
[  105.449229][T10846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1498'.
[  105.480976][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  105.639143][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'.
[  105.640209][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'.
[  105.642499][T10871] validate_nla: 2 callbacks suppressed
[  105.642510][T10871] netlink: 'syz.1.1506': attribute type 1 has an invalid length.
[  105.653190][T10871] netlink: 'syz.1.1506': attribute type 2 has an invalid length.
[  105.657579][T10871] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1506'.
[  105.666572][T10871] smc: net device bond0 applied user defined pnetid SYZ2
[  105.670845][T10871] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1506'.
[  105.675301][T10873] netlink: 'syz.0.1508': attribute type 13 has an invalid length.
[  105.678168][T10873] netlink: 'syz.0.1508': attribute type 17 has an invalid length.
[  105.681059][T10873] netlink: 'syz.0.1508': attribute type 27 has an invalid length.
[  105.681437][T10871] smc: removing net device bond0 with user defined pnetid SYZ2
[  105.684226][T10873] netlink: 'syz.0.1508': attribute type 13 has an invalid length.
[  105.687313][T10871] bond0 (unregistering): Released all slaves
[  105.689844][T10873] netlink: 'syz.0.1508': attribute type 17 has an invalid length.
[  105.689854][T10873] netlink: 'syz.0.1508': attribute type 27 has an invalid length.
[  105.698856][T10873] netlink: 'syz.0.1508': attribute type 13 has an invalid length.
[  105.701453][T10873] netlink: 'syz.0.1508': attribute type 17 has an invalid length.
[  106.165720][T10939] xt_policy: too many policy elements
[  106.260504][T10948] syzkaller1: entered promiscuous mode
[  106.262968][T10948] syzkaller1: entered allmulticast mode
[  106.378294][T10956] bond0: Master is either lo or non-ether device
[  106.542085][T10974] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  106.546113][T10974] syzkaller0: entered promiscuous mode
[  106.548038][T10974] syzkaller0: entered allmulticast mode
[  106.853645][T10994] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  106.905580][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.907449][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.909664][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.911515][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.914273][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.919241][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.921678][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.924196][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.926575][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.929032][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.931438][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.934380][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.936795][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.939191][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.941615][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.944288][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.946622][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.948817][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.951137][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.953450][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  106.955893][T10999] tap0: tun_chr_ioctl cmd 1074025673
[  107.034078][T11005] veth1_to_bond: entered allmulticast mode
[  107.036169][T11005] bond_slave_1: entered promiscuous mode
[  107.040278][T11005] bond_slave_1: left promiscuous mode
[  107.042429][T11005] veth1_to_bond: left allmulticast mode
[  107.218653][T11030] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  107.221730][T11030] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  107.631618][T11094] bond9: entered promiscuous mode
[  107.633721][T11094] 8021q: adding VLAN 0 to HW filter on device bond9
[  107.654778][T11097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.658698][T11097] syzkaller0: entered promiscuous mode
[  107.660623][T11097] syzkaller0: entered allmulticast mode
[  107.665841][T11097] tipc: Resetting bearer <eth:syzkaller0>
[  107.669040][T11097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.672623][T11096] tipc: Resetting bearer <eth:syzkaller0>
[  107.676867][T11096] tipc: Disabling bearer <eth:syzkaller0>
[  108.549669][T11134] syzkaller1: entered promiscuous mode
[  108.551798][T11134] syzkaller1: entered allmulticast mode
[  108.665057][T11145] block nbd0: shutting down sockets
[  109.333216][T11154] syzkaller0: entered promiscuous mode
[  109.335208][T11154] syzkaller0: entered allmulticast mode
[  109.450571][T11156] xt_time: unknown flags 0xf4
[  109.600644][T11171] bond10: (slave gretap2): making interface the new active one
[  109.605533][T11171] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  109.610253][T11171] 8021q: adding VLAN 0 to HW filter on device bond10
[  109.746617][ T5872] IPVS: starting estimator thread 0...
[  109.833512][T11202] IPVS: using max 134 ests per chain, 321600 per kthread
[  109.839339][T11213] tap0: tun_chr_ioctl cmd 35108
[  109.870270][T11219] C speed is unknown, defaulting to 1000
[  109.875368][T11218] C speed is unknown, defaulting to 1000
[  110.064520][T11250] smc: adding net device bond0 with user defined pnetid SYZ2
[  110.099671][T11254] __nla_validate_parse: 28 callbacks suppressed
[  110.099684][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1624'.
[  110.216865][T11260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1626'.
[  110.236613][T11264] vlan0: left allmulticast mode
[  110.238461][T11264] veth0_to_hsr: left allmulticast mode
[  110.240620][T11264] bridge3: port 3(vlan0) entered disabled state
[  110.244386][T11264] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  110.261427][T11268] C speed is unknown, defaulting to 1000
[  110.299243][T11272] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1630'.
[  110.828496][T11281] validate_nla: 102 callbacks suppressed
[  110.828510][T11281] netlink: 'syz.0.1633': attribute type 1 has an invalid length.
[  110.955133][T11291] smc: net device bond0 applied user defined pnetid SYZ2
[  111.105127][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'.
[  111.110893][T11310] syzkaller1: entered promiscuous mode
[  111.112856][T11310] syzkaller1: entered allmulticast mode
[  111.942310][T11326] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  111.944875][T11326] netlink: 'syz.1.1647': attribute type 2 has an invalid length.
[  111.969023][T11333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'.
[  111.973799][T11333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'.
[  111.977890][T11333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'.
[  111.981951][T11333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'.
[  112.064237][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'.
[  112.067365][T11348] vcan0: tx drop: invalid sa for name 0x0000000000004000
[  112.070623][T11346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1654'.
[  112.075641][T11346] netlink: 'syz.1.1654': attribute type 6 has an invalid length.
[  112.118714][T11354] netlink: 'syz.2.1658': attribute type 83 has an invalid length.
[  112.123074][T11354] netlink: 'syz.2.1658': attribute type 83 has an invalid length.
[  112.220475][T11348] tipc: Resetting bearer <eth:geneve1>
[  112.251291][T11358] netlink: 'syz.2.1659': attribute type 29 has an invalid length.
[  112.255735][ T5869] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.258491][ T5869] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.261741][ T5869] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.264814][ T5869] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.269216][ T5869] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.273529][ T5869] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.276293][ T5869] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.279008][ T5869] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.292513][T11365] nftables ruleset with unbound set
[  112.411361][T11382] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  112.417820][T11382] syzkaller0: entered promiscuous mode
[  112.419806][T11382] syzkaller0: entered allmulticast mode
[  112.488267][T11387] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  112.587373][T11398] netlink: 'syz.2.1670': attribute type 4 has an invalid length.
[  112.652389][T11409] C speed is unknown, defaulting to 1000
[  113.259864][T11444] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[  113.262789][T11444] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[  113.558863][T11455] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  113.562805][T11454] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  113.570241][T11455] bridge4: entered promiscuous mode
[  113.572086][T11455] bridge4: entered allmulticast mode
[  113.575398][T11455] team0: Port device bridge4 added
[  113.580267][T11454] bridge5: entered promiscuous mode
[  113.582115][T11454] bridge5: entered allmulticast mode
[  113.586672][T11454] team0: Port device bridge5 added
[  113.983760][   T55] Bluetooth: hci0: command tx timeout
[  114.109025][T11471] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  114.267030][T11489] netlink: 'syz.0.1701': attribute type 1 has an invalid length.
[  114.275871][T11489] 8021q: adding VLAN 0 to HW filter on device bond11
[  114.288504][T11489] 8021q: adding VLAN 0 to HW filter on device bond11
[  114.290852][T11489] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  114.295490][T11489] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  114.349406][T11500] veth7: entered promiscuous mode
[  114.357188][T11500] bond11: (slave veth7): Enslaving as an active interface with a down link
[  114.364100][T11489] 8021q: adding VLAN 0 to HW filter on device bond11
[  114.542674][T11529] siw: device registration error -23
[  114.578598][T11533] netlink: 'syz.1.1717': attribute type 7 has an invalid length.
[  114.582852][T11533] netlink: 'syz.1.1717': attribute type 8 has an invalid length.
[  114.627591][T11535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.630780][T11535] syzkaller0: entered promiscuous mode
[  114.633224][T11535] syzkaller0: entered allmulticast mode
[  115.430977][T11560] __nla_validate_parse: 22 callbacks suppressed
[  115.430987][T11560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1726'.
[  115.457941][T11534] tipc: Resetting bearer <eth:syzkaller0>
[  115.462351][T11534] tipc: Disabling bearer <eth:syzkaller0>
[  115.605052][T11587] C speed is unknown, defaulting to 1000
[  115.628753][ T5911] IPVS: starting estimator thread 0...
[  115.631309][T11587] ieee802154 phy0 wpan0: encryption failed: -22
[  115.693337][T11601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1736'.
[  115.735010][T11594] IPVS: using max 135 ests per chain, 324000 per kthread
[  115.869482][ T5869] IPVS: stop unused estimator thread 0...
[  115.884732][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1743'.
[  116.100117][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'.
[  116.166595][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'.
[  116.359623][T11643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1751'.
[  116.362698][T11643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1751'.
[  116.458846][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'.
[  116.467838][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'.
[  116.472011][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'.
[  116.498294][T11662] C speed is unknown, defaulting to 1000
[  116.902325][T11711] netlink: 'syz.0.1772': attribute type 13 has an invalid length.
[  116.907299][T11711] netlink: 'syz.0.1772': attribute type 17 has an invalid length.
[  116.939320][T11711] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.943976][T11711] 8021q: adding VLAN 0 to HW filter on device team0
[  117.010665][T11711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.019690][T11715] geneve3: entered allmulticast mode
[  117.039648][T11711] C speed is unknown, defaulting to 1000
[  117.039687][T11718] netlink: 'syz.2.1774': attribute type 1 has an invalid length.
[  117.425291][T11744] netlink: 'syz.2.1784': attribute type 2 has an invalid length.
[  117.527580][T11748] netlink: 'syz.2.1786': attribute type 3 has an invalid length.
[  117.530424][T11748] netlink: 'syz.2.1786': attribute type 3 has an invalid length.
[  117.558821][T11753] veth12: entered allmulticast mode
[  117.743550][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  117.923563][T11797] netlink: 'syz.2.1802': attribute type 13 has an invalid length.
[  117.941770][T11810] netlink: 'syz.0.1806': attribute type 1 has an invalid length.
[  118.041951][T11829] C speed is unknown, defaulting to 1000
[  118.100306][T11844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.104323][T11844] syzkaller0: MTU too low for tipc bearer
[  118.106309][T11844] tipc: Disabling bearer <eth:syzkaller0>
[  118.221755][T11860] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  118.630841][T11894] netlink: 'syz.1.1828': attribute type 1 has an invalid length.
[  118.633576][T11894] netlink: 'syz.1.1828': attribute type 1 has an invalid length.
[  118.751320][T11901] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.129982][T11913] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003
[  119.312849][T11955] IPv6: sit1: Disabled Multicast RS
[  119.316335][T11955] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  119.402864][T11960] ip6tnl2: entered promiscuous mode
[  119.404819][T11960] ip6tnl2: entered allmulticast mode
[  119.406978][T11960] team0: Refused to change device type
[  119.516677][T11991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.519782][T11991] syzkaller0: mtu less than device minimum
[  119.522471][T11990] tipc: Disabling bearer <eth:syzkaller0>
[  119.609724][T12006] netdevsim0: entered promiscuous mode
[  119.611553][T12006] netdevsim0: left allmulticast mode
[  119.616808][T12006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  119.868018][T12055] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  120.057057][   T33] audit: type=1800 audit(1755865484.209:11): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1883" name="memory.events" dev="tmpfs" ino=2922 res=0 errno=0
[  120.268149][T12115] C speed is unknown, defaulting to 1000
[  120.352321][T12143] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004
[  120.386917][T12150] 8021q: adding VLAN 0 to HW filter on device bond12
[  120.461403][T12150] __nla_validate_parse: 85 callbacks suppressed
[  120.461417][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1906'.
[  120.482510][T12172] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1911'.
[  120.542110][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'.
[  120.544411][T12177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'.
[  121.349412][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1911'.
[  121.418301][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1917'.
[  121.473891][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'.
[  121.518152][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'.
[  121.570400][T12202] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  121.708205][T12233] vti0: entered promiscuous mode
[  121.747240][T12235] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.788156][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'.
[  121.791914][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1933'.
[  121.903438][   T55] Bluetooth: hci0: command tx timeout
[  122.612640][T12245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.772281][T12268] C speed is unknown, defaulting to 1000
[  123.188589][T12311] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  123.246816][T12318] can: request_module (can-proto-4) failed.
[  123.268261][T12321] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  123.340138][T12329] bridge0: port 1(erspan0) entered blocking state
[  123.342597][T12329] bridge0: port 1(erspan0) entered disabled state
[  123.346851][T12329] erspan0: entered allmulticast mode
[  123.349762][T12329] erspan0: entered promiscuous mode
[  123.352136][T12329] bridge0: port 1(erspan0) entered blocking state
[  123.354465][T12329] bridge0: port 1(erspan0) entered forwarding state
[  123.499672][T12339] wireguard0: entered promiscuous mode
[  123.501596][T12339] wireguard0: entered allmulticast mode
[  123.539606][T12348] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.648325][T12362] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.650860][T12362] syzkaller0: entered promiscuous mode
[  123.652804][T12362] syzkaller0: entered allmulticast mode
[  123.657442][T12362] tipc: Resetting bearer <eth:syzkaller0>
[  123.660837][T12361] tipc: Resetting bearer <eth:syzkaller0>
[  123.673102][T12361] tipc: Disabling bearer <eth:syzkaller0>
[  123.845837][T12388] geneve0: entered promiscuous mode
[  123.848310][ T7531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  123.852648][ T7531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  123.856998][ T7531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  123.859935][ T7531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  124.157676][T12414] C speed is unknown, defaulting to 1000
[  124.412499][T12445] xt_socket: unknown flags 0xfc
[  124.467978][T12449] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[  124.688308][T12483] validate_nla: 10 callbacks suppressed
[  124.688325][T12483] netlink: 'syz.1.2002': attribute type 21 has an invalid length.
[  124.946503][T12538] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20000
[  125.123911][T12561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.126562][T12561] syzkaller0: entered promiscuous mode
[  125.128525][T12561] syzkaller0: entered allmulticast mode
[  125.140036][T12561] tipc: Resetting bearer <eth:syzkaller0>
[  125.144942][T12560] tipc: Resetting bearer <eth:syzkaller0>
[  125.148325][T12560] tipc: Disabling bearer <eth:syzkaller0>
[  125.253477][T12566] netlink: 'syz.0.2029': attribute type 5 has an invalid length.
[  125.267657][T12573] tipc: Cannot configure node identity twice
[  125.292334][T12577] netlink: 'syz.0.2032': attribute type 4 has an invalid length.
[  125.337000][T12581] netlink: 'syz.0.2034': attribute type 2 has an invalid length.
[  125.340478][T12581] netlink: 'syz.0.2034': attribute type 8 has an invalid length.
[  125.354866][T12574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.450933][T12590] netlink: 'syz.0.2037': attribute type 4 has an invalid length.
[  125.465083][T12590] bridge0: port 1(erspan0) entered disabled state
[  125.621421][T12592] __nla_validate_parse: 22 callbacks suppressed
[  125.621438][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'.
[  125.687747][T12599] C speed is unknown, defaulting to 1000
[  125.718210][T12599] netlink: 'syz.2.2040': attribute type 1 has an invalid length.
[  125.720853][T12599] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2040'.
[  125.724052][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'.
[  125.805791][T12607] netlink: 'syz.2.2042': attribute type 6 has an invalid length.
[  125.816918][T12607] bond8: entered promiscuous mode
[  125.827463][T12607] tipc: Bearer <eth:macvtap0>: already 2 bearers with priority 10
[  125.830167][T12607] tipc: Bearer <eth:macvtap0>: trying with adjusted priority
[  125.833590][T12607] tipc: Enabling of bearer <eth:macvtap0> rejected, max 3 bearers permitted
[  125.838043][T12609] netlink: 'syz.2.2042': attribute type 6 has an invalid length.
[  125.841279][T12609] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  125.963244][T12624] 8021q: VLANs not supported on vxcan1
[  126.039662][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'.
[  126.043055][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2051'.
[  126.065607][T12638] C speed is unknown, defaulting to 1000
[  126.090364][T12638] C speed is unknown, defaulting to 1000
[  126.129532][T12646] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  126.144612][T12641] netlink: 'syz.2.2053': attribute type 1 has an invalid length.
[  126.147551][T12641] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.2053'.
[  126.229222][T12589] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  126.250315][T12663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2059'.
[  126.253502][T12663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2059'.
[  126.319854][T12677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2065'.
[  126.381883][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'.
[  126.407429][T12700] k*]: entered promiscuous mode
[  126.419656][T12700] 8021q: adding VLAN 0 to HW filter on device team0
[  126.426556][T12700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.441960][T12700] veth0_to_team: entered promiscuous mode
[  126.444063][T12700] veth0_to_team: entered allmulticast mode
[  126.456375][T12708] 8021q: adding VLAN 0 to HW filter on device bond9
[  126.459331][T12708] bond0: (slave bond9): Enslaving as an active interface with a down link
[  126.487435][T12711] veth0_to_bond: left allmulticast mode
[  126.489856][T12711] veth0_to_team: left promiscuous mode
[  126.492084][T12711] veth0_to_team: left allmulticast mode
[  126.496385][T12711] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  126.499096][T12711] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  126.502682][T12711] vlan0: left promiscuous mode
[  126.504745][T12711] bond4: left promiscuous mode
[  126.506688][T12711] gretap2: left promiscuous mode
[  126.508811][T12711] vlan0: left allmulticast mode
[  126.510816][T12711] bond4: left allmulticast mode
[  126.512915][T12711] gretap2: left allmulticast mode
[  126.515695][T12711] bridge3: left allmulticast mode
[  126.524421][T12711] geneve0: left promiscuous mode
[  126.537868][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.542225][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.545960][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.549154][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.881428][T12748] syzkaller0: entered promiscuous mode
[  126.884044][T12748] syzkaller0: entered allmulticast mode
[  127.048524][T12754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  127.079896][T12758] IPv6: Can't replace route, no match found
[  127.132715][T12762] C speed is unknown, defaulting to 1000
[  127.218926][T12770] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  127.520264][T12728] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  127.540902][T12784] delete_channel: no stack
[  127.602112][T12792] gtp0: entered promiscuous mode
[  128.234459][T12866] ==================================================================
[  128.237184][T12866] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  128.239951][T12866] Read of size 1 at addr ffff88810f2c10b0 by task syz.2.2125/12866
[  128.243473][T12866] 
[  128.244306][T12866] CPU: 0 UID: 0 PID: 12866 Comm: syz.2.2125 Not tainted syzkaller #0 PREEMPT(full) 
[  128.244317][T12866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.244346][T12866] Call Trace:
[  128.244354][T12866]  <TASK>
[  128.244359][T12866]  dump_stack_lvl+0x189/0x250
[  128.244374][T12866]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.244382][T12866]  ? lock_release+0x4b/0x3e0
[  128.244394][T12866]  ? __virt_addr_valid+0x4a5/0x5c0
[  128.244406][T12866]  print_report+0xca/0x240
[  128.244413][T12866]  ? __xfrm_state_insert+0x8af/0x1450
[  128.244422][T12866]  kasan_report+0x118/0x150
[  128.244434][T12866]  ? __xfrm_state_insert+0x8af/0x1450
[  128.244442][T12866]  __xfrm_state_insert+0x8af/0x1450
[  128.244451][T12866]  ? xfrm_state_insert+0x44/0x60
[  128.244458][T12866]  xfrm_state_insert+0x54/0x60
[  128.244466][T12866]  ipcomp6_init_state+0x655/0x900
[  128.244476][T12866]  __xfrm_init_state+0xa76/0x13f0
[  128.244484][T12866]  ? __xfrm_init_state+0x7ef/0x13f0
[  128.244493][T12866]  xfrm_init_state+0x18/0xa0
[  128.244501][T12866]  pfkey_add+0x1d38/0x2e00
[  128.244511][T12866]  ? __pfx_pfkey_add+0x10/0x10
[  128.244517][T12866]  ? kmem_cache_free+0x18f/0x400
[  128.244529][T12866]  pfkey_sendmsg+0xbfe/0x1090
[  128.244536][T12866]  ? trace_sched_exit_tp+0x36/0x110
[  128.244548][T12866]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  128.244558][T12866]  ? rcu_is_watching+0x15/0xb0
[  128.244565][T12866]  ? futex_unqueue+0x22/0x240
[  128.244573][T12866]  ? aa_sock_msg_perm+0xf1/0x1d0
[  128.244581][T12866]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.244589][T12866]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  128.244596][T12866]  __sock_sendmsg+0x21c/0x270
[  128.244607][T12866]  ____sys_sendmsg+0x505/0x830
[  128.244616][T12866]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.244624][T12866]  ? import_iovec+0x74/0xa0
[  128.244633][T12866]  ___sys_sendmsg+0x21f/0x2a0
[  128.244641][T12866]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.244648][T12866]  ? futex_wait+0x285/0x360
[  128.244662][T12866]  ? __fget_files+0x2a/0x420
[  128.244668][T12866]  ? __fget_files+0x3a0/0x420
[  128.244675][T12866]  __x64_sys_sendmsg+0x19b/0x260
[  128.244683][T12866]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.244691][T12866]  ? rcu_is_watching+0x15/0xb0
[  128.244698][T12866]  ? rcu_is_watching+0x15/0xb0
[  128.244705][T12866]  do_syscall_64+0xfa/0x3b0
[  128.244713][T12866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.244720][T12866]  ? exc_page_fault+0x9f/0xf0
[  128.244730][T12866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.244737][T12866] RIP: 0033:0x7fe5fcb8ebe9
[  128.244745][T12866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.244751][T12866] RSP: 002b:00007fe5fda43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.244760][T12866] RAX: ffffffffffffffda RBX: 00007fe5fcdb5fa0 RCX: 00007fe5fcb8ebe9
[  128.244765][T12866] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  128.244770][T12866] RBP: 00007fe5fcc11e19 R08: 0000000000000000 R09: 0000000000000000
[  128.244775][T12866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.244779][T12866] R13: 00007fe5fcdb6038 R14: 00007fe5fcdb5fa0 R15: 00007ffce65c8678
[  128.244787][T12866]  </TASK>
[  128.244790][T12866] 
[  128.364975][T12866] Allocated by task 8153:
[  128.366781][T12866]  kasan_save_track+0x3e/0x80
[  128.368842][T12866]  __kasan_slab_alloc+0x6c/0x80
[  128.370980][T12866]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  128.373240][T12866]  xfrm_state_alloc+0x24/0x2f0
[  128.375241][T12866]  __find_acq_core+0x8a7/0x1c00
[  128.376872][T12866]  xfrm_find_acq+0x78/0xa0
[  128.378410][T12866]  xfrm_alloc_userspi+0x6b3/0xc90
[  128.380470][T12866]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.382430][T12866]  netlink_rcv_skb+0x208/0x470
[  128.384232][T12866]  xfrm_netlink_rcv+0x79/0x90
[  128.385910][T12866]  netlink_unicast+0x82f/0x9e0
[  128.387554][T12866]  netlink_sendmsg+0x805/0xb30
[  128.389154][T12866]  __sock_sendmsg+0x21c/0x270
[  128.390864][T12866]  ____sys_sendmsg+0x505/0x830
[  128.392892][T12866]  ___sys_sendmsg+0x21f/0x2a0
[  128.394918][T12866]  __x64_sys_sendmsg+0x19b/0x260
[  128.397016][T12866]  do_syscall_64+0xfa/0x3b0
[  128.398978][T12866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.401534][T12866] 
[  128.402601][T12866] Freed by task 5911:
[  128.404364][T12866]  kasan_save_track+0x3e/0x80
[  128.406433][T12866]  kasan_save_free_info+0x46/0x50
[  128.408632][T12866]  __kasan_slab_free+0x5b/0x80
[  128.410727][T12866]  kmem_cache_free+0x18f/0x400
[  128.412808][T12866]  xfrm_state_gc_task+0x52d/0x6b0
[  128.414973][T12866]  process_scheduled_works+0xae1/0x17b0
[  128.417264][T12866]  worker_thread+0x8a0/0xda0
[  128.419184][T12866]  kthread+0x711/0x8a0
[  128.421011][T12866]  ret_from_fork+0x3fc/0x770
[  128.423042][T12866]  ret_from_fork_asm+0x1a/0x30
[  128.425050][T12866] 
[  128.426115][T12866] The buggy address belongs to the object at ffff88810f2c0d80
[  128.426115][T12866]  which belongs to the cache xfrm_state of size 928
[  128.432024][T12866] The buggy address is located 816 bytes inside of
[  128.432024][T12866]  freed 928-byte region [ffff88810f2c0d80, ffff88810f2c1120)
[  128.437728][T12866] 
[  128.438795][T12866] The buggy address belongs to the physical page:
[  128.441529][T12866] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f2c2880 pfn:0x10f2c0
[  128.445787][T12866] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  128.448590][T12866] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  128.451105][T12866] page_type: f5(slab)
[  128.452531][T12866] raw: 057ff00000000040 ffff8881053b63c0 dead000000000122 0000000000000000
[  128.455650][T12866] raw: ffff88810f2c2880 00000000800e0006 00000000f5000000 0000000000000000
[  128.458992][T12866] head: 057ff00000000040 ffff8881053b63c0 dead000000000122 0000000000000000
[  128.462623][T12866] head: ffff88810f2c2880 00000000800e0006 00000000f5000000 0000000000000000
[  128.466216][T12866] head: 057ff00000000002 ffffea00043cb001 00000000ffffffff 00000000ffffffff
[  128.469828][T12866] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  128.473469][T12866] page dumped because: kasan: bad access detected
[  128.476127][T12866] page_owner tracks the page as allocated
[  128.478499][T12866] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6118, tgid 6107 (syz.0.57), ts 50527394826, free_ts 50416390786
[  128.486288][T12866]  post_alloc_hook+0x240/0x2a0
[  128.488366][T12866]  get_page_from_freelist+0x21e4/0x22c0
[  128.490730][T12866]  __alloc_frozen_pages_noprof+0x181/0x370
[  128.493272][T12866]  alloc_pages_mpol+0x232/0x4a0
[  128.495357][T12866]  allocate_slab+0x8a/0x370
[  128.497307][T12866]  ___slab_alloc+0xbeb/0x1410
[  128.499375][T12866]  kmem_cache_alloc_noprof+0x283/0x3c0
[  128.501668][T12866]  xfrm_state_alloc+0x24/0x2f0
[  128.503701][T12866]  pfkey_add+0x6e4/0x2e00
[  128.505556][T12866]  pfkey_sendmsg+0xbfe/0x1090
[  128.507567][T12866]  __sock_sendmsg+0x21c/0x270
[  128.509597][T12866]  ____sys_sendmsg+0x505/0x830
[  128.511673][T12866]  ___sys_sendmsg+0x21f/0x2a0
[  128.513732][T12866]  __x64_sys_sendmsg+0x19b/0x260
[  128.515899][T12866]  do_syscall_64+0xfa/0x3b0
[  128.517894][T12866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.520457][T12866] page last free pid 5848 tgid 5848 stack trace:
[  128.523057][T12866]  __free_frozen_pages+0xbc4/0xd30
[  128.524792][T12866]  __put_partials+0x156/0x1a0
[  128.526703][T12866]  put_cpu_partial+0x17c/0x250
[  128.528700][T12866]  __slab_free+0x2d5/0x3c0
[  128.530601][T12866]  qlist_free_all+0x97/0x140
[  128.532503][T12866]  kasan_quarantine_reduce+0x148/0x160
[  128.534726][T12866]  __kasan_slab_alloc+0x22/0x80
[  128.536841][T12866]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  128.539167][T12866]  getname_flags+0xb8/0x540
[  128.541131][T12866]  __x64_sys_rename+0x5d/0x90
[  128.543154][T12866]  do_syscall_64+0xfa/0x3b0
[  128.545122][T12866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.547680][T12866] 
[  128.548703][T12866] Memory state around the buggy address:
[  128.551006][T12866]  ffff88810f2c0f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.554409][T12866]  ffff88810f2c1000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.557726][T12866] >ffff88810f2c1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.561167][T12866]                                      ^
[  128.563619][T12866]  ffff88810f2c1100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  128.567063][T12866]  ffff88810f2c1180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  128.570509][T12866] ==================================================================
[  128.574108][T12866] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  128.577229][T12866] CPU: 0 UID: 0 PID: 12866 Comm: syz.2.2125 Not tainted syzkaller #0 PREEMPT(full) 
[  128.581135][T12866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.585038][T12866] Call Trace:
[  128.586173][T12866]  <TASK>
[  128.587186][T12866]  dump_stack_lvl+0x99/0x250
[  128.588775][T12866]  ? __asan_memcpy+0x40/0x70
[  128.590344][T12866]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.592086][T12866]  ? __pfx__printk+0x10/0x10
[  128.593620][T12866]  vpanic+0x281/0x750
[  128.594943][T12866]  ? __pfx_vpanic+0x10/0x10
[  128.596475][T12866]  ? rcu_is_watching+0x15/0xb0
[  128.598601][T12866]  panic+0xb9/0xc0
[  128.600216][T12866]  ? __pfx_panic+0x10/0x10
[  128.601966][T12866]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  128.603997][T12866]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.606046][T12866]  ? __xfrm_state_insert+0x8af/0x1450
[  128.607996][T12866]  check_panic_on_warn+0x89/0xb0
[  128.609923][T12866]  ? __xfrm_state_insert+0x8af/0x1450
[  128.611924][T12866]  end_report+0x78/0x160
[  128.613525][T12866]  kasan_report+0x129/0x150
[  128.615246][T12866]  ? __xfrm_state_insert+0x8af/0x1450
[  128.617206][T12866]  __xfrm_state_insert+0x8af/0x1450
[  128.619021][T12866]  ? xfrm_state_insert+0x44/0x60
[  128.620693][T12866]  xfrm_state_insert+0x54/0x60
[  128.622267][T12866]  ipcomp6_init_state+0x655/0x900
[  128.624057][T12866]  __xfrm_init_state+0xa76/0x13f0
[  128.626152][T12866]  ? __xfrm_init_state+0x7ef/0x13f0
[  128.628228][T12866]  xfrm_init_state+0x18/0xa0
[  128.629991][T12866]  pfkey_add+0x1d38/0x2e00
[  128.631455][T12866]  ? __pfx_pfkey_add+0x10/0x10
[  128.633022][T12866]  ? kmem_cache_free+0x18f/0x400
[  128.634651][T12866]  pfkey_sendmsg+0xbfe/0x1090
[  128.636186][T12866]  ? trace_sched_exit_tp+0x36/0x110
[  128.637876][T12866]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  128.639577][T12866]  ? rcu_is_watching+0x15/0xb0
[  128.641158][T12866]  ? futex_unqueue+0x22/0x240
[  128.642792][T12866]  ? aa_sock_msg_perm+0xf1/0x1d0
[  128.644453][T12866]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.646211][T12866]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  128.647956][T12866]  __sock_sendmsg+0x21c/0x270
[  128.649613][T12866]  ____sys_sendmsg+0x505/0x830
[  128.651202][T12866]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.653285][T12866]  ? import_iovec+0x74/0xa0
[  128.654825][T12866]  ___sys_sendmsg+0x21f/0x2a0
[  128.656486][T12866]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.658242][T12866]  ? futex_wait+0x285/0x360
[  128.659833][T12866]  ? __fget_files+0x2a/0x420
[  128.661444][T12866]  ? __fget_files+0x3a0/0x420
[  128.663155][T12866]  __x64_sys_sendmsg+0x19b/0x260
[  128.664853][T12866]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.666905][T12866]  ? rcu_is_watching+0x15/0xb0
[  128.669049][T12866]  ? rcu_is_watching+0x15/0xb0
[  128.671135][T12866]  do_syscall_64+0xfa/0x3b0
[  128.673137][T12866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.675780][T12866]  ? exc_page_fault+0x9f/0xf0
[  128.677788][T12866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.680180][T12866] RIP: 0033:0x7fe5fcb8ebe9
[  128.681729][T12866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.689797][T12866] RSP: 002b:00007fe5fda43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.693271][T12866] RAX: ffffffffffffffda RBX: 00007fe5fcdb5fa0 RCX: 00007fe5fcb8ebe9
[  128.696596][T12866] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  128.699888][T12866] RBP: 00007fe5fcc11e19 R08: 0000000000000000 R09: 0000000000000000
[  128.703254][T12866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.706678][T12866] R13: 00007fe5fcdb6038 R14: 00007fe5fcdb5fa0 R15: 00007ffce65c8678
[  128.709993][T12866]  </TASK>
[  128.712120][T12866] Kernel Offset: disabled
[  128.714008][T12866] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:24:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000811edb0
R8 =ffff888106830237 R9 =1ffff11020d06046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb8f9 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe5fda436c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010f4b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe5fcd87498 00007fe5fcd87470 XMM03=00007fe5fcd874a8 00007fe5fcd874a0
XMM04=00007fe5fd8ed100 00007fe5fcd87460 XMM05=00007fe5fcd87478 00007fe5fcd874c0
XMM06=00007fe5fcd874b8 00007fe5fcd874b0 XMM07=00007fe5fcd874a8 00007fe5fcd874a0
XMM08=1aa0b5d7dda313b6 3a87428d8d165421 XMM09=0000000000000000 00007fe5fcc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822c7601 RBX=dffffc0000000000 RCX=ffffffff822c76d3 RDX=0000000000000001
RSI=0000000000000008 RDI=ffff88801c16f3f0 RBP=ffff88801c16f3f8 RSP=ffffc90007a47050
R8 =ffff88801c16f3f7 R9 =1ffff1100382de7e R10=dffffc0000000000 R11=ffffed100382de7f
R12=0000000000034974 R13=0000000000000001 R14=0000000000000000 R15=ffff88801c16f3f0
RIP=ffffffff822c76d8 RFL=00000257 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f49e144f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559a299a4ed8 CR3=000000002b3a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
