last executing test programs:

2.167491958s ago: executing program 2 (id=3463):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x6, 0xcb)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080)=0x700)
getsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000180), &(0x7f0000000240)=0x4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030425c931000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x24}}, 0x0)
r11 = socket(0x10, 0x803, 0x2)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000000040)="7a26aa188a0884e3b37e9a766eb08bbe", 0x10)
close(0x3)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYBLOB="01"], 0x3c}}, 0x0)

2.041105196s ago: executing program 2 (id=3464):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x4, 0xd, 0x4}, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8)
socket$inet(0xa, 0x801, 0x84)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
accept(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r4, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

1.769094376s ago: executing program 0 (id=3466):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async, rerun: 32)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x40, 0xffdffffd}, {0x6, 0x0, 0x2}]}, 0x10) (rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800010000000000140000004500003014000000000190780a010100ac1414aa0400907800001400450000000068000000110000ac0514aa2fad7f00000155085c65ba01df76521db80102000000acbb83f02e2599d201f9b7a8cd516265b191b25305f08280b767fe21185f4b2355c881d8a8e5079b937e3ad11dc43d74109e217fe34e0c85f1c1d21275590437b241f86a4a74ad8080f0d3614a6d20454b0422b2215b74941a51d4"], 0x3e) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xffffffffffffffd3, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0)

1.561312058s ago: executing program 0 (id=3468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000002000000000000000000000d03000000000000000000000905000000000000000000000a02000000000000000000000b0000000000000000000000030000000002000000030000000200000000001cca467ee80a628e2cf2bb3ed166e69b43455e6e9a9d75f4f62f788967c60b39b052fd81b9136abef08bf600000000000000"], 0x0, 0x62}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="285a9a00", @ANYRES16=r1, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0a0018000303030303030000"], 0x28}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x4}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x90, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x100}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "1456d98d30028c4841ef0bd3e0a4d826"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x21}]}, 0x90}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
socket(0xa, 0x3, 0x3a)

1.331044692s ago: executing program 1 (id=3470):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r2 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x6, 0x5, 0x5, 0x7, 0x8}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xe, 0x10}, {0xfff2, 0x9}, {0x8, 0xffe3}}}, 0x24}}, 0x20040054)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
close(r2)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x400})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'wlan0\x00', @remote})
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.261363972s ago: executing program 0 (id=3471):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001340)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="61030203f401060101b702"], 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r6, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="cfe6", 0x2}, {&(0x7f0000001300)="0f68da", 0x3}], 0x2}}], 0x1, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003900010324bd7002fadbdf2501000000e83d55a4d41d0b27b955154145070000007b82b1c0350e267c3f15c9ded73b2c402cdb0a28b3cc82c418351372c47fcf07f02ed0fc368a276ed5bc08b4feff7008d369667779add4a1b80382fcc768577e0adca12be918fe7a0e8d0ef480eb7b99743c3254369437a80b5d7d1456e6de630f190a6b883b3063419a3cac84076c8656e5f63f3b4e69f4e3eabedd0c12f85b5f6876cc55905949b882385fd2cd2203b45148532aff5daa"], 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200))
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r9, &(0x7f0000000540)=[{&(0x7f00000003c0)="00214717a70700000002030600710a06069d856829c2", 0x16}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="f1ffffff040000000800040100000094000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000354d1a1d2c3b394e0000a8c5000000a5000000180100002020640500d8c38dd359000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRESHEX=r6, @ANYRESHEX=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={<r12=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}}, 0x30)

1.171157141s ago: executing program 2 (id=3472):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xa0, r0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x42}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x4}, {0x2, 0x3}, {0xd}, {0x0, 0x5}, {0xf, 0x1}, {0xf, 0x7}, {0xc}, {0x3, 0x3}, {0x81, 0x2}, {0x8, 0x1}, {0x9, 0x5}, {0x3, 0x4}, {0x6, 0x1}], "1607db178d106efe"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x9, 0x1}, {0xf7}, {0x29, 0x3}, {0x89, 0x7}, {0xe, 0x6}], "190f4afed0e760d5"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "661a4d8ce9ea4f22"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x6, 0x4}, {0x9, 0x6}, {0x5c, 0x5}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x3, 0x80}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x5}, {0xad, 0x1}, {0x4, 0x1}, {0x9, 0x5}, {0x4, 0x4}, {0x10, 0x7}, {0x3, 0x7}, {0x8, 0x4}, {0x6c, 0x7}, {0x2, 0x4}, {0x6, 0x1}], "5307d75de643347b"}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000000}, 0x200040d4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x2000000015, 0x80005, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[], 0x24}}, 0x40080c1)
write$tun(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003800128009000100766c616e000000002800028004000480040003800c0002001300000019000000100004800c000100189c00000700000014000300766c616e3000"/84], 0x6c}}, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000000))
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="08020000", @ANYRES16=r5, @ANYBLOB="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"], 0x208}}, 0x1)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00'})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)

1.168796478s ago: executing program 1 (id=3473):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0x6}}}, 0x24}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f0000000a40))
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r2, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0x6}}}, 0x24}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f0000000a40)) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r2, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) (async)

1.051597s ago: executing program 1 (id=3474):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0xa, 0x3, 0x3a)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000001500)=0x5, 0x4)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4044855)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0400010000000008000100040001"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
close(0x4)

1.049529213s ago: executing program 1 (id=3475):
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000f1367ac91d0acf502b69838335373d70f37b"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r3 = socket$kcm(0x10, 0x2, 0x0)
socket(0x11, 0x5, 0x2772) (async)
socket(0x11, 0x5, 0x2772)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00'}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0x59}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000340)=""/207, 0x41000, 0x22, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0xaf2}, 0x10, 0xfafb, 0xffffffffffffffff, 0x7, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r8], &(0x7f0000000940)=[{0x3, 0x2, 0x9, 0x9}, {0x5, 0x4, 0x5, 0x5}, {0x5, 0x1, 0xc, 0x1}, {0x5, 0x5, 0x1}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x4, 0x7, 0x6}, {0x2, 0x5, 0xc, 0xa}], 0x10, 0x6}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0x59}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xcf, &(0x7f0000000340)=""/207, 0x41000, 0x22, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0xaf2}, 0x10, 0xfafb, 0xffffffffffffffff, 0x7, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r8], &(0x7f0000000940)=[{0x3, 0x2, 0x9, 0x9}, {0x5, 0x4, 0x5, 0x5}, {0x5, 0x1, 0xc, 0x1}, {0x5, 0x5, 0x1}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x4, 0x7, 0x6}, {0x2, 0x5, 0xc, 0xa}], 0x10, 0x6}, 0x94)
r9 = socket(0x10, 0x803, 0x0)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x40, 0x7fffffff, 0x2, 0x20008, 0xffffffffffffffff, 0x89, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1a, 0x40, 0x7fffffff, 0x2, 0x20008, 0xffffffffffffffff, 0x89, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0)

820.767468ms ago: executing program 1 (id=3476):
r0 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x184}}, 0x0)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x40050)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet(0x2, 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_GET_FEATURES(r7, 0x80189439, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, 0x0, 0x8000)
bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000000820000004000000", @ANYRES32, @ANYBLOB="ae556f0f6428154a12197317f04771dd97daa83dc9a952943cef7c741828f84666fe983640d15a7b5e3ed566bf5628f0", @ANYRES64=0x0], 0x20)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)

269.976555ms ago: executing program 1 (id=3477):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x4, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x7f}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x81}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x800)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000000000000000000000000000850000006d000000850000007d0000009500000000000000b3c18ae03f75d805164dde77efd76d91de4d0279a74489d2409d3a5be9ee5a6599426ecfa53c0be1d135573c1ac06d4291ed1c080d4f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x48}, 0x94)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001", @ANYRESOCT=r4, @ANYRES16=r3, @ANYRES16=r4, @ANYRESDEC=0x0], 0x110)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)
preadv(r8, 0x0, 0x0, 0x2, 0x5)
getsockopt$inet6_opts(r7, 0x29, 0x3b, 0x0, &(0x7f00000001c0))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0xd4, r10, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x401}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x88, 0xa8, @random="ecad53ed33fee732b3f51554673cf0358e688600260180ac8a40d052bc8cf642a745562c5665fa0a60a6733ff3917433f0ef1f475b6849baef52524ca3acba081e133176a387c123fc2d375a8e27211cb6e8260a51968964bdb5491fe49433875de1809a76421c5e79ff5a55f81e40fa5673f903b13963eb9125bbf418978b81a4d565b5"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000000}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x80)
r11 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @mcast2, 0x1, 0x7, 0x2, 0x8}})
close(r5)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

269.397688ms ago: executing program 2 (id=3478):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002480)="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", 0x122}], 0x1}, 0x4008040)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async)
r2 = socket$kcm(0x11, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x28, 0x5, 0x0) (async, rerun: 32)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff}) (async)
r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r8, &(0x7f0000001300)='-', 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

268.658951ms ago: executing program 0 (id=3479):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x2, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8841)

267.886571ms ago: executing program 0 (id=3480):
clock_gettime(0xfffffffffffffffd, &(0x7f0000000480))
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0xfffffffe, 0x1, 0x10000, 0x1, 0xfffffff5})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc00000002020102000000000000000001000003080009400000000404000380"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async, rerun: 64)
r5 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtaction={0x17c, 0x30, 0x53b, 0x0, 0xfffffffe, {0x9}, [{0xfffffd72, 0x1, [@m_nat={0x164, 0x13, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x81, 0x7, 0x6, 0x10}, @dev={0xac, 0x14, 0x14, 0x37}, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x3, 0x1, 0x0, 0x655b}, @multicast2, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0xfffffff2, 0xffffffffffffffff, 0xfffffffa, 0x401}, @remote, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xb103, 0x5, 0xd60, 0x4da}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}]}, {0x9c, 0x6, "63dd1437ed32edd3f7b5f7354de3c735e2dfb0e5be215af15f857b23bf1f6282f712903cea9fa4994ece02bebe729cce20b46a1f5e3473de1afbba90d6bb5fc75519204e11803186fde29b71aeab4b0862df06bfbaa669c358fe51b6e5fe479a2ffb4f4b0beda1be3230f793e6536c7335de7f441a24228e34cd0a28949a5a29cbd8220a73050eca484c9825391bb71c085818aec47e1b74"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640201b2000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) (async, rerun: 64)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 32)
close(r7)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0x1, 0x8, 0x8}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6b97, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 32)

168.533959ms ago: executing program 2 (id=3481):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1.396901ms ago: executing program 0 (id=3482):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="380055ae2eea1cd272172dd55d302a5a00c9dbd3", @ANYRES32=0x0, @ANYBLOB="05030200157e0000100012800800010068737200040002800800040004800000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14)
getpeername(r0, &(0x7f0000000240)=@xdp, &(0x7f00000002c0)=0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r5, @ANYBLOB="0100000000000000280112800b000100697036746e6c0000180002801400030020010000000000000000000000000001d5c6b79a4b00623c9e789e3d135af1038fa32a2690ccb5c91f0d010c12edd49a05a943213dbabd7b4171fcc7c06a929cafdd5b55accbfd13281f7fe8b9b8c9f567d718a38984a46622f49a4f9b8c06cfe723523d6dee897bbcf7a1f55f3dd20e6ada351195da41e6a022ec8c2a785427f1c23296f40bbb37d2"], 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, &(0x7f0000000700)=0x84)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r9=>0x0})
r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0xe, 0x800)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r10, 0x40309410, &(0x7f0000000400)={0x1ff, 0x0, 0x1, 0x5, 0x2, [0x100, 0xffffffff, 0xb666, 0x3]})
sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x24008845)

0s ago: executing program 2 (id=3483):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000120001000000000000000000ac14e08e8550adac3baf028414000000001c0000000000000000000000000014000d00200100000000000000000000000000000c00150000"], 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  271.636794][T14343] lowmem_reserve[]: 0 0 854 854 854
[  271.639102][T14343] Node 1 Normal free:180420kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7408kB inactive_anon:0kB active_file:2076kB inactive_file:128080kB unevictable:3536kB writepending:180kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46972kB local_pcp:21472kB free_cma:0kB
[  271.651989][T14343] lowmem_reserve[]: 0 0 0 0 0
[  271.653950][T14343] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  271.659564][T14343] Node 0 DMA32: 648*4kB (M) 283*8kB (UME) 146*16kB (UME) 111*32kB (ME) 63*64kB (ME) 147*128kB (UME) 97*256kB (UM) 36*512kB (UM) 16*1024kB (UME) 4*2048kB (UME) 35*4096kB (UM) = 244792kB
[  271.668430][T14343] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  271.673150][T14365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2169'.
[  271.675445][T14343] Node 1 Normal: 5*4kB (UME) 173*8kB (UME) 111*16kB (ME) 87*32kB (UME) 29*64kB (UME) 86*128kB (UM) 61*256kB (UME) 13*512kB (UME) 4*1024kB (M) 2*2048kB (ME) 32*4096kB (UM) = 180364kB
[  271.686125][T14343] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  271.689986][T14343] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  271.693700][T14343] 42184 total pagecache pages
[  271.696082][T14343] 0 pages in swap cache
[  271.697720][T14343] Free swap  = 124996kB
[  271.699388][T14343] Total swap = 124996kB
[  271.701201][T14343] 786301 pages RAM
[  271.702700][T14343] 0 pages HighMem/MovableOnly
[  271.704793][T14343] 241348 pages reserved
[  271.706478][T14343] 0 pages cma reserved
[  271.833090][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'.
[  272.029979][T14377] netlink: 'syz.0.2174': attribute type 17 has an invalid length.
[  272.036572][T14377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.173187][T14390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.176713][T14390] syzkaller0: entered promiscuous mode
[  272.178601][T14390] syzkaller0: entered allmulticast mode
[  272.196168][T14390] tipc: Resetting bearer <eth:syzkaller0>
[  272.211559][T14390] tipc: Resetting bearer <eth:syzkaller0>
[  272.231309][T14390] tipc: Disabling bearer <eth:syzkaller0>
[  272.287670][T14398] netlink: 'syz.1.2180': attribute type 1 has an invalid length.
[  272.308804][T14398] 8021q: adding VLAN 0 to HW filter on device bond37
[  272.347346][T14398] bond37: (slave bridge0): making interface the new active one
[  272.352366][T14398] bond37: (slave bridge0): Enslaving as an active interface with an up link
[  272.382139][T14398] bond37: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  272.507285][T14403] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2181'.
[  272.511059][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2181'.
[  273.061346][T14411] netlink: 'syz.0.2183': attribute type 13 has an invalid length.
[  273.106360][T14411] lo speed is unknown, defaulting to 1000
[  273.110117][T14411] lo speed is unknown, defaulting to 1000
[  273.596566][T14427] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  273.654906][T14430] sctp: [Deprecated]: syz.0.2190 (pid 14430) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.654906][T14430] Use struct sctp_sack_info instead
[  273.661307][T14429] sctp: [Deprecated]: syz.0.2190 (pid 14429) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.661307][T14429] Use struct sctp_sack_info instead
[  273.870908][T14440] netlink: 'syz.0.2193': attribute type 1 has an invalid length.
[  274.313872][T14460] lo speed is unknown, defaulting to 1000
[  274.318967][T14460] lo speed is unknown, defaulting to 1000
[  274.362837][T14462] IPVS: Unknown mcast interface: team_slave_0
[  274.434077][T14469] netlink: 'syz.0.2199': attribute type 10 has an invalid length.
[  274.480789][T14471] netlink: 'syz.1.2200': attribute type 6 has an invalid length.
[  274.617564][T14471] IPv6: sit6: Disabled Multicast RS
[  274.748371][T14488] netlink: 'syz.0.2203': attribute type 39 has an invalid length.
[  274.883945][T14502] syzkaller0: entered promiscuous mode
[  274.921457][T14502] syzkaller0: entered allmulticast mode
[  274.925396][T14501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.967160][T14515] netlink: 'syz.2.2207': attribute type 1 has an invalid length.
[  275.009933][T14515] 8021q: adding VLAN 0 to HW filter on device bond31
[  275.034896][T14509] tipc: Resetting bearer <eth:syzkaller0>
[  275.051719][T14509] tipc: Disabling bearer <eth:syzkaller0>
[  275.422940][T14543] netlink: 'syz.2.2214': attribute type 2 has an invalid length.
[  275.440226][T14548] lo speed is unknown, defaulting to 1000
[  275.443717][T14548] lo speed is unknown, defaulting to 1000
[  275.660472][T14561] syzkaller0: left promiscuous mode
[  275.662193][T14561] syzkaller0: left allmulticast mode
[  275.670448][T14561] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.259528][T14577] 8021q: adding VLAN 0 to HW filter on device bond32
[  276.412852][T14585] netlink: 'syz.2.2221': attribute type 4 has an invalid length.
[  276.424790][T14585] netlink: 'syz.2.2221': attribute type 4 has an invalid length.
[  276.510985][T14590] IPv6: NLM_F_CREATE should be specified when creating new route
[  276.686902][T14597] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  276.696014][T14597] tipc: Resetting bearer <eth:syzkaller0>
[  276.720991][T14597] batman_adv: batadv0: Interface deactivated: gretap2
[  276.740478][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  276.743375][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.746542][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  276.749263][   T12] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 256 - 0
[  276.751854][   T12] netdevsim netdevsim2 eth0: unset [1, 3] type 2 family 0 port 6081 - 0
[  276.754883][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  276.758147][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.761640][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  276.764840][   T12] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 256 - 0
[  276.767698][   T12] netdevsim netdevsim2 eth1: unset [1, 3] type 2 family 0 port 6081 - 0
[  276.770981][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  276.775129][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.778375][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  276.781778][   T12] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 256 - 0
[  276.785328][   T12] netdevsim netdevsim2 eth2: unset [1, 3] type 2 family 0 port 6081 - 0
[  276.789602][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  276.792749][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  276.796298][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  276.799581][   T12] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 256 - 0
[  276.802817][   T12] netdevsim netdevsim2 eth3: unset [1, 3] type 2 family 0 port 6081 - 0
[  276.851154][T14610] bridge0: port 1(batadv1) entered blocking state
[  276.853879][T14610] bridge0: port 1(batadv1) entered disabled state
[  276.862420][T14610] batadv1: entered allmulticast mode
[  276.866780][T14610] batadv1: entered promiscuous mode
[  276.935173][T14615] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.065675][T14622] __nla_validate_parse: 20 callbacks suppressed
[  277.065690][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'.
[  277.171589][T14625] syzkaller1: entered promiscuous mode
[  277.173985][T14625] syzkaller1: entered allmulticast mode
[  277.344834][ T5875] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  277.348553][ T5875] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  277.740278][T14637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.770767][T14642] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2240'.
[  277.778533][T14642] batadv5: entered promiscuous mode
[  277.780488][T14642] batadv5: entered allmulticast mode
[  277.950193][T14645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'.
[  277.983033][T14647] netlink: 'syz.0.2242': attribute type 1 has an invalid length.
[  277.986723][T14647] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2242'.
[  277.987864][T14648] netlink: 'syz.0.2242': attribute type 1 has an invalid length.
[  277.997695][T14648] workqueue: Failed to create a rescuer kthread for wq "bond50": -EINTR
[  278.038235][T14653] netlink: 'syz.0.2243': attribute type 1 has an invalid length.
[  278.052520][T14653] bridge28: entered promiscuous mode
[  278.056128][T14653] bridge28: entered allmulticast mode
[  278.448364][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2247'.
[  278.461478][T14668] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  278.811896][T14685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.817079][T14687] netlink: 'syz.2.2251': attribute type 11 has an invalid length.
[  278.926675][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'.
[  278.960148][T14695] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2254'.
[  278.968045][T14695] netlink: zone id is out of range
[  278.970392][T14695] netlink: get zone limit has 8 unknown bytes
[  279.108270][T14715] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.265150][T14719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.273911][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'.
[  279.279612][T14719] siw: device registration error -23
[  279.436485][T14741] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2264'.
[  279.450819][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'.
[  279.541627][T14750] netlink: 'syz.0.2267': attribute type 5 has an invalid length.
[  279.581911][T14752] dvmrp8: entered allmulticast mode
[  279.610525][T14754] bridge28: entered allmulticast mode
[  279.639393][T14752] lo speed is unknown, defaulting to 1000
[  279.643790][T14752] lo speed is unknown, defaulting to 1000
[  279.756249][T14760] tipc: Resetting bearer <eth:team0>
[  279.794890][T14760] batman_adv: batadv0: Interface deactivated: macsec0
[  279.844961][  T974] lo speed is unknown, defaulting to 1000
[  279.850213][  T974] syz2: Port: 1 Link DOWN
[  279.871587][T14751] dvmrp8: left allmulticast mode
[  280.369119][T14783] netlink: 'syz.2.2275': attribute type 13 has an invalid length.
[  280.372387][T14783] netlink: 'syz.2.2275': attribute type 17 has an invalid length.
[  280.408816][T14783] 8021q: adding VLAN 0 to HW filter on device team0
[  280.413471][T14783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.487894][T14778] lo speed is unknown, defaulting to 1000
[  280.490994][T14778] lo speed is unknown, defaulting to 1000
[  280.751311][T14796] netlink: 'syz.2.2280': attribute type 2 has an invalid length.
[  280.778253][T14796] ave_0: entered promiscuous mode
[  281.108971][T14810] bridge0: entered allmulticast mode
[  281.160266][T14816] syzkaller0: entered promiscuous mode
[  281.162238][T14816] syzkaller0: entered allmulticast mode
[  281.306313][T14827] netlink: 'syz.0.2288': attribute type 5 has an invalid length.
[  281.432228][T14843] validate_nla: 2 callbacks suppressed
[  281.432243][T14843] netlink: 'syz.1.2291': attribute type 10 has an invalid length.
[  281.549044][   T33] audit: type=1107 audit(1757188366.136:10): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  281.558239][T14851] ip6gre1: entered allmulticast mode
[  281.894679][T14858] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.972453][T14862] netlink: 'syz.0.2299': attribute type 7 has an invalid length.
[  281.980171][T14863] netlink: 'syz.0.2299': attribute type 7 has an invalid length.
[  281.999991][T14862] : entered promiscuous mode
[  282.200486][T14880] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  282.268266][T14867] __nla_validate_parse: 12 callbacks suppressed
[  282.268284][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'.
[  282.345081][T14867] batman_adv: batadv0: Removing interface: macsec0
[  282.537464][T14914] netlink: 'syz.1.2312': attribute type 1 has an invalid length.
[  282.538031][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2310'.
[  282.555209][T14913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.578009][T14914] 8021q: adding VLAN 0 to HW filter on device bond38
[  282.642989][T14922] pim6reg9: entered allmulticast mode
[  282.790823][T14928] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2315'.
[  282.796905][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'.
[  282.949915][T14936] block nbd1: shutting down sockets
[  283.061730][T14939] veth0_to_bond: left allmulticast mode
[  283.064852][T14939] batadv_slave_0: left promiscuous mode
[  283.070132][T14939] geneve2: left promiscuous mode
[  283.072974][T14939] veth3: left promiscuous mode
[  283.075293][T14939] vcan1: left promiscuous mode
[  283.077678][T14939] macvtap1: left promiscuous mode
[  283.079932][T14939] macvtap1: left allmulticast mode
[  283.082515][T14939] geneve3: left promiscuous mode
[  283.084813][T14939] geneve3: left allmulticast mode
[  283.087078][T14939] bond0: left allmulticast mode
[  283.089305][T14939] bond15: left allmulticast mode
[  283.092307][T14939] geneve4: left promiscuous mode
[  283.095287][T14939] veth7: left promiscuous mode
[  283.098430][T14939] veth9: left promiscuous mode
[  283.101181][T14939] nicvf0: left promiscuous mode
[  283.104045][T14939] macvtap0: left promiscuous mode
[  283.106250][T14939] macvtap0: left allmulticast mode
[  283.108794][T14939] gtp1: left promiscuous mode
[  283.110882][T14939] gtp1: left allmulticast mode
[  283.113627][T14939] xfrm1: left allmulticast mode
[  283.116416][T14939] vti0: left promiscuous mode
[  283.118500][T14939] vti0: left allmulticast mode
[  283.121323][T14939] tipc: Resetting bearer <eth:syzkaller0>
[  283.124367][T14939] syzkaller0: left promiscuous mode
[  283.126593][T14939] syzkaller0: left allmulticast mode
[  283.131548][T14939] bond17: left promiscuous mode
[  283.133628][T14939] wireguard1: left promiscuous mode
[  283.137738][T14939] vlan2: left promiscuous mode
[  283.139669][T14939] bond0: left promiscuous mode
[  283.141636][T14939] bond15: left promiscuous mode
[  283.144959][T14939] ipvlan0: left allmulticast mode
[  283.147020][T14939] bridge0: left allmulticast mode
[  283.149502][T14939] ipvlan1: left allmulticast mode
[  283.151553][T14939] bond26: left allmulticast mode
[  283.153525][T14939] gretap3: left allmulticast mode
[  283.240765][T14945] syzkaller0: entered promiscuous mode
[  283.243387][T14945] syzkaller0: entered allmulticast mode
[  283.305274][T14949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2321'.
[  283.416145][T14951] netlink: 'syz.2.2322': attribute type 1 has an invalid length.
[  283.474047][T14954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2323'.
[  283.565853][T14955] batman_adv: batadv0: Removing interface: ip6gretap2
[  283.573075][T14961] netlink: 'syz.0.2325': attribute type 11 has an invalid length.
[  283.580575][T14955] bond0: (slave bond15): Releasing backup interface
[  283.595977][T14955] bond17: (slave wireguard1): Releasing backup interface
[  283.602829][T14955] batman_adv: batadv0: Removing interface: gretap2
[  283.609942][T14955] bond26: (slave gretap3): Releasing active interface
[  283.620724][T14955] bond27: (slave gretap4): Releasing active interface
[  283.626511][T14955] gretap4: left allmulticast mode
[  283.630597][T14955] bond30: (slave bridge19): Releasing active interface
[  283.635589][T14955] batadv1: left allmulticast mode
[  283.637167][T14955] batadv1: left promiscuous mode
[  283.638799][T14955] bridge0: port 1(batadv1) entered disabled state
[  283.729234][T14967] netlink: 'syz.2.2323': attribute type 10 has an invalid length.
[  283.896536][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'.
[  284.022522][T14989] netlink: 'syz.0.2331': attribute type 1 has an invalid length.
[  284.025555][T14989] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2331'.
[  284.476716][T15004] netlink: 'syz.2.2334': attribute type 13 has an invalid length.
[  284.483300][T15004] netlink: 'syz.2.2334': attribute type 17 has an invalid length.
[  284.521483][T15004] 8021q: adding VLAN 0 to HW filter on device team0
[  284.530886][T15004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.617247][T15001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2334'.
[  284.688267][T15001] lo speed is unknown, defaulting to 1000
[  284.692011][T15001] lo speed is unknown, defaulting to 1000
[  284.715159][T15020] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2337'.
[  284.897642][T15026] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  284.915262][T15032] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  284.915388][T15032] block (null): Could not allocate knbd recv work queue.
[  284.923281][T15032] nbd: failed to add new device
[  285.333037][T15056] 8021q: adding VLAN 0 to HW filter on device bond39
[  285.338007][T15056] bond0: (slave bond39): Enslaving as an active interface with a down link
[  285.342322][T15054] dvmrp1: tun_chr_ioctl cmd 1074025677
[  285.354563][T15054] dvmrp1: linktype set to 768
[  285.401845][T15066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.533030][T15079] bond34: left promiscuous mode
[  285.535920][T15079] bond36: left promiscuous mode
[  285.540223][T15079] ip6gre1: left allmulticast mode
[  285.574538][T15076] netlink: 'syz.2.2350': attribute type 7 has an invalid length.
[  285.588589][   T98] block nbd0: Possible stuck request ffff888021538000: control (read@0,4096B). Runtime 210 seconds
[  286.149631][T15115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.157143][  T974] lo speed is unknown, defaulting to 1000
[  286.159423][  T974] syz1: Port: 1 Link ACTIVE
[  286.200042][T15115] lo speed is unknown, defaulting to 1000
[  286.210789][T15115] lo speed is unknown, defaulting to 1000
[  286.395344][T15131] lo speed is unknown, defaulting to 1000
[  286.399379][T15131] lo speed is unknown, defaulting to 1000
[  286.650153][T15144] veth0_to_bridge: entered promiscuous mode
[  286.652514][T15144] veth0_to_bridge: left promiscuous mode
[  286.692316][T15146] validate_nla: 3 callbacks suppressed
[  286.692333][T15146] netlink: 'syz.1.2367': attribute type 15 has an invalid length.
[  286.739238][T15148] lo speed is unknown, defaulting to 1000
[  286.742119][T15148] lo speed is unknown, defaulting to 1000
[  287.102559][T15152] netlink: 'syz.1.2369': attribute type 1 has an invalid length.
[  287.231838][T15161] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  287.273232][T15161] netlink: 'syz.2.2372': attribute type 29 has an invalid length.
[  287.295253][T15165] veth1_virt_wifi: entered promiscuous mode
[  287.297911][T15165] veth1_virt_wifi: entered allmulticast mode
[  287.308702][T15165] syzkaller0: entered promiscuous mode
[  287.311206][T15165] syzkaller0: entered allmulticast mode
[  287.448593][T15169] __nla_validate_parse: 12 callbacks suppressed
[  287.448604][T15169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2374'.
[  287.453639][T15174] netlink: 'syz.1.2375': attribute type 10 has an invalid length.
[  287.532620][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'.
[  287.556550][T15181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'.
[  287.621414][T15185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2378'.
[  287.643501][T15185] bond42: entered promiscuous mode
[  287.702830][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2380'.
[  287.708070][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'.
[  287.940562][T15202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2381'.
[  287.956418][T15205] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.057283][T15211] netlink: 'syz.0.2383': attribute type 1 has an invalid length.
[  288.095514][T15211] 8021q: adding VLAN 0 to HW filter on device bond50
[  288.141908][T15211] 8021q: adding VLAN 0 to HW filter on device bond50
[  288.145647][T15211] bond50: (slave vxcan1): The slave device specified does not support setting the MAC address
[  288.153204][T15211] bond50: (slave vxcan1): Error -95 calling set_mac_address
[  288.247987][T15216] bond50: (slave bridge29): Enslaving as an active interface with a down link
[  288.444566][T15227] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2386'.
[  288.449345][T15229] netlink: 'syz.1.2387': attribute type 5 has an invalid length.
[  288.510467][T15231] syzkaller0: left promiscuous mode
[  288.512565][T15231] syzkaller0: left allmulticast mode
[  288.531474][T15231] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2389'.
[  288.537449][T15233] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  288.561947][T15233] bond43: entered promiscuous mode
[  288.564062][T15233] bond43: entered allmulticast mode
[  288.568670][T15233] 8021q: adding VLAN 0 to HW filter on device bond43
[  288.667164][T15245] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[  288.698317][T15245] 8021q: adding VLAN 0 to HW filter on device bond51
[  288.716126][T15245] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  288.759946][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'.
[  288.841770][T15258] 0: renamed from hsr0
[  288.852857][T15258] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  288.865345][T15258] 0: entered allmulticast mode
[  288.867352][T15258] hsr_slave_0: entered allmulticast mode
[  288.870773][T15258] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  289.942708][T15293] syz_tun: entered allmulticast mode
[  289.956534][T15293] dvmrp8: entered allmulticast mode
[  289.993188][T15293] lo speed is unknown, defaulting to 1000
[  290.000542][T15294] lo speed is unknown, defaulting to 1000
[  290.003432][T15294] lo speed is unknown, defaulting to 1000
[  290.006754][T15293] lo speed is unknown, defaulting to 1000
[  290.380170][T15294] syz_tun: left allmulticast mode
[  290.382348][T15294] dvmrp8: left allmulticast mode
[  290.481079][T15308] lo speed is unknown, defaulting to 1000
[  290.485184][T15308] lo speed is unknown, defaulting to 1000
[  290.818341][T15334] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.823108][T15334] 8021q: adding VLAN 0 to HW filter on device team0
[  290.829074][T15334] tipc: Resetting bearer <eth:team0>
[  290.833078][T15334] tipc: Resetting bearer <eth:team0>
[  290.840375][T15334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.862444][ T5895] lo speed is unknown, defaulting to 1000
[  290.868944][ T5895] syz2: Port: 1 Link ACTIVE
[  290.929734][T15347] netlink: 'syz.0.2418': attribute type 1 has an invalid length.
[  290.940615][T15347] macvtap4: entered promiscuous mode
[  290.942308][T15347] vlan0: entered promiscuous mode
[  290.948936][T15347] erspan0: entered promiscuous mode
[  290.951528][T15347] macvtap4: entered allmulticast mode
[  290.953625][T15347] vlan0: entered allmulticast mode
[  290.963054][T15347] erspan0: entered allmulticast mode
[  290.996740][T15347] macvtap5: entered promiscuous mode
[  290.998974][T15347] macvtap5: entered allmulticast mode
[  291.055913][T15352] netlink: 'syz.2.2420': attribute type 13 has an invalid length.
[  291.059312][T15352] netlink: 'syz.2.2420': attribute type 17 has an invalid length.
[  291.102142][T15352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  291.117070][T15351] xfrm0: entered promiscuous mode
[  291.119165][T15351] xfrm0: entered allmulticast mode
[  291.146771][T15364] lo speed is unknown, defaulting to 1000
[  291.156065][T15351] lo speed is unknown, defaulting to 1000
[  291.159222][T15364] lo speed is unknown, defaulting to 1000
[  291.172052][T15351] lo speed is unknown, defaulting to 1000
[  291.311941][T15357] lo speed is unknown, defaulting to 1000
[  291.319993][T15357] lo speed is unknown, defaulting to 1000
[  291.406581][T15371] netlink: 'syz.1.2424': attribute type 11 has an invalid length.
[  291.820384][T15382] geneve6: entered promiscuous mode
[  291.822120][T15382] geneve6: entered allmulticast mode
[  291.837761][ T7077] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  291.841407][ T7077] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  291.846249][ T7077] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  291.850267][ T7077] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  292.002859][T15394] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.007840][T15394] syzkaller0: entered promiscuous mode
[  292.009893][T15394] syzkaller0: entered allmulticast mode
[  292.969775][T15410] __nla_validate_parse: 14 callbacks suppressed
[  292.969792][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2436'.
[  292.997183][T15418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.011085][T15418] tipc: Resetting bearer <eth:syzkaller0>
[  293.016569][T15420] ksmbd: Unknown IPC event: 3, ignore.
[  293.020920][T15420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.103780][T15424] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.114016][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'.
[  293.202599][T15429] lo speed is unknown, defaulting to 1000
[  293.206810][T15429] lo speed is unknown, defaulting to 1000
[  293.359733][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'.
[  293.901703][T15447] syz_tun: entered allmulticast mode
[  293.923795][T15447] dvmrp8: entered allmulticast mode
[  293.949306][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'.
[  293.953004][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'.
[  293.956193][T15447] lo speed is unknown, defaulting to 1000
[  293.959839][T15447] lo speed is unknown, defaulting to 1000
[  294.016957][T15445] syz_tun: left allmulticast mode
[  294.018588][T15445] dvmrp8: left allmulticast mode
[  294.240156][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'.
[  294.244936][T15465] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  294.248000][T15465] batadv_slave_0: entered promiscuous mode
[  294.251221][T15465] batadv_slave_0: left promiscuous mode
[  294.253695][T15465] mac80211_hwsim hwsim35 wlan0: left promiscuous mode
[  294.366575][T15470] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.412903][T15471] netlink: 'syz.2.2451': attribute type 10 has an invalid length.
[  294.491858][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2454'.
[  294.505502][T15478] netlink: 'syz.1.2453': attribute type 1 has an invalid length.
[  294.562822][T15478] 8021q: adding VLAN 0 to HW filter on device bond44
[  294.584006][T15473] bond44: (slave ip6gretap5): making interface the new active one
[  294.589360][T15473] bond44: (slave ip6gretap5): Enslaving as an active interface with an up link
[  294.621846][T15473] veth27: entered promiscuous mode
[  294.649174][T15481] tipc: Resetting bearer <eth:team0>
[  294.661193][T15478] erspan0: entered allmulticast mode
[  294.927598][T15492] syzkaller1: entered promiscuous mode
[  294.929792][T15492] syzkaller1: entered allmulticast mode
[  295.074122][T15494] syzkaller1: entered promiscuous mode
[  295.078335][T15494] syzkaller1: entered allmulticast mode
[  295.221875][T15498] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2462'.
[  295.444908][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'.
[  295.558429][T15506] lo speed is unknown, defaulting to 1000
[  295.562128][T15506] lo speed is unknown, defaulting to 1000
[  295.683012][T15512] netlink: 'syz.2.2466': attribute type 7 has an invalid length.
[  295.693438][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'.
[  295.772015][T15512] bridge22: port 1(bond34) entered blocking state
[  295.778534][T15512] bridge22: port 1(bond34) entered disabled state
[  295.783680][T15512] bond34: entered allmulticast mode
[  296.063758][T15525] 8021q: VLANs not supported on nlmon0
[  296.190281][T15537] netlink: 'syz.1.2474': attribute type 1 has an invalid length.
[  296.358577][T15549] netlink: 'syz.0.2477': attribute type 23 has an invalid length.
[  296.419206][T15545] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.650336][T15561] bond37: (slave bridge0): Releasing active interface
[  296.654803][T15561] bridge0 (unregistering): left allmulticast mode
[  296.961235][T15567] netlink: 'syz.1.2482': attribute type 4 has an invalid length.
[  296.978378][   T10] lo speed is unknown, defaulting to 1000
[  296.980731][   T10] syz1: Port: 1 Link DOWN
[  296.991904][T15567] netlink: 'syz.1.2482': attribute type 4 has an invalid length.
[  297.000210][   T10] lo speed is unknown, defaulting to 1000
[  297.002731][   T10] syz1: Port: 1 Link ACTIVE
[  297.011856][   T10] lo speed is unknown, defaulting to 1000
[  297.015762][   T10] syz1: Port: 1 Link DOWN
[  297.159700][T15571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  297.235324][T15581] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  297.324417][T15584] netlink: 'syz.0.2487': attribute type 1 has an invalid length.
[  297.353048][T15584] 8021q: adding VLAN 0 to HW filter on device bond53
[  297.380634][T15584] 8021q: adding VLAN 0 to HW filter on device bond53
[  297.383798][T15584] bond53: (slave vxcan1): The slave device specified does not support setting the MAC address
[  297.389753][T15584] bond53: (slave vxcan1): Error -95 calling set_mac_address
[  297.418264][T15586] lo speed is unknown, defaulting to 1000
[  297.422003][T15586] lo speed is unknown, defaulting to 1000
[  297.441555][T15590] veth31: entered promiscuous mode
[  297.447000][T15590] bond53: (slave veth31): Enslaving as an active interface with a down link
[  297.531610][T15594] netlink: 'syz.0.2488': attribute type 1 has an invalid length.
[  297.583459][T15594] vlan1: entered allmulticast mode
[  297.588738][T15594] bond54: entered allmulticast mode
[  297.881487][T15607] tipc: Resetting bearer <eth:team0>
[  297.906393][T15607] vlan0: left allmulticast mode
[  297.908583][T15607] erspan0: left allmulticast mode
[  297.910737][T15607] vlan0: left promiscuous mode
[  297.913131][T15607] erspan0: left promiscuous mode
[  297.922563][  T793] lo speed is unknown, defaulting to 1000
[  297.934541][  T793] syz2: Port: 1 Link DOWN
[  298.135540][T15629] C: renamed from lo
[  298.142039][T15629] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  298.156395][T15629] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  298.194617][T15630] bridge20: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  298.407384][T15647] dvmrp0: entered allmulticast mode
[  298.485843][T15651] __nla_validate_parse: 12 callbacks suppressed
[  298.485860][T15651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2503'.
[  298.497789][T15651] netlink: 'syz.1.2503': attribute type 1 has an invalid length.
[  298.521777][T15651] 8021q: adding VLAN 0 to HW filter on device bond45
[  298.547654][T15651] bond45: (slave wlan0): Opening slave failed
[  298.654077][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'.
[  298.661080][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'.
[  298.661159][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'.
[  298.687454][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'.
[  298.787081][T15664] bond55: (slave vxcan1): The slave device specified does not support setting the MAC address
[  298.793179][T15664] bond55: (slave vxcan1): Error -95 calling set_mac_address
[  298.943654][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'.
[  298.985495][T15681] bond34: left allmulticast mode
[  298.987849][T15681] bridge22: port 1(bond34) entered disabled state
[  299.002134][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2512'.
[  299.012994][T15681] team0: Mode changed to "loadbalance"
[  299.050028][T15687] C speed is unknown, defaulting to 1000
[  299.055523][T15687] lo speed is unknown, defaulting to 1000
[  299.150769][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'.
[  299.229890][T15687] hsr_slave_1 (unregistering): left promiscuous mode
[  299.788641][T15720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.908039][T15722] C speed is unknown, defaulting to 1000
[  299.910673][T15722] lo speed is unknown, defaulting to 1000
[  300.082782][T15728] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.340828][T15750] validate_nla: 1 callbacks suppressed
[  300.340844][T15750] netlink: 'syz.2.2524': attribute type 9 has an invalid length.
[  300.487928][T15762] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  300.497638][T15763] netlink: 'syz.1.2528': attribute type 4 has an invalid length.
[  300.589295][T15773] netlink: 'syz.1.2529': attribute type 13 has an invalid length.
[  300.624239][T15773] netlink: 'syz.1.2529': attribute type 17 has an invalid length.
[  300.629486][T15772] xfrm0: entered promiscuous mode
[  300.631641][T15772] xfrm0: entered allmulticast mode
[  300.649007][T15762] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  300.670851][T15773] erspan0: left allmulticast mode
[  300.675569][T15773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  300.681229][  T974] C speed is unknown, defaulting to 1000
[  300.683051][  T974] syz1: Port: 1 Link ACTIVE
[  300.700698][T15762] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  300.740182][T15781] veth29: entered promiscuous mode
[  300.779377][T15762] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  300.795765][T15783] macsec0: entered allmulticast mode
[  300.799679][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'.
[  300.857196][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  300.888326][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  300.891985][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  300.910907][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  300.979468][T15791] ip6gre4: entered allmulticast mode
[  301.073529][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2535'.
[  301.079113][T15795] netlink: 'syz.2.2535': attribute type 7 has an invalid length.
[  301.082554][T15795] netlink: 'syz.2.2535': attribute type 8 has an invalid length.
[  301.181498][T15803] ..0: renamed from 70 (while UP)
[  301.187654][T15803] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  301.636013][T15824] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.745618][T15829] vlan1: entered promiscuous mode
[  301.747551][T15829] bond0: entered promiscuous mode
[  301.749897][T15829] vlan1: entered allmulticast mode
[  301.751837][T15829] bond0: entered allmulticast mode
[  301.950380][T15833] netlink: 'syz.0.2546': attribute type 1 has an invalid length.
[  301.977985][T15833] 8021q: adding VLAN 0 to HW filter on device bond56
[  302.128951][T15839] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  302.241780][T15846] veth0: entered promiscuous mode
[  302.293843][T15846] veth0 (unregistering): left promiscuous mode
[  302.470564][T15873] netlink: 'syz.0.2556': attribute type 13 has an invalid length.
[  302.525115][T15877] netlink: 'syz.1.2554': attribute type 1 has an invalid length.
[  302.585449][T15877] 8021q: adding VLAN 0 to HW filter on device bond46
[  302.589104][T15868] C speed is unknown, defaulting to 1000
[  302.592788][T15868] lo speed is unknown, defaulting to 1000
[  302.601013][T15876] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.640863][T15877] bond46: (slave gretap6): making interface the new active one
[  302.647796][T15877] bond46: (slave gretap6): Enslaving as an active interface with an up link
[  302.813298][T15893] syzkaller1: entered promiscuous mode
[  302.820830][T15893] syzkaller1: entered allmulticast mode
[  302.894592][T15895] bridge0: failed insert local address into bridge forwarding table
[  302.943891][T15893] C speed is unknown, defaulting to 1000
[  302.949544][T15893] lo speed is unknown, defaulting to 1000
[  303.051202][T15906] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  303.062803][T15906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.196073][T15910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.202401][T15910] syzkaller0: left promiscuous mode
[  303.208606][T15910] syzkaller0: left allmulticast mode
[  303.220160][T15916] syzkaller0: left promiscuous mode
[  303.224613][T15916] syzkaller0: left allmulticast mode
[  303.614403][T15935] bond0 (unregistering): Released all slaves
[  303.731448][T15946] can: request_module (can-proto-0) failed.
[  303.735561][T15946] openvswitch: netlink: IP tunnel dst address not specified
[  303.811038][T15959] __nla_validate_parse: 21 callbacks suppressed
[  303.811052][T15959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2578'.
[  303.822635][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'.
[  303.832395][T15959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2578'.
[  303.932261][T15966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  303.932276][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  304.217203][T15984] vlan2: entered allmulticast mode
[  304.250421][T15986] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2585'.
[  304.339794][T15991] dvmrp8: entered allmulticast mode
[  304.358617][T15992] dvmrp8: left allmulticast mode
[  304.541213][T16004] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2590'.
[  315.665222][   T98] block nbd0: Possible stuck request ffff888021538000: control (read@0,4096B). Runtime 240 seconds
[  317.364499][T16018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'.
[  317.368959][T16015] xfrm0: left promiscuous mode
[  317.370939][T16015] xfrm0: left allmulticast mode
[  317.373412][T16015] veth1_virt_wifi: left promiscuous mode
[  317.380836][T16015] veth1_virt_wifi: left allmulticast mode
[  317.384708][T16015] macsec0: left allmulticast mode
[  317.387578][T16015] tipc: Resetting bearer <eth:syzkaller0>
[  317.405812][T16015] bond42: left promiscuous mode
[  317.408394][T16015] bond43: left promiscuous mode
[  317.411814][T16015] bond43: left allmulticast mode
[  317.427489][T16015] veth29: left promiscuous mode
[  317.444411][  T974] C speed is unknown, defaulting to 1000
[  317.454638][  T974] syz1: Port: 1 Link DOWN
[  317.474629][T16019] netlink: 'syz.2.2596': attribute type 1 has an invalid length.
[  317.485546][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'.
[  317.515340][T16030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2597'.
[  317.542880][T16024] openvswitch: netlink: IP tunnel dst address not specified
[  317.548062][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2594'.
[  317.563664][T16018] can: request_module (can-proto-0) failed.
[  317.659934][T16035] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2599'.
[  317.671911][T16035] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  317.845083][T16052] netlink: 'syz.1.2603': attribute type 13 has an invalid length.
[  317.854481][T16052] netlink: 'syz.1.2603': attribute type 17 has an invalid length.
[  317.974589][T16052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.985450][ T5895] C speed is unknown, defaulting to 1000
[  317.987693][ T5895] syz1: Port: 1 Link ACTIVE
[  318.121165][T16061] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.179984][T16061] syzkaller0: entered promiscuous mode
[  318.184013][T16061] syzkaller0: entered allmulticast mode
[  318.329429][T16067] pimreg3: entered allmulticast mode
[  318.431801][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'.
[  318.437918][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2610'.
[  318.841811][T16108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2618'.
[  318.882652][T16112] vti0: entered promiscuous mode
[  318.887685][T16112] vti0: entered allmulticast mode
[  318.950020][T16120] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) !
[  318.970779][T16116] netlink: 198280 bytes leftover after parsing attributes in process `syz.0.2622'.
[  318.974067][T16116] netlink: zone id is out of range
[  318.976443][T16116] netlink: zone id is out of range
[  318.978103][T16116] netlink: get zone limit has 8 unknown bytes
[  318.990417][T16116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2622'.
[  318.993572][T16116] netlink: 'syz.0.2622': attribute type 10 has an invalid length.
[  319.102310][T16131] netlink: 'syz.0.2626': attribute type 1 has an invalid length.
[  319.108667][T16131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  319.113234][ T5895] lo speed is unknown, defaulting to 1000
[  319.115232][ T5895] syz2: Port: 1 Link ACTIVE
[  319.117923][T16132] netlink: 'syz.0.2626': attribute type 1 has an invalid length.
[  319.120872][T16132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  319.463024][T16143] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  319.467366][T16143] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  319.471301][T16143] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  319.556319][   T33] audit: type=1107 audit(1757188404.146:11): pid=16145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  319.785436][T16156] C speed is unknown, defaulting to 1000
[  319.789115][T16156] lo speed is unknown, defaulting to 1000
[  320.086708][T16161] tipc: Resetting bearer <eth:syzkaller0>
[  320.131286][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  320.140400][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  320.143013][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  320.153135][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  320.352174][T16183] netlink: 'syz.2.2639': attribute type 2 has an invalid length.
[  320.354380][T16184] netlink: 'syz.2.2639': attribute type 2 has an invalid length.
[  320.377219][T16185] netlink: 'syz.0.2638': attribute type 13 has an invalid length.
[  320.380205][T16185] netlink: 'syz.0.2638': attribute type 17 has an invalid length.
[  320.402555][T16185] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.406973][T16185] 8021q: adding VLAN 0 to HW filter on device team0
[  320.409446][T16185] tipc: Resetting bearer <eth:team0>
[  320.411286][T16185] tipc: Resetting bearer <eth:team0>
[  320.431034][T16181] xfrm0: entered promiscuous mode
[  320.433132][T16181] xfrm0: entered allmulticast mode
[  320.455945][T16181] C speed is unknown, defaulting to 1000
[  320.458581][T16181] lo speed is unknown, defaulting to 1000
[  320.547473][T16190] C speed is unknown, defaulting to 1000
[  320.550911][T16190] lo speed is unknown, defaulting to 1000
[  320.928625][T16204] C speed is unknown, defaulting to 1000
[  320.931526][T16204] lo speed is unknown, defaulting to 1000
[  320.940893][T16205] C speed is unknown, defaulting to 1000
[  320.959360][T16205] lo speed is unknown, defaulting to 1000
[  321.367016][   T33] audit: type=1107 audit(1757188405.956:12): pid=16219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  321.428578][T16227] C speed is unknown, defaulting to 1000
[  321.432484][T16227] lo speed is unknown, defaulting to 1000
[  321.600938][T16235] pim6reg1: entered promiscuous mode
[  321.603123][T16235] pim6reg1: entered allmulticast mode
[  321.788369][T16248] syzkaller0: entered promiscuous mode
[  321.790458][T16248] syzkaller0: entered allmulticast mode
[  321.995295][T16260] ..1: renamed from ..0
[  321.999552][T16260] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  322.629631][T16265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  322.776720][T16267] C speed is unknown, defaulting to 1000
[  322.780399][T16267] lo speed is unknown, defaulting to 1000
[  322.826324][T16272] __nla_validate_parse: 12 callbacks suppressed
[  322.826338][T16272] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2664'.
[  322.983726][T16280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2666'.
[  322.994764][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'.
[  323.013173][T16280] bond0: Removing last arp target with arp_interval on
[  323.025369][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'.
[  323.060336][T16281] bridge24: entered promiscuous mode
[  323.062768][T16281] macsec0: entered promiscuous mode
[  323.065836][T16281] macsec0: entered allmulticast mode
[  323.067881][T16281] bridge24: entered allmulticast mode
[  323.071336][T16281] bridge24: port 1(macsec0) entered blocking state
[  323.084566][T16281] bridge24: port 1(macsec0) entered disabled state
[  323.092757][T16281] bridge24: left allmulticast mode
[  323.095356][T16281] bridge24: left promiscuous mode
[  323.294035][T16291] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2671'.
[  323.435313][T16299] net_ratelimit: 5 callbacks suppressed
[  323.435333][T16299] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  323.446819][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'.
[  323.608688][T16312] openvswitch: netlink: IP tunnel dst address not specified
[  323.813314][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2681'.
[  323.872540][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'.
[  324.738596][T16329] C speed is unknown, defaulting to 1000
[  324.741362][T16329] lo speed is unknown, defaulting to 1000
[  325.978652][T16353] team0: Mode changed to "broadcast"
[  325.982446][T16353] tipc: Enabled bearer <eth:team0>, priority 0
[  326.692398][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'.
[  326.787920][T16358] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2689'.
[  327.305978][T16374] netlink: 'syz.2.2693': attribute type 11 has an invalid length.
[  327.316135][T16374] validate_nla: 3 callbacks suppressed
[  327.316147][T16374] netlink: 'syz.2.2693': attribute type 10 has an invalid length.
[  327.352759][T16377] IPv6: sit5: Disabled Multicast RS
[  327.412736][T16371] 8021q: adding VLAN 0 to HW filter on device bond47
[  327.744942][T16391] netlink: 'syz.0.2697': attribute type 10 has an invalid length.
[  327.852796][T16391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.861622][T16391] batadv0: entered promiscuous mode
[  327.865689][T16391] batadv0: entered allmulticast mode
[  327.868643][T16391] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  327.876027][ T5913] bond0: (slave batadv0): interface is now down
[  327.883195][ T5913] bond0: now running without any active interface!
[  327.990368][T16399] __nla_validate_parse: 7 callbacks suppressed
[  327.990388][T16399] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2699'.
[  328.059171][T16393] netlink: 'syz.1.2698': attribute type 1 has an invalid length.
[  328.340258][T16415] C speed is unknown, defaulting to 1000
[  328.343109][T16415] lo speed is unknown, defaulting to 1000
[  328.414899][T16425] syzkaller1: entered promiscuous mode
[  328.417036][T16425] syzkaller1: entered allmulticast mode
[  328.479370][T16429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2707'.
[  328.532784][T16432] C speed is unknown, defaulting to 1000
[  328.573837][T16432] lo speed is unknown, defaulting to 1000
[  328.740019][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'.
[  328.752123][T16442] mac80211_hwsim hwsim35 ;: renamed from wlan0
[  328.834586][T16446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2708'.
[  328.842459][T16446] netlink: 'syz.1.2708': attribute type 7 has an invalid length.
[  328.860425][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2710'.
[  329.043711][T16469] netlink: 'syz.0.2715': attribute type 5 has an invalid length.
[  329.046812][T16469] netlink: 'syz.0.2715': attribute type 7 has an invalid length.
[  329.051668][T16469] netlink: 'syz.0.2715': attribute type 4 has an invalid length.
[  329.068692][ T5898] lo speed is unknown, defaulting to 1000
[  329.070589][ T5898] syz2: Port: 1 Link DOWN
[  329.072916][T16469] netlink: 'syz.0.2715': attribute type 4 has an invalid length.
[  329.080555][ T5898] lo speed is unknown, defaulting to 1000
[  329.083562][ T5898] syz2: Port: 1 Link ACTIVE
[  329.188459][T16478] tipc: Resetting bearer <eth:team0>
[  329.192213][T16478] bond0: (slave batadv0): Releasing backup interface
[  329.203238][T16478] batadv0: left promiscuous mode
[  329.205839][T16478] batadv0: left allmulticast mode
[  329.213375][T16478] team0: Port device batadv4 removed
[  329.219622][T16478] bond48: (slave bridge26): Releasing active interface
[  329.225734][T16478] bond50: (slave bridge29): Releasing active interface
[  329.231144][T16478] bond53: (slave veth31): Releasing active interface
[  329.690807][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2724'.
[  329.758671][T16504] C speed is unknown, defaulting to 1000
[  329.762776][T16504] lo speed is unknown, defaulting to 1000
[  329.813147][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'.
[  329.820082][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2727'.
[  330.044402][T16521] netlink: 'syz.0.2731': attribute type 13 has an invalid length.
[  330.053691][T16519] netlink: 'syz.1.2730': attribute type 13 has an invalid length.
[  330.056693][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'.
[  330.063391][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'.
[  330.188813][T16527] C speed is unknown, defaulting to 1000
[  330.192444][T16527] lo speed is unknown, defaulting to 1000
[  330.574013][T16548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  330.630498][T16552] C speed is unknown, defaulting to 1000
[  330.633522][T16552] lo speed is unknown, defaulting to 1000
[  330.709958][T16558] 8021q: adding VLAN 0 to HW filter on device batadv0
[  330.715778][T16558] batadv0: entered promiscuous mode
[  330.718260][T16558] batadv0: entered allmulticast mode
[  330.721101][T16558] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  330.734339][ T5913] bond0: (slave batadv0): interface is now down
[  330.736894][ T5913] bond0: now running without any active interface!
[  330.877263][T16562] 8021q: adding VLAN 0 to HW filter on device bond57
[  331.019196][T16562] veth1: entered promiscuous mode
[  331.036256][T16562] bond57: (slave veth1): Enslaving as an active interface with an up link
[  331.088790][T16568] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  331.209871][  T793] lo speed is unknown, defaulting to 1000
[  331.212294][  T793] syz2: Port: 1 Link DOWN
[  331.259681][T16577] netlink: 'syz.1.2747': attribute type 11 has an invalid length.
[  331.832387][T16624] gtp2: entered promiscuous mode
[  331.834844][T16624] gtp2: entered allmulticast mode
[  332.576122][T16655] C speed is unknown, defaulting to 1000
[  332.578912][T16655] lo speed is unknown, defaulting to 1000
[  333.025437][T16662] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.170571][T16675] __nla_validate_parse: 8 callbacks suppressed
[  333.170593][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'.
[  333.210527][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'.
[  333.309703][T16689] C speed is unknown, defaulting to 1000
[  333.318009][T16689] lo speed is unknown, defaulting to 1000
[  333.465349][T16689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2776'.
[  333.470490][T16689] validate_nla: 7 callbacks suppressed
[  333.470505][T16689] netlink: 'syz.0.2776': attribute type 13 has an invalid length.
[  333.476980][T16689] netlink: 'syz.0.2776': attribute type 17 has an invalid length.
[  333.490755][T16689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  333.849979][T16709] xt_limit: Overflow, try lower: 271964/0
[  333.859278][T16709] veth32: entered allmulticast mode
[  334.097397][T16714] : entered promiscuous mode
[  334.122681][T16718] netlink: 'syz.0.2783': attribute type 1 has an invalid length.
[  334.126046][T16718] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2783'.
[  334.129738][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2783'.
[  334.413028][T16750] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.464427][T16749] netlink: 'syz.0.2791': attribute type 4 has an invalid length.
[  334.551880][T16762] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2795'.
[  334.566028][T16762] netlink: 'syz.2.2795': attribute type 1 has an invalid length.
[  334.572366][T16762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2795'.
[  334.628257][T16765] lo speed is unknown, defaulting to 1000
[  334.644481][T16764] lo speed is unknown, defaulting to 1000
[  334.769708][T16772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2798'.
[  334.825751][T16774] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2799'.
[  334.956807][T16778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2801'.
[  335.100743][T16790] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003
[  335.177365][T16794] lo speed is unknown, defaulting to 1000
[  335.412094][T16811] vlan6: entered allmulticast mode
[  335.415915][T16811] gretap0: entered allmulticast mode
[  335.986514][T16856] netlink: 'syz.0.2817': attribute type 1 has an invalid length.
[  336.392086][T16877] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  336.431085][T16877] team1: entered promiscuous mode
[  336.432808][T16877] team1: entered allmulticast mode
[  336.496460][T16881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.647279][T16899] netlink: 'syz.2.2828': attribute type 1 has an invalid length.
[  336.692925][T16899] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.713650][T16893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.781033][T16906] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  336.789555][T16906] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  336.792984][T16906] tipc: Resetting bearer <eth:syzkaller0>
[  336.884944][T16915] netlink: 'syz.0.2832': attribute type 11 has an invalid length.
[  337.022002][T16928] syzkaller0: left promiscuous mode
[  337.029453][T16928] syzkaller0: left allmulticast mode
[  337.111208][T16939] bond0: option mode: unable to set because the bond device has slaves
[  337.265639][T16956] tipc: Resetting bearer <eth:team0>
[  337.271492][T16956] xfrm0: left promiscuous mode
[  337.273212][T16956] xfrm0: left allmulticast mode
[  337.276362][T16956] ..0: left allmulticast mode
[  337.278220][T16956] hsr_slave_0: left allmulticast mode
[  337.283053][T16956] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  337.287023][T16956] tipc: Resetting bearer <eth:syzkaller0>
[  337.300154][T16956] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  337.311194][T16956] veth27: left promiscuous mode
[  337.313296][T16956] gretap4: left promiscuous mode
[  337.315587][T16956] gretap4: left allmulticast mode
[  337.317677][T16956] gtp2: left promiscuous mode
[  337.319291][T16956] gtp2: left allmulticast mode
[  337.322457][T16956] bridge28: left allmulticast mode
[  337.325715][T16956] macvtap4: left promiscuous mode
[  337.327840][T16956] macvtap4: left allmulticast mode
[  337.329973][T16956] macvtap5: left promiscuous mode
[  337.331589][T16956] macvtap5: left allmulticast mode
[  337.336605][T16956] veth31: left promiscuous mode
[  337.338750][T16956] vlan1: left promiscuous mode
[  337.342045][T16956] bond0: left promiscuous mode
[  337.343749][T16956] batadv0: left promiscuous mode
[  337.346441][T16956] vlan1: left allmulticast mode
[  337.348289][T16956] bond0: left allmulticast mode
[  337.350058][T16956] batadv0: left allmulticast mode
[  337.353629][T16956] vti0: left promiscuous mode
[  337.355380][T16956] vti0: left allmulticast mode
[  337.367474][T16956] veth1: left promiscuous mode
[  337.371104][T16956] team1: left promiscuous mode
[  337.373092][T16956] team1: left allmulticast mode
[  337.652849][T16963] 8021q: adding VLAN 0 to HW filter on device bond35
[  337.659775][T16963] team0: Port device bond35 added
[  337.698248][T16982] netlink: 'syz.1.2851': attribute type 9 has an invalid length.
[  337.830259][T16986] netlink: 'syz.1.2853': attribute type 3 has an invalid length.
[  337.977476][T16994] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.980460][T16994] syzkaller0: entered promiscuous mode
[  337.982213][T16994] syzkaller0: entered allmulticast mode
[  338.049225][T16997] 8021q: adding VLAN 0 to HW filter on device bond48
[  338.264016][T17014] lo speed is unknown, defaulting to 1000
[  339.017649][T17022] __nla_validate_parse: 25 callbacks suppressed
[  339.017661][T17022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2863'.
[  339.022808][T17022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2863'.
[  339.078346][T17027] validate_nla: 2 callbacks suppressed
[  339.078367][T17027] netlink: 'syz.2.2864': attribute type 2 has an invalid length.
[  339.087344][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'.
[  339.135667][T17027] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  339.196499][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'.
[  339.199712][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'.
[  339.419056][T17051] netlink: 'syz.1.2871': attribute type 10 has an invalid length.
[  339.425605][T17051] netlink: 'syz.1.2871': attribute type 10 has an invalid length.
[  339.446990][T17051] 8021q: adding VLAN 0 to HW filter on device bond1
[  339.452565][T17051] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2871'.
[  339.533836][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'.
[  339.900662][T17069] netlink: 'syz.0.2877': attribute type 1 has an invalid length.
[  339.950784][T17069] 8021q: adding VLAN 0 to HW filter on device bond58
[  340.008157][T17069] veth33: entered promiscuous mode
[  340.110976][T17069] erspan0: entered allmulticast mode
[  340.129727][T17069] bond58: (slave erspan0): making interface the new active one
[  340.133530][T17069] bond58: (slave erspan0): Enslaving as an active interface with an up link
[  340.183485][T17078] syzkaller1: entered promiscuous mode
[  340.185958][T17078] syzkaller1: entered allmulticast mode
[  342.597625][T17100] netlink: 'syz.2.2885': attribute type 10 has an invalid length.
[  342.657208][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'.
[  342.660326][T17109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2889'.
[  342.663684][T17109] tipc: Invalid UDP bearer configuration
[  342.663719][T17109] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  342.672802][T17109] veth0: entered promiscuous mode
[  342.676790][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'.
[  342.681708][T17109] veth0 (unregistering): left promiscuous mode
[  342.748222][T17115] netlink: 'syz.1.2892': attribute type 1 has an invalid length.
[  342.808899][T17117] netlink: 'syz.1.2892': attribute type 10 has an invalid length.
[  343.620264][T17126] netlink: 'syz.1.2895': attribute type 8 has an invalid length.
[  343.872871][T17142] netlink: 'syz.2.2899': attribute type 8 has an invalid length.
[  343.943626][T17142] bond0: entered promiscuous mode
[  343.949672][T17142] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  343.953528][T17142] hsr0: entered promiscuous mode
[  343.967234][T17145] netlink: 'syz.1.2901': attribute type 1 has an invalid length.
[  344.026845][T17155] __nla_validate_parse: 8 callbacks suppressed
[  344.026859][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2904'.
[  344.191992][T17172] netlink: 'syz.1.2908': attribute type 11 has an invalid length.
[  344.316976][T17181] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2909'.
[  344.383970][T17185] netlink: del zone limit has 8 unknown bytes
[  344.398770][T17187] validate_nla: 1 callbacks suppressed
[  344.398784][T17187] netlink: 'syz.1.2913': attribute type 2 has an invalid length.
[  344.405846][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2913'.
[  344.428464][T17185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2912'.
[  344.769479][T17219] netlink: 'syz.0.2920': attribute type 1 has an invalid length.
[  344.796087][T17224] netlink: 'syz.2.2921': attribute type 1 has an invalid length.
[  344.798902][T17224] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2921'.
[  344.952826][T17240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'.
[  345.017529][T17244] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  345.020053][T17244] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  345.022886][T17244] tipc: Resetting bearer <eth:syzkaller0>
[  345.103097][T17252] bridge0: port 1(erspan0) entered blocking state
[  345.117509][T17252] bridge0: port 1(erspan0) entered disabled state
[  345.125775][T17252] erspan0: entered allmulticast mode
[  345.136638][T17252] erspan0: left allmulticast mode
[  345.142481][T17252] sctp: [Deprecated]: syz.2.2926 (pid 17252) Use of int in maxseg socket option.
[  345.142481][T17252] Use struct sctp_assoc_value instead
[  345.247104][T17259] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2930'.
[  345.252107][T17259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2930'.
[  345.266669][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'.
[  345.270302][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'.
[  345.279178][T17261] netlink: 'syz.2.2931': attribute type 18 has an invalid length.
[  345.292931][T17261] netlink: 'syz.2.2931': attribute type 18 has an invalid length.
[  345.333974][T17266] netlink: 'syz.1.2932': attribute type 1 has an invalid length.
[  345.359090][T17266] bond49: entered promiscuous mode
[  345.361294][T17266] 8021q: adding VLAN 0 to HW filter on device bond49
[  345.393423][T17266] 8021q: adding VLAN 0 to HW filter on device bond50
[  345.399259][T17266] bond49: (slave bond50): making interface the new active one
[  345.402397][T17266] bond50: entered promiscuous mode
[  345.405559][T17266] bond49: (slave bond50): Enslaving as an active interface with an up link
[  345.415091][T17267] bond49: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  345.420326][T17267] bond49: (slave ipvlan6): The slave device specified does not support setting the MAC address
[  345.520126][T17286] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  345.677402][T17299] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.747586][   T98] block nbd0: Possible stuck request ffff888021538000: control (read@0,4096B). Runtime 270 seconds
[  345.761411][T17305] netlink: 'syz.0.2942': attribute type 1 has an invalid length.
[  345.801568][T17305] 8021q: adding VLAN 0 to HW filter on device bond60
[  345.813420][T17305] ip6gre2: entered allmulticast mode
[  346.099751][   T33] audit: type=1800 audit(1757188430.686:13): pid=17323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2945" name="memory.events" dev="tmpfs" ino=5226 res=0 errno=0
[  346.569374][T17353] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  346.591272][ T5875] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  346.595690][ T5875] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  346.614681][   T10] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  346.666443][   T10] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  346.669266][T17363] netlink: 'syz.2.2958': attribute type 21 has an invalid length.
[  346.677956][T17363] pim6reg1: entered promiscuous mode
[  346.679810][T17363] pim6reg1: entered allmulticast mode
[  346.750825][T17367] netlink: 'syz.1.2960': attribute type 12 has an invalid length.
[  346.883427][T17375] netlink: 'syz.2.2964': attribute type 10 has an invalid length.
[  346.900467][T17375] batman_adv: batadv0: Adding interface: bond2
[  346.902711][T17375] batman_adv: batadv0: The MTU of interface bond2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  346.911194][T17375] batman_adv: batadv0: Not using interface bond2 (retrying later): interface not active
[  347.077143][T17381] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  347.089790][   T10] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  347.133635][T17393] batadv_slave_0: entered promiscuous mode
[  347.193715][T17399] 8021q: adding VLAN 0 to HW filter on device bond36
[  347.198798][T17399] bond0: (slave bond36): Enslaving as an active interface with a down link
[  347.461017][T17420] ip6gretap0: entered promiscuous mode
[  347.489088][T17418] syzkaller1: entered promiscuous mode
[  347.491341][T17418] syzkaller1: entered allmulticast mode
[  347.586431][T17431] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  347.968923][T17452] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  348.002827][T17450] lo speed is unknown, defaulting to 1000
[  348.063423][T17455] pimreg: tun_chr_ioctl cmd 1074025677
[  348.070021][T17455] pimreg: linktype set to 1
[  348.251572][T17462] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  348.371951][T17477] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  348.422029][T17479] bond51: (slave vxcan5): The slave device specified does not support setting the MAC address
[  348.432390][T17479] bond51: (slave vxcan5): Error -95 calling set_mac_address
[  348.528834][T17488] syzkaller0: left promiscuous mode
[  348.531089][T17488] syzkaller0: left allmulticast mode
[  348.689367][T17499] 8021q: adding VLAN 0 to HW filter on device bond52
[  348.947697][T17517] tun0: tun_chr_ioctl cmd 2148045848
[  348.950894][T17517] tun0: tun_chr_ioctl cmd 21731
[  349.527015][T17519] syzkaller1: entered promiscuous mode
[  349.529143][T17519] syzkaller1: entered allmulticast mode
[  349.533655][T17519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.740037][T17527] 8021q: adding VLAN 0 to HW filter on device bond61
[  349.745343][T17527] bond0: (slave bond61): Enslaving as an active interface with a down link
[  349.757457][T17532] validate_nla: 2 callbacks suppressed
[  349.757472][T17532] netlink: 'syz.1.3007': attribute type 13 has an invalid length.
[  349.762145][T17532] netlink: 'syz.1.3007': attribute type 17 has an invalid length.
[  349.774582][T17532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  349.793212][T17526] __nla_validate_parse: 40 callbacks suppressed
[  349.793229][T17526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3007'.
[  349.812879][T17534] syzkaller0: entered promiscuous mode
[  349.854854][T17534] syzkaller0: entered allmulticast mode
[  349.980658][T17532] lo speed is unknown, defaulting to 1000
[  350.117958][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3012'.
[  350.123039][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3012'.
[  350.173519][T17546] netlink: 'syz.2.3011': attribute type 4 has an invalid length.
[  350.240110][T17556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3011'.
[  350.261646][T17557] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  350.336180][T17554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3013'.
[  350.342884][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'.
[  350.459261][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'.
[  350.746673][T17594] netlink: 'syz.0.3022': attribute type 1 has an invalid length.
[  350.775672][T17594] 8021q: adding VLAN 0 to HW filter on device bond62
[  350.796521][T17594] bond62: (slave geneve0): making interface the new active one
[  350.800408][T17594] bond62: (slave geneve0): Enslaving as an active interface with an up link
[  350.809789][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.813770][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.828271][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.833761][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  350.839663][T17602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3023'.
[  350.864645][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  350.886506][T17605] pim6reg: entered allmulticast mode
[  350.939263][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'.
[  351.091450][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'.
[  351.685635][T17650] netlink: 'syz.2.3038': attribute type 142 has an invalid length.
[  351.964825][T17681] netlink: 'syz.2.3043': attribute type 1 has an invalid length.
[  351.967572][T17673] netlink: 'syz.2.3043': attribute type 1 has an invalid length.
[  352.034040][T17685] netlink: 'syz.1.3046': attribute type 10 has an invalid length.
[  352.258123][T17708] warn_alloc: 1 callbacks suppressed
[  352.258141][T17708] syz.0.3052: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  352.341515][T17708] CPU: 0 UID: 0 PID: 17708 Comm: syz.0.3052 Not tainted syzkaller #0 PREEMPT(full) 
[  352.341540][T17708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  352.341550][T17708] Call Trace:
[  352.341556][T17708]  <TASK>
[  352.341565][T17708]  dump_stack_lvl+0x189/0x250
[  352.341590][T17708]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.341608][T17708]  ? __pfx__printk+0x10/0x10
[  352.341629][T17708]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  352.341645][T17708]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  352.341663][T17708]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  352.341682][T17708]  warn_alloc+0x214/0x310
[  352.341706][T17708]  ? stack_depot_save_flags+0x40/0x860
[  352.341727][T17708]  ? __pfx_warn_alloc+0x10/0x10
[  352.341749][T17708]  ? kasan_save_track+0x4f/0x80
[  352.341769][T17708]  ? xskq_create+0x56/0x170
[  352.341781][T17708]  ? xsk_init_queue+0xb0/0x110
[  352.341802][T17708]  ? xsk_setsockopt+0x4dc/0x8d0
[  352.341820][T17708]  ? do_sock_setsockopt+0x17c/0x1b0
[  352.341835][T17708]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  352.341849][T17708]  ? do_syscall_64+0xfa/0x3b0
[  352.341864][T17708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.341881][T17708]  __vmalloc_node_range_noprof+0x125/0x12f0
[  352.341926][T17708]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  352.341950][T17708]  ? __kasan_kmalloc+0x93/0xb0
[  352.341970][T17708]  vmalloc_user_noprof+0xad/0xf0
[  352.341988][T17708]  ? xskq_create+0xbf/0x170
[  352.342002][T17708]  xskq_create+0xbf/0x170
[  352.342019][T17708]  xsk_init_queue+0xb0/0x110
[  352.342035][T17708]  xsk_setsockopt+0x4dc/0x8d0
[  352.342057][T17708]  ? __pfx_xsk_setsockopt+0x10/0x10
[  352.342078][T17708]  ? __pfx_aa_sk_perm+0x10/0x10
[  352.342101][T17708]  ? aa_sock_opt_perm+0xff/0x1b0
[  352.342117][T17708]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  352.342132][T17708]  ? __pfx_xsk_setsockopt+0x10/0x10
[  352.342154][T17708]  do_sock_setsockopt+0x17c/0x1b0
[  352.342174][T17708]  __x64_sys_setsockopt+0x13f/0x1b0
[  352.342229][T17708]  do_syscall_64+0xfa/0x3b0
[  352.342243][T17708]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.342257][T17708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.342271][T17708]  ? exc_page_fault+0x9f/0xf0
[  352.342287][T17708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.342304][T17708] RIP: 0033:0x7f3ecfb8ebe9
[  352.342318][T17708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.342331][T17708] RSP: 002b:00007f3ed0975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  352.342345][T17708] RAX: ffffffffffffffda RBX: 00007f3ecfdc5fa0 RCX: 00007f3ecfb8ebe9
[  352.342354][T17708] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  352.342363][T17708] RBP: 00007f3ecfc11e19 R08: 0000000000000004 R09: 0000000000000000
[  352.342371][T17708] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  352.342380][T17708] R13: 00007f3ecfdc6038 R14: 00007f3ecfdc5fa0 R15: 00007fff63d5f9e8
[  352.342402][T17708]  </TASK>
[  352.342408][T17708] Mem-Info:
[  352.422379][T17730] netlink: 'syz.0.3052': attribute type 1 has an invalid length.
[  352.428309][T17708] active_anon:5035 inactive_anon:0 isolated_anon:0
[  352.428309][T17708]  active_file:1414 inactive_file:38336 isolated_file:0
[  352.428309][T17708]  unevictable:1768 dirty:19 writeback:0
[  352.428309][T17708]  slab_reclaimable:11632 slab_unreclaimable:139139
[  352.428309][T17708]  mapped:18236 shmem:2445 pagetables:1048
[  352.428309][T17708]  sec_pagetables:0 bounce:0
[  352.428309][T17708]  kernel_misc_reclaimable:0
[  352.428309][T17708]  free:209758 free_pcp:18314 free_cma:0
[  352.498870][T17708] Node 0 active_anon:12248kB inactive_anon:0kB active_file:3432kB inactive_file:25200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32420kB dirty:44kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7300kB pagetables:1912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  352.516119][T17708] Node 1 active_anon:8028kB inactive_anon:0kB active_file:2224kB inactive_file:128144kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40524kB dirty:32kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9636kB pagetables:2008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  352.530868][T17708] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  352.549539][T17708] lowmem_reserve[]: 0 811 811 811 811
[  352.551848][T17708] Node 0 DMA32 free:162788kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12248kB inactive_anon:0kB active_file:3432kB inactive_file:25200kB unevictable:3536kB writepending:44kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:42868kB local_pcp:25764kB free_cma:0kB
[  352.570349][T17708] lowmem_reserve[]: 0 0 0 0 0
[  352.572428][T17708] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  352.588031][T17739] vlan3: entered allmulticast mode
[  352.589044][T17708] lowmem_reserve[]: 0 0 854 854 854
[  352.592043][T17708] Node 1 Normal free:200900kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8028kB inactive_anon:0kB active_file:2224kB inactive_file:128144kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31836kB local_pcp:16740kB free_cma:0kB
[  352.597853][T17739] bond63: entered allmulticast mode
[  352.605855][T17708] lowmem_reserve[]: 0 0 0 0 0
[  352.609159][T17708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  352.614093][T17708] Node 0 DMA32: 1197*4kB (UM) 338*8kB (UM) 364*16kB (UM) 263*32kB (UM) 89*64kB (UME) 70*128kB (UM) 96*256kB (UM) 37*512kB (UM) 15*1024kB (UME) 7*2048kB (UME) 13*4096kB (M) = 162852kB
[  352.629532][T17708] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  352.636320][T17708] Node 1 Normal: 61*4kB (UM) 150*8kB (ME) 498*16kB (UME) 108*32kB (UME) 84*64kB (UM) 69*128kB (UME) 63*256kB (UM) 8*512kB (ME) 8*1024kB (UME) 11*2048kB (UM) 30*4096kB (UM) = 200900kB
[  352.645107][T17708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  352.648204][T17708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  352.655458][T17708] 42193 total pagecache pages
[  352.657585][T17708] 0 pages in swap cache
[  352.659549][T17708] Free swap  = 124996kB
[  352.661382][T17708] Total swap = 124996kB
[  352.663295][T17708] 786301 pages RAM
[  352.665048][T17708] 0 pages HighMem/MovableOnly
[  352.667382][T17708] 241348 pages reserved
[  352.669228][T17708] 0 pages cma reserved
[  353.048545][T17761] lo speed is unknown, defaulting to 1000
[  353.645361][T17781] block nbd1: server does not support multiple connections per device.
[  353.661313][T17781] block nbd1: shutting down sockets
[  353.952971][T17813] netlink: 'syz.0.3075': attribute type 1 has an invalid length.
[  354.000902][T17813] bond64: entered promiscuous mode
[  354.003461][T17813] 8021q: adding VLAN 0 to HW filter on device bond64
[  354.051950][T17813] 8021q: adding VLAN 0 to HW filter on device bond64
[  354.056244][T17813] bond64: (slave wireguard0): The slave device specified does not support setting the MAC address
[  354.061036][T17813] bond64: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  354.073164][T17813] bond64: (slave wireguard0): making interface the new active one
[  354.082268][T17813] wireguard0: entered promiscuous mode
[  354.087919][T17813] bond64: (slave wireguard0): Enslaving as an active interface with an up link
[  354.109339][T17822] bond64: (slave wireguard1): The slave device specified does not support setting the MAC address
[  354.184342][T17822] bond64: (slave wireguard1): Enslaving as a backup interface with an up link
[  354.533669][T17854] sctp: [Deprecated]: syz.1.3083 (pid 17854) Use of struct sctp_assoc_value in delayed_ack socket option.
[  354.533669][T17854] Use struct sctp_sack_info instead
[  354.596533][T17861] : renamed from vlan1
[  354.732140][T17879] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  354.743452][T17879] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  354.769262][T17880] bridge24: entered promiscuous mode
[  354.771421][T17880] bridge24: entered allmulticast mode
[  354.812862][T17881] __nla_validate_parse: 23 callbacks suppressed
[  354.812878][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'.
[  354.813427][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'.
[  354.825074][T17871] syzkaller0: left promiscuous mode
[  354.826737][T17871] syzkaller0: left allmulticast mode
[  354.923128][T17894] xt_time: invalid argument - start or stop time greater than 23:59:59
[  354.985761][T17900] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  355.479263][T17928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3094'.
[  355.529265][T17930] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  355.709082][T17942] tipc: Resetting bearer <eth:syzkaller0>
[  355.763479][T17938] validate_nla: 13 callbacks suppressed
[  355.763498][T17938] netlink: 'syz.1.3096': attribute type 4 has an invalid length.
[  355.803426][T17947] netlink: 'syz.2.3099': attribute type 1 has an invalid length.
[  355.807375][T17945] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3098'.
[  355.838647][T17947] 8021q: adding VLAN 0 to HW filter on device bond37
[  355.878549][T17951] veth19: entered promiscuous mode
[  355.883773][T17951] bond37: (slave veth19): Enslaving as an active interface with a down link
[  355.886813][T17952] erspan0: entered allmulticast mode
[  355.936023][T17960] netlink: 'syz.2.3102': attribute type 1 has an invalid length.
[  355.939166][T17960] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3102'.
[  356.075751][T17973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3106'.
[  356.149261][T17981] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3109'.
[  356.179664][T17981] 8021q: VLANs not supported on ip_vti0
[  356.259416][T17991] netlink: 'syz.2.3111': attribute type 13 has an invalid length.
[  356.262533][T17991] netlink: 'syz.2.3111': attribute type 17 has an invalid length.
[  356.286540][T17991] erspan0: left allmulticast mode
[  356.341270][T17991] 8021q: adding VLAN 0 to HW filter on device team0
[  356.345595][T17991] tipc: Resetting bearer <eth:team0>
[  356.348399][T17991] tipc: Resetting bearer <eth:team0>
[  356.352360][T17991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.374763][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.450419][T18010] dvmrp8: entered allmulticast mode
[  356.452982][T17991] lo speed is unknown, defaulting to 1000
[  356.539638][T18010] lo speed is unknown, defaulting to 1000
[  356.678747][ T7077] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.682853][T18020] netlink: 'syz.1.3118': attribute type 1 has an invalid length.
[  356.689622][T18020] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3118'.
[  356.690966][ T7077] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  356.857744][T18010] dvmrp8: left allmulticast mode
[  356.993945][T18024] lo speed is unknown, defaulting to 1000
[  357.169572][  T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  357.172164][  T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  357.207074][T18038] tipc: Resetting bearer <eth:syzkaller0>
[  357.265384][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.349606][ T5913] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.353030][ T5913] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.356372][ T5913] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.359333][ T5913] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  357.664559][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  358.007374][T18043] lo speed is unknown, defaulting to 1000
[  358.046555][T18048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  358.052929][T18049] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  358.105297][T18048] 8021q: adding VLAN 0 to HW filter on device bond38
[  358.110801][T18048] bond0: (slave bond38): Enslaving as an active interface with a down link
[  358.216242][T18057] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3130'.
[  358.302851][T18062] netlink: 'syz.0.3132': attribute type 8 has an invalid length.
[  358.460937][T18072] netlink: 'syz.1.3135': attribute type 39 has an invalid length.
[  358.573484][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3137'.
[  358.595412][T18070] lo speed is unknown, defaulting to 1000
[  358.773949][T18092] netlink: 'syz.1.3138': attribute type 7 has an invalid length.
[  358.784557][T18092] netlink: 'syz.1.3138': attribute type 8 has an invalid length.
[  358.892456][T18101] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.140281][T18121] lo speed is unknown, defaulting to 1000
[  359.356101][T18130] veth20: entered allmulticast mode
[  359.719724][T18139] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.824447][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  359.914130][T18141] lo speed is unknown, defaulting to 1000
[  360.190793][T18161] __nla_validate_parse: 6 callbacks suppressed
[  360.190807][T18161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'.
[  360.265082][T18166] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  360.350530][T18164] lo speed is unknown, defaulting to 1000
[  360.361999][T18171] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  360.373637][T18171] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  360.631696][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  360.850311][T18194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3167'.
[  360.899614][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'.
[  360.989984][T18200] validate_nla: 2 callbacks suppressed
[  360.990006][T18200] netlink: 'syz.0.3171': attribute type 10 has an invalid length.
[  361.005011][T18200] tipc: Resetting bearer <eth:team0>
[  361.008898][T18200] 8021q: adding VLAN 0 to HW filter on device team0
[  361.013577][T18200] bond0: (slave team0): Enslaving as an active interface with a down link
[  361.022305][T18200] netlink: 'syz.0.3171': attribute type 10 has an invalid length.
[  361.049754][T18206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3174'.
[  361.057043][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'.
[  361.141573][T18216] sctp: [Deprecated]: syz.1.3176 (pid 18216) Use of int in maxseg socket option.
[  361.141573][T18216] Use struct sctp_assoc_value instead
[  361.148584][T18217] sctp: [Deprecated]: syz.1.3176 (pid 18217) Use of int in maxseg socket option.
[  361.148584][T18217] Use struct sctp_assoc_value instead
[  361.154359][T18216] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.199028][T18223] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  361.261091][T18200] 8021q: adding VLAN 0 to HW filter on device bond65
[  361.303365][T18228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3177'.
[  361.332539][T18228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3177'.
[  361.343413][T18228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3177'.
[  361.444757][T18237] netlink: 464 bytes leftover after parsing attributes in process `syz.1.3181'.
[  361.477546][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3180'.
[  361.502562][T18243] netlink: 'syz.1.3181': attribute type 10 has an invalid length.
[  361.588836][T18248] netlink: 'syz.2.3184': attribute type 10 has an invalid length.
[  361.663544][T18252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.673946][T18252] syzkaller0: entered promiscuous mode
[  361.677399][T18252] syzkaller0: entered allmulticast mode
[  361.696981][T18253] netlink: 'syz.1.3185': attribute type 1 has an invalid length.
[  361.733696][T18253] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.740566][T18253] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  361.747038][T18253] bond1: (slave vcan0): Error -95 calling set_mac_address
[  361.773564][T18251] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.859078][T18261] netlink: 'syz.1.3188': attribute type 5 has an invalid length.
[  362.071234][T18273] netlink: 'syz.2.3191': attribute type 4 has an invalid length.
[  362.122744][T18274] netlink: 'syz.2.3191': attribute type 4 has an invalid length.
[  362.128350][T18266] bond0 (unregistering): (slave bond39): Releasing active interface
[  362.132938][T18266] bond0 (unregistering): Released all slaves
[  362.223192][T18276] netlink: 'syz.2.3192': attribute type 4 has an invalid length.
[  362.332552][T18284] dvmrp0: left allmulticast mode
[  362.532619][T18293] netlink: 'syz.1.3198': attribute type 1 has an invalid length.
[  362.739620][T18298] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  362.827911][T18303] vxcan1: entered allmulticast mode
[  362.895803][T18299] lo speed is unknown, defaulting to 1000
[  362.977700][T18305] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.996332][T18305] bond0: (slave gretap8): making interface the new active one
[  363.000588][T18305] bond0: (slave gretap8): Enslaving as an active interface with an up link
[  363.961190][T18354] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.048130][T18360] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  364.386049][T18375] bond39: entered promiscuous mode
[  364.389794][T18375] bond39: entered allmulticast mode
[  364.392493][T18375] 8021q: adding VLAN 0 to HW filter on device bond39
[  364.448842][T18375] bond40: entered promiscuous mode
[  364.451187][T18375] bond40: entered allmulticast mode
[  364.453816][T18375] 8021q: adding VLAN 0 to HW filter on device bond40
[  364.669506][T18391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  364.728809][T18389] tipc: Resetting bearer <eth:team0>
[  364.731769][T18389] batman_adv: batadv0: Removing interface: bond2
[  364.757804][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.758174][T18389] team0: Port device bond35 removed
[  364.768911][T18389] bond0: (slave bond36): Releasing active interface
[  364.771164][T18389] bond0: (slave bond36): the permanent HWaddr of slave - 56:48:68:4c:30:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  364.785818][T18389] bond37: (slave veth19): Releasing active interface
[  364.793346][T18389] bond0: (slave bond38): Releasing active interface
[  364.799035][ T5898] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  364.831139][T18397] macvlan6: entered allmulticast mode
[  364.833182][T18397] bond0: entered allmulticast mode
[  364.836494][T18397] batadv0: entered allmulticast mode
[  364.838495][T18397] bond61: entered allmulticast mode
[  364.840260][T18397] team0: entered allmulticast mode
[  364.842088][T18397] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  364.856887][T18397] bond0: left allmulticast mode
[  364.858509][T18397] batadv0: left allmulticast mode
[  364.860196][T18397] bond61: left allmulticast mode
[  364.862023][T18397] team0: left allmulticast mode
[  364.888507][ T5898] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  364.900669][T18389] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  364.907784][T18389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  364.911800][T18389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  365.021971][T18407] bond67: entered promiscuous mode
[  365.024859][T18407] 8021q: adding VLAN 0 to HW filter on device bond67
[  365.059371][T18407] 8021q: adding VLAN 0 to HW filter on device bond68
[  365.064594][T18407] bond67: (slave bond68): making interface the new active one
[  365.067812][T18407] bond68: entered promiscuous mode
[  365.070909][T18407] bond67: (slave bond68): Enslaving as an active interface with an up link
[  365.102756][T18404] syzkaller1: entered promiscuous mode
[  365.105651][T18404] syzkaller1: entered allmulticast mode
[  365.233957][T18416] openvswitch: netlink: Port -1154149204 exceeds max allowable 65535
[  365.235740][T18412] __nla_validate_parse: 19 callbacks suppressed
[  365.235754][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3229'.
[  365.264644][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  365.281174][T18416] syzkaller1: entered promiscuous mode
[  365.283251][T18416] syzkaller1: entered allmulticast mode
[  365.346669][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'.
[  365.406819][T18423] syzkaller1: entered promiscuous mode
[  365.411290][T18423] syzkaller1: entered allmulticast mode
[  365.574541][T18430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  365.615966][T18432] dvmrp8: entered allmulticast mode
[  365.638380][T18432] lo speed is unknown, defaulting to 1000
[  365.696376][T18431] dvmrp8: left allmulticast mode
[  365.942210][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'.
[  365.984954][T18454] sctp: [Deprecated]: syz.0.3242 (pid 18454) Use of struct sctp_assoc_value in delayed_ack socket option.
[  365.984954][T18454] Use struct sctp_sack_info instead
[  366.001472][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3242'.
[  366.282460][T18463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.288311][T18463] validate_nla: 4 callbacks suppressed
[  366.288326][T18463] netlink: 'syz.1.3247': attribute type 23 has an invalid length.
[  366.666520][T18470] veth1: entered promiscuous mode
[  366.872434][T18472] netlink: 'syz.0.3250': attribute type 13 has an invalid length.
[  366.875749][T18472] netlink: 'syz.0.3250': attribute type 17 has an invalid length.
[  366.933623][T18472] erspan0: left allmulticast mode
[  367.000645][T18472] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.023256][T18472] tipc: Resetting bearer <eth:team0>
[  367.026972][T18472] tipc: Resetting bearer <eth:team0>
[  367.033958][T18472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.061901][  T793] lo speed is unknown, defaulting to 1000
[  367.070743][  T793] syz2: Port: 1 Link ACTIVE
[  367.208676][T18479] netlink: 'syz.0.3252': attribute type 13 has an invalid length.
[  367.211404][T18479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3252'.
[  367.220159][T18479] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  367.301539][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3254'.
[  367.306940][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3254'.
[  367.399304][T18493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3256'.
[  367.422081][T18495] bond0: entered promiscuous mode
[  367.424779][T18495] gretap8: entered promiscuous mode
[  367.429389][T18495] bond0: left promiscuous mode
[  367.434410][T18495] gretap8: left promiscuous mode
[  367.462120][T18499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3256'.
[  367.481778][T18502] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[  367.488806][T18502] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3258'.
[  367.576808][T18512] netlink: 'syz.1.3260': attribute type 5 has an invalid length.
[  367.668106][T18521] tipc: Invalid UDP bearer configuration
[  367.668140][T18521] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  367.673953][T18521] netlink: 'syz.2.3262': attribute type 21 has an invalid length.
[  367.695174][T18521] netlink: 'syz.2.3262': attribute type 4 has an invalid length.
[  367.698241][T18521] netlink: 'syz.2.3262': attribute type 5 has an invalid length.
[  367.702122][T18521] netlink: 'syz.2.3262': attribute type 10 has an invalid length.
[  367.769351][T18533] syzkaller1: entered promiscuous mode
[  367.771266][T18533] syzkaller1: entered allmulticast mode
[  367.817969][T18535] netlink: 'syz.0.3264': attribute type 13 has an invalid length.
[  367.827477][T18535] tipc: Resetting bearer <eth:team0>
[  367.831671][T18535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  367.875153][T18538] pim6reg1: entered promiscuous mode
[  367.877274][T18538] pim6reg1: entered allmulticast mode
[  367.945214][T18532] lo speed is unknown, defaulting to 1000
[  367.945481][T18540] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.178799][T18546] syzkaller1: tun_chr_ioctl cmd 1074025677
[  368.181078][T18546] syzkaller1: linktype set to 823
[  368.279213][T18554] tipc: Resetting bearer <eth:team0>
[  368.281235][T18554] tipc: Resetting bearer <eth:team0>
[  368.286319][T18554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.305149][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.335176][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.338078][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  368.573735][T18587] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.634107][T18589] syzkaller1: entered promiscuous mode
[  368.640222][T18589] syzkaller1: entered allmulticast mode
[  368.801880][T18595] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  368.894596][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  369.104729][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  369.461277][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  369.465457][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  369.468487][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  369.471147][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  369.726610][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.729960][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.800475][T18617] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  369.922254][T18632] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  370.063552][T18642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.104786][T18646] tipc: Resetting bearer <eth:team0>
[  370.109223][T18646] tipc: Resetting bearer <eth:team0>
[  370.112642][T18646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  370.161459][T18641] lo speed is unknown, defaulting to 1000
[  370.164519][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.585047][ T5913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.590387][ T5913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.754755][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.802715][T18667] bond1: option mode: unable to set because the bond device is up
[  370.806668][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  370.826041][T18667] gretap8: entered promiscuous mode
[  370.829216][T18667] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  370.835672][T18667] bond1: (slave macvlan5): Enslaving as a backup interface with an up link
[  370.864967][ T7080] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  370.942217][T18673] bond58: (slave erspan0): Releasing active interface
[  370.953000][T18673] bond0: (slave team0): Releasing backup interface
[  370.956225][T18673] tipc: Resetting bearer <eth:team0>
[  370.960639][T18673] tipc: Resetting bearer <eth:team0>
[  370.963763][T18673] bond0: (slave batadv0): Releasing backup interface
[  370.969000][T18673] bond0: (slave batadv0): the permanent HWaddr of slave - 02:04:00:bf:05:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  370.988045][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  370.991509][T18673] bond57: (slave veth1): Releasing backup interface
[  370.993002][   T13] bond1: (slave macvlan5): link status up again after 0 ms
[  371.007672][T18673] bond0: (slave bond61): Releasing backup interface
[  371.022427][T18673] bond62: (slave geneve0): Releasing active interface
[  371.022487][ T7080] bond1: (slave macvlan5): link status up again after 0 ms
[  371.036618][T18673] bond64: (slave wireguard0): Releasing backup interface
[  371.039698][T18673] wireguard0: left promiscuous mode
[  371.041868][T18673] bond64: (slave wireguard1): making interface the new active one
[  371.047862][T18673] wireguard1: entered promiscuous mode
[  371.055606][ T5913] bond1: (slave macvlan5): link status up again after 0 ms
[  371.063565][T18673] bond64: (slave wireguard1): Releasing backup interface
[  371.068581][T18673] wireguard1: left promiscuous mode
[  371.073811][T18673] bond67: (slave bond68): Releasing backup interface
[  371.076419][ T7077] bond1: (slave macvlan5): link status up again after 0 ms
[  371.076744][T18673] bond68: left promiscuous mode
[  371.102427][T18677] tipc: Resetting bearer <eth:team0>
[  371.104728][ T7077] bond1: (slave macvlan5): link status up again after 0 ms
[  371.106928][T18677] tipc: Resetting bearer <eth:team0>
[  371.111291][T18677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.124690][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.185093][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.194851][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.219398][T18691] __nla_validate_parse: 29 callbacks suppressed
[  371.219413][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  371.253170][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'.
[  371.263528][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'.
[  371.271004][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'.
[  371.329006][T18694] validate_nla: 9 callbacks suppressed
[  371.329021][T18694] netlink: 'syz.1.3309': attribute type 10 has an invalid length.
[  371.335023][T18694] netlink: 'syz.1.3309': attribute type 10 has an invalid length.
[  371.347043][T18694] bond1: option mode: unable to set because the bond device has slaves
[  371.369124][T18694] bond1: (slave macvlan6): Error -98 calling set_mac_address
[  371.488162][T18699] tipc: Resetting bearer <eth:team0>
[  371.521078][T18699] xfrm0: left promiscuous mode
[  371.523112][T18699] xfrm0: left allmulticast mode
[  371.545638][T18699] ..1: left allmulticast mode
[  371.547643][T18699] hsr_slave_0: left allmulticast mode
[  371.583140][T18699] tipc: Resetting bearer <eth:syzkaller0>
[  371.596792][T18699] syzkaller0: left promiscuous mode
[  371.598982][T18699] syzkaller0: left allmulticast mode
[  371.631332][T18699] geneve6: left promiscuous mode
[  371.633367][T18699] geneve6: left allmulticast mode
[  371.636322][T18699] ip6gre4: left allmulticast mode
[  371.676130][T18699] hsr0: left promiscuous mode
[  371.690988][T18699] veth19: left promiscuous mode
[  371.720252][T18699] bond39: left promiscuous mode
[  371.722322][T18699] bond39: left allmulticast mode
[  371.752121][T18699] bond40: left promiscuous mode
[  371.754585][T18699] bond40: left allmulticast mode
[  371.756986][T18705] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3312'.
[  371.810813][ T7080] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.814993][ T7080] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.818372][ T7080] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.821798][ T7080] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.843827][T18696] lo speed is unknown, defaulting to 1000
[  371.918070][T18715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.053493][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  372.128367][T18725] netlink: 'syz.1.3316': attribute type 2 has an invalid length.
[  372.262657][T18732] netlink: 'syz.0.3317': attribute type 1 has an invalid length.
[  372.381331][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3317'.
[  372.428941][T18741] netlink: 'syz.1.3318': attribute type 1 has an invalid length.
[  372.432756][T18741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3318'.
[  372.476987][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'.
[  372.480520][T18745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3319'.
[  372.483791][T18745] netlink: 'syz.1.3319': attribute type 12 has an invalid length.
[  372.546897][T18749] syzkaller0: left promiscuous mode
[  372.548997][T18749] syzkaller0: left allmulticast mode
[  372.750811][T18759] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.756476][T18759] syzkaller0: entered promiscuous mode
[  372.758425][T18759] syzkaller0: entered allmulticast mode
[  372.908898][T18769] 8021q: adding VLAN 0 to HW filter on device bond41
[  372.940251][T18769] 8021q: adding VLAN 0 to HW filter on device bond42
[  372.974729][T18769] 8021q: adding VLAN 0 to HW filter on device bond43
[  373.088862][T18776] netlink: 'syz.2.3329': attribute type 1 has an invalid length.
[  373.272295][T18788] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.279321][T18788] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  373.349477][T18790] syzkaller1: entered promiscuous mode
[  373.351826][T18790] syzkaller1: entered allmulticast mode
[  373.373069][T18790] lo speed is unknown, defaulting to 1000
[  373.489260][T18798] lo speed is unknown, defaulting to 1000
[  373.762405][T18809] lo speed is unknown, defaulting to 1000
[  373.950228][T18813] 8021q: adding VLAN 0 to HW filter on device bond69
[  374.503199][T18836] dvmrp1: entered allmulticast mode
[  374.513934][T18838] netlink: 'syz.1.3346': attribute type 1 has an invalid length.
[  374.550885][T18838] bond54: entered promiscuous mode
[  374.554407][T18838] bond54: entered allmulticast mode
[  374.569440][T18838] bridge26: entered promiscuous mode
[  374.571205][T18838] bridge26: entered allmulticast mode
[  374.593750][T18841] lo speed is unknown, defaulting to 1000
[  374.931407][T18867] netlink: 'syz.2.3354': attribute type 10 has an invalid length.
[  374.958002][T18869] netlink: 'syz.1.3355': attribute type 1 has an invalid length.
[  374.972651][T18869] bond55: entered promiscuous mode
[  374.976637][T18869] 8021q: adding VLAN 0 to HW filter on device bond55
[  374.996748][T18869] 8021q: adding VLAN 0 to HW filter on device bond56
[  375.000300][T18869] bond55: (slave bond56): making interface the new active one
[  375.002744][T18869] bond56: entered promiscuous mode
[  375.005074][T18869] bond55: (slave bond56): Enslaving as an active interface with an up link
[  375.107916][T18876] 8021q: adding VLAN 0 to HW filter on device bond44
[  375.135423][   T13] net_ratelimit: 36 callbacks suppressed
[  375.135438][   T13] bond1: (slave macvlan5): failed to get link speed/duplex
[  375.186728][T18889] macsec1: entered promiscuous mode
[  375.188626][T18889] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode
[  375.198424][T18889] mac80211_hwsim hwsim43 wlan1: left promiscuous mode
[  375.234665][T18897] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  375.284420][ T7080] bond1: (slave macvlan5): failed to get link speed/duplex
[  375.297951][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.301328][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.313150][T18897] batadv_slave_0: entered promiscuous mode
[  375.339264][T18900] : entered promiscuous mode
[  375.373795][T18900] 8021q: adding VLAN 0 to HW filter on device bond57
[  375.395007][   T13] bond1: (slave macvlan5): failed to get link speed/duplex
[  375.509902][   T12] bond1: (slave macvlan5): failed to get link speed/duplex
[  375.634806][ T7080] bond1: (slave macvlan5): failed to get link speed/duplex
[  375.698338][T18925] xt_socket: unknown flags 0xd0
[  375.744552][   T13] bond1: (slave macvlan5): failed to get link speed/duplex
[  375.827903][   T98] block nbd0: Possible stuck request ffff888021538000: control (read@0,4096B). Runtime 300 seconds
[  375.833126][T18931] batadv5: entered promiscuous mode
[  375.854428][ T7080] bond1: (slave macvlan5): failed to get link speed/duplex
[  375.966145][ T7077] bond1: (slave macvlan5): failed to get link speed/duplex
[  376.011815][T18937] 8021q: adding VLAN 0 to HW filter on device bond45
[  376.041357][T18937] bond45: (slave veth21): Enslaving as an active interface with a down link
[  376.067019][T18940] vlan4: entered allmulticast mode
[  376.068896][T18940] bridge0: entered allmulticast mode
[  376.082850][T18937] 8021q: adding VLAN 0 to HW filter on device batadv2
[  376.090463][T18937] bond45: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  376.120121][T18940] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  376.122869][T18940] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  376.135130][ T7077] bond1: (slave macvlan5): failed to get link speed/duplex
[  376.271607][T18950] __nla_validate_parse: 25 callbacks suppressed
[  376.271630][T18950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'.
[  376.286235][ T7077] bond1: (slave macvlan5): failed to get link speed/duplex
[  376.294108][ T5898] lo speed is unknown, defaulting to 1000
[  376.296475][ T5898] syz2: Port: 1 Link DOWN
[  376.343972][T18953] k*: entered promiscuous mode
[  376.374438][T18953] 8021q: adding VLAN 0 to HW filter on device team0
[  376.377006][T18953] tipc: Resetting bearer <eth:team0>
[  376.379504][T18953] tipc: Resetting bearer <eth:team0>
[  376.394547][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.448703][T18964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3381'.
[  376.688405][T18985] validate_nla: 7 callbacks suppressed
[  376.688428][T18985] netlink: 'syz.1.3383': attribute type 1 has an invalid length.
[  376.726584][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3381'.
[  376.753012][T18985] bond58: entered promiscuous mode
[  376.756386][T18985] 8021q: adding VLAN 0 to HW filter on device bond58
[  376.764691][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.775997][T18988] 8021q: adding VLAN 0 to HW filter on device bond59
[  376.782918][T18988] bond58: (slave bond59): making interface the new active one
[  376.786026][T18988] bond59: entered promiscuous mode
[  376.789408][T18988] bond58: (slave bond59): Enslaving as an active interface with an up link
[  376.818466][T18985] bond58: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  376.826468][T18985] bond58: (slave ipvlan6): The slave device specified does not support setting the MAC address
[  376.849579][T18995] netlink: 'syz.0.3385': attribute type 1 has an invalid length.
[  376.868122][T18988] netlink: 'syz.1.3383': attribute type 1 has an invalid length.
[  376.870808][T18995] 8021q: adding VLAN 0 to HW filter on device bond70
[  376.910784][T18995] veth39: entered promiscuous mode
[  377.020173][ T7077] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  377.024603][T19007] syzkaller0: entered promiscuous mode
[  377.028143][T19007] syzkaller0: entered allmulticast mode
[  377.031170][T19013] tipc: Resetting bearer <eth:syzkaller0>
[  377.042910][T19013] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  377.048907][T19013] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  377.052007][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'.
[  377.055771][T19003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3386'.
[  377.103767][T19018] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.129245][T19017] veth31: entered allmulticast mode
[  377.131512][T19018] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  377.134881][T19018] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  377.139575][T19018] tipc: Resetting bearer <eth:syzkaller0>
[  377.155645][T19018] nbd: nbd0 already in use
[  377.157988][T19018] netem: change failed
[  377.210854][T19026] netlink: 'syz.1.3392': attribute type 1 has an invalid length.
[  377.242793][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'.
[  377.247657][T19026] 8021q: adding VLAN 0 to HW filter on device bond60
[  377.262860][T19025] vlan7: entered allmulticast mode
[  377.264890][T19025] veth1: entered allmulticast mode
[  377.267205][T19025] bond60: (slave vlan7): Opening slave failed
[  377.303908][T19026] vlan7: entered allmulticast mode
[  377.325850][T19026] bond60: (slave vlan7): Opening slave failed
[  377.404488][T19031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3395'.
[  377.506807][T19043] netlink: 'syz.2.3397': attribute type 1 has an invalid length.
[  377.633692][T19054] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3398'.
[  377.719596][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'.
[  377.793227][T19065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3402'.
[  377.864839][T19071] netlink: 'syz.2.3404': attribute type 1 has an invalid length.
[  378.107378][ T7080] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  378.110254][ T7080] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  378.190516][T19093] syz.1.3406 (19093) used obsolete PPPIOCDETACH ioctl
[  378.197668][T19093] netlink: 'syz.1.3406': attribute type 10 has an invalid length.
[  378.253974][T19100] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  378.318279][T19104] _Z`Ԁ@: entered promiscuous mode
[  378.357999][T19108] netlink: 'syz.0.3413': attribute type 1 has an invalid length.
[  378.494896][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  379.088647][T19128] netlink: 'syz.1.3418': attribute type 1 has an invalid length.
[  379.230949][T19139] 8021q: adding VLAN 0 to HW filter on device bond46
[  379.245257][T19139] tipc: Resetting bearer <eth:team0>
[  379.249914][T19139] bond45: (slave veth21): Releasing active interface
[  379.275163][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  379.347277][ T7077] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  379.353255][T19150] 8021q: VLANs not supported on ip_vti0
[  379.363791][ T7077] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  379.370968][T19147] lo speed is unknown, defaulting to 1000
[  379.372921][ T7077] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  379.376781][ T7077] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  379.383949][T19157] netlink: 'syz.2.3423': attribute type 5 has an invalid length.
[  379.644457][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  379.802049][T19181] bond71: entered promiscuous mode
[  379.805874][T19181] 8021q: adding VLAN 0 to HW filter on device bond71
[  379.855023][T19181] 8021q: adding VLAN 0 to HW filter on device bond71
[  379.858378][T19181] bond71: (slave wireguard2): The slave device specified does not support setting the MAC address
[  379.862333][T19181] bond71: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  379.881240][T19181] bond71: (slave wireguard2): making interface the new active one
[  379.887024][T19181] wireguard2: entered promiscuous mode
[  379.891467][T19181] bond71: (slave wireguard2): Enslaving as an active interface with an up link
[  379.903454][T19186] bond71: (slave wireguard3): The slave device specified does not support setting the MAC address
[  379.927794][T19186] bond71: (slave wireguard3): Enslaving as a backup interface with an up link
[  379.988789][T19192] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  380.174839][   T12] net_ratelimit: 38 callbacks suppressed
[  380.174859][   T12] bond1: (slave macvlan5): failed to get link speed/duplex
[  380.245652][T19199] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  380.249427][T19199] tipc: Resetting bearer <eth:syzkaller0>
[  380.257574][T19199] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  380.260646][T19199] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  380.269629][T19199] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  380.283833][T19199] veth33: left promiscuous mode
[  380.286420][T19199] ip6gre2: left allmulticast mode
[  380.288981][T19199] bond64: left promiscuous mode
[  380.295523][T19199] bond67: left promiscuous mode
[  380.304529][T19199] veth39: left promiscuous mode
[  380.309138][T19199] bond71: left promiscuous mode
[  380.310852][T19199] wireguard2: left promiscuous mode
[  380.317881][ T7077] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.321090][ T7077] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.324858][ T7077] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.328232][ T7077] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  380.344477][ T7077] bond1: (slave macvlan5): failed to get link speed/duplex
[  380.410536][T19206] siw: device registration error -23
[  380.454501][   T12] bond1: (slave macvlan5): failed to get link speed/duplex
[  380.576929][ T7077] bond1: (slave macvlan5): failed to get link speed/duplex
[  380.694857][ T7080] bond1: (slave macvlan5): failed to get link speed/duplex
[  380.754065][T19236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  380.803830][T19223] lo speed is unknown, defaulting to 1000
[  380.812298][   T12] bond1: (slave macvlan5): failed to get link speed/duplex
[  380.930644][   T12] bond1: (slave macvlan5): failed to get link speed/duplex
[  381.021286][T19259] mac80211_hwsim hwsim61 ;: renamed from wlan0
[  381.054347][ T7077] bond1: (slave macvlan5): failed to get link speed/duplex
[  381.165254][   T12] bond1: (slave macvlan5): failed to get link speed/duplex
[  381.307259][T19268] __nla_validate_parse: 11 callbacks suppressed
[  381.307271][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3455'.
[  381.360717][T19272] : entered promiscuous mode
[  381.367390][T19278] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  381.496650][T19285] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.500700][T19285] 8021q: adding VLAN 0 to HW filter on device team0
[  381.503243][T19285] tipc: Resetting bearer <eth:team0>
[  381.506735][T19285] tipc: Resetting bearer <eth:team0>
[  381.510410][   T10] lo speed is unknown, defaulting to 1000
[  381.513222][   T10] syz2: Port: 1 Link ACTIVE
[  381.517248][T19280] xfrm0: entered promiscuous mode
[  381.519632][T19280] xfrm0: entered allmulticast mode
[  381.558841][T19280] lo speed is unknown, defaulting to 1000
[  381.912123][T19300] validate_nla: 8 callbacks suppressed
[  381.912138][T19300] netlink: 'syz.2.3463': attribute type 1 has an invalid length.
[  381.942217][T19300] veth23: entered promiscuous mode
[  381.951243][T19300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3463'.
[  382.065265][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  382.191775][T19306] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3465'.
[  382.322440][T19309] syzkaller1: entered promiscuous mode
[  382.322862][T19311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3466'.
[  382.328571][T19309] syzkaller1: entered allmulticast mode
[  382.454828][T19313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3467'.
[  382.459458][T19313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3467'.
[  382.470490][T19313] netlink: 'syz.1.3467': attribute type 1 has an invalid length.
[  382.477505][T19313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3467'.
[  382.509548][T19315] netlink: 'syz.0.3468': attribute type 10 has an invalid length.
[  382.556937][   T33] audit: type=1804 audit(1757188467.146:14): pid=19317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3469" name="/newroot/1152/cgroup.controllers" dev="tmpfs" ino=5889 res=1 errno=0
[  382.572191][   T33] audit: type=1800 audit(1757188467.146:15): pid=19317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3469" name="cgroup.controllers" dev="tmpfs" ino=5889 res=0 errno=0
[  382.592003][T19317] macvlan6: entered promiscuous mode
[  382.596691][T19317] vlan0: entered promiscuous mode
[  382.601948][T19318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3468'.
[  382.610496][T19318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3468'.
[  382.742428][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'.
[  382.777527][T19320] syzkaller0: Caught tx_queue_len zero misconfig
[  382.782408][T19320] netem: change failed
[  382.791403][T19320] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode
[  382.835182][ T7077] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  383.030662][T19340] netlink: 'syz.1.3475': attribute type 10 has an invalid length.
[  383.034774][T19340] netlink: 'syz.1.3475': attribute type 10 has an invalid length.
[  383.034777][T19341] netlink: 'syz.1.3475': attribute type 10 has an invalid length.
[  383.042612][T19340] bond1: option mode: unable to set because the bond device has slaves
[  383.061086][T19340] bond1: (slave macvlan7): Error -98 calling set_mac_address
[  383.281126][T19348] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  383.902047][T19364] tipc: Resetting bearer <eth:team0>
[  383.933892][T19364] tipc: Resetting bearer <eth:syzkaller0>
[  384.094581][    C0] ==================================================================
[  384.097420][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  384.100227][    C0] Write of size 8 at addr ffff888111c9ad28 by task syz-executor/5854
[  384.104061][    C0] 
[  384.105540][    C0] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  384.105556][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.105563][    C0] Call Trace:
[  384.105570][    C0]  <IRQ>
[  384.105577][    C0]  dump_stack_lvl+0x189/0x250
[  384.105592][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  384.105604][    C0]  ? rcu_is_watching+0x15/0xb0
[  384.105614][    C0]  ? __kasan_check_byte+0x12/0x40
[  384.105626][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.105634][    C0]  ? rcu_is_watching+0x15/0xb0
[  384.105642][    C0]  ? lock_release+0x4b/0x3e0
[  384.105656][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  384.105665][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  384.105674][    C0]  print_report+0xca/0x240
[  384.105683][    C0]  ? __xfrm_state_delete+0x666/0xca0
[  384.105693][    C0]  kasan_report+0x118/0x150
[  384.105703][    C0]  ? __xfrm_state_delete+0x666/0xca0
[  384.105713][    C0]  __xfrm_state_delete+0x666/0xca0
[  384.105724][    C0]  xfrm_timer_handler+0x18f/0xa00
[  384.105734][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  384.105795][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  384.105809][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.105818][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  384.105830][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  384.105842][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  384.105850][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  384.105858][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  384.105870][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  384.105878][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  384.105888][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  384.105897][    C0]  handle_softirqs+0x286/0x870
[  384.105905][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  384.105913][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  384.105922][    C0]  __irq_exit_rcu+0xca/0x1f0
[  384.105929][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  384.105938][    C0]  irq_exit_rcu+0x9/0x30
[  384.105945][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  384.105954][    C0]  </IRQ>
[  384.105957][    C0]  <TASK>
[  384.105960][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  384.105970][    C0] RIP: 0010:kmem_cache_alloc_noprof+0x31/0x3c0
[  384.105984][    C0] Code: 41 56 41 55 41 54 53 48 83 ec 20 89 f5 49 89 fe 65 48 8b 05 31 9b 88 10 48 89 44 24 18 48 8b 44 24 50 48 89 44 24 08 8b 47 1c <48> 89 04 24 8b 1d a5 75 8b 0d 21 f3 89 df e8 ec a7 fd ff 89 df e8
[  384.105991][    C0] RSP: 0018:ffffc90003fdf9b0 EFLAGS: 00000282
[  384.106000][    C0] RAX: 0000000000000898 RBX: ffff8880345b8000 RCX: ffff888022299cc0
[  384.106006][    C0] RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: ffff88810000f640
[  384.106011][    C0] RBP: 0000000000000cc0 R08: ffff888108e6c643 R09: 1ffff110211cd8c8
[  384.106017][    C0] R10: dffffc0000000000 R11: ffffed10211cd8c9 R12: 0000000000000000
[  384.106022][    C0] R13: dffffc0000000000 R14: ffff88810000f640 R15: 0000000000000000
[  384.106032][    C0]  ? copy_sighand+0x50/0x230
[  384.106040][    C0]  ? _raw_spin_unlock+0x28/0x50
[  384.106051][    C0]  copy_sighand+0x50/0x230
[  384.106060][    C0]  copy_process+0x165f/0x3c00
[  384.106071][    C0]  ? copy_process+0x97f/0x3c00
[  384.106080][    C0]  ? __pfx_copy_process+0x10/0x10
[  384.106090][    C0]  kernel_clone+0x21e/0x840
[  384.106099][    C0]  ? css_rstat_updated+0x23a/0x4f0
[  384.106108][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  384.106120][    C0]  __x64_sys_clone+0x18b/0x1e0
[  384.106130][    C0]  ? count_memcg_event_mm+0x21/0x260
[  384.106140][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  384.106152][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  384.106168][    C0]  ? do_syscall_64+0xbe/0x3b0
[  384.106178][    C0]  do_syscall_64+0xfa/0x3b0
[  384.106187][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.106195][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.106202][    C0]  ? exc_page_fault+0x9f/0xf0
[  384.106209][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.106217][    C0] RIP: 0033:0x7f3ecfb85453
[  384.106227][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  384.106233][    C0] RSP: 002b:00007fff63d5fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  384.106243][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ecfb85453
[  384.106248][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  384.106253][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  384.106258][    C0] R10: 00005555609337d0 R11: 0000000000000246 R12: 0000000000000000
[  384.106264][    C0] R13: 00000000000927c0 R14: 000000000005dbdc R15: 00007fff63d5fe00
[  384.106273][    C0]  </TASK>
[  384.106276][    C0] 
[  384.274841][    C0] Allocated by task 18060:
[  384.276257][    C0]  kasan_save_track+0x3e/0x80
[  384.277752][    C0]  __kasan_slab_alloc+0x6c/0x80
[  384.279537][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  384.281577][    C0]  xfrm_state_alloc+0x24/0x2f0
[  384.283504][    C0]  __find_acq_core+0x8a7/0x1c00
[  384.285190][    C0]  xfrm_find_acq+0x78/0xa0
[  384.286850][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  384.288545][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  384.290282][    C0]  netlink_rcv_skb+0x208/0x470
[  384.291908][    C0]  xfrm_netlink_rcv+0x79/0x90
[  384.293579][    C0]  netlink_unicast+0x82f/0x9e0
[  384.295236][    C0]  netlink_sendmsg+0x805/0xb30
[  384.296842][    C0]  __sock_sendmsg+0x21c/0x270
[  384.298454][    C0]  ____sys_sendmsg+0x505/0x830
[  384.300386][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  384.302066][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  384.303806][    C0]  do_syscall_64+0xfa/0x3b0
[  384.305329][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.307390][    C0] 
[  384.308269][    C0] Freed by task 24:
[  384.309582][    C0]  kasan_save_track+0x3e/0x80
[  384.311207][    C0]  kasan_save_free_info+0x46/0x50
[  384.313131][    C0]  __kasan_slab_free+0x5b/0x80
[  384.315026][    C0]  kmem_cache_free+0x18f/0x400
[  384.316819][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  384.318575][    C0]  process_scheduled_works+0xae1/0x17b0
[  384.320498][    C0]  worker_thread+0x8a0/0xda0
[  384.322152][    C0]  kthread+0x711/0x8a0
[  384.323652][    C0]  ret_from_fork+0x3fc/0x770
[  384.325290][    C0]  ret_from_fork_asm+0x1a/0x30
[  384.326914][    C0] 
[  384.327875][    C0] The buggy address belongs to the object at ffff888111c9ad00
[  384.327875][    C0]  which belongs to the cache xfrm_state of size 928
[  384.333265][    C0] The buggy address is located 40 bytes inside of
[  384.333265][    C0]  freed 928-byte region [ffff888111c9ad00, ffff888111c9b0a0)
[  384.337715][    C0] 
[  384.338569][    C0] The buggy address belongs to the physical page:
[  384.341148][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111c9ad00 pfn:0x111c98
[  384.345217][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  384.348849][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  384.351365][    C0] page_type: f5(slab)
[  384.352656][    C0] raw: 057ff00000000040 ffff88801af5c500 dead000000000122 0000000000000000
[  384.355679][    C0] raw: ffff888111c9ad00 00000000800e000a 00000000f5000000 0000000000000000
[  384.358774][    C0] head: 057ff00000000040 ffff88801af5c500 dead000000000122 0000000000000000
[  384.361568][    C0] head: ffff888111c9ad00 00000000800e000a 00000000f5000000 0000000000000000
[  384.364323][    C0] head: 057ff00000000002 ffffea0004472601 00000000ffffffff 00000000ffffffff
[  384.367083][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  384.370302][    C0] page dumped because: kasan: bad access detected
[  384.372353][    C0] page_owner tracks the page as allocated
[  384.374688][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6160, tgid 6158 (syz.0.74), ts 76161477163, free_ts 76157898537
[  384.382101][    C0]  post_alloc_hook+0x240/0x2a0
[  384.383941][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  384.386088][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  384.388689][    C0]  alloc_pages_mpol+0x232/0x4a0
[  384.390812][    C0]  allocate_slab+0x8a/0x370
[  384.392693][    C0]  ___slab_alloc+0xbeb/0x1420
[  384.394648][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  384.396795][    C0]  xfrm_state_alloc+0x24/0x2f0
[  384.398535][    C0]  pfkey_add+0x6e4/0x2e00
[  384.400128][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  384.402041][    C0]  __sock_sendmsg+0x21c/0x270
[  384.403737][    C0]  ____sys_sendmsg+0x505/0x830
[  384.405303][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  384.406823][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  384.408394][    C0]  do_syscall_64+0xfa/0x3b0
[  384.409857][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.411823][    C0] page last free pid 6156 tgid 6141 stack trace:
[  384.413847][    C0]  __free_frozen_pages+0xbc4/0xd30
[  384.415630][    C0]  stack_depot_save_flags+0x436/0x860
[  384.417266][    C0]  kasan_save_track+0x4f/0x80
[  384.418819][    C0]  __kasan_slab_alloc+0x6c/0x80
[  384.420382][    C0]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  384.422474][    C0]  __alloc_skb+0x112/0x2d0
[  384.424237][    C0]  __tcp_send_ack+0xaf/0x620
[  384.425734][    C0]  tcp_rcv_established+0x1065/0x1eb0
[  384.427863][    C0]  tcp_v4_do_rcv+0xa23/0xce0
[  384.429659][    C0]  tcp_v4_rcv+0x252a/0x2db0
[  384.431330][    C0]  ip_protocol_deliver_rcu+0x221/0x440
[  384.433300][    C0]  ip_local_deliver_finish+0x3bb/0x6f0
[  384.435206][    C0]  NF_HOOK+0x30c/0x3a0
[  384.436803][    C0]  ip_sublist_rcv_finish+0x221/0x2a0
[  384.438979][    C0]  ip_sublist_rcv+0x74c/0xa10
[  384.440881][    C0]  ip_list_rcv+0x3e2/0x430
[  384.442650][    C0] 
[  384.443674][    C0] Memory state around the buggy address:
[  384.445517][    C0]  ffff888111c9ac00: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  384.448180][    C0]  ffff888111c9ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  384.450822][    C0] >ffff888111c9ad00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  384.453491][    C0]                                   ^
[  384.455600][    C0]  ffff888111c9ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  384.458935][    C0]  ffff888111c9ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  384.462262][    C0] ==================================================================
[  384.465829][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  384.468521][    C0] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  384.471772][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.475020][    C0] Call Trace:
[  384.476132][    C0]  <IRQ>
[  384.477081][    C0]  dump_stack_lvl+0x99/0x250
[  384.478848][    C0]  ? __asan_memcpy+0x40/0x70
[  384.480392][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.482104][    C0]  ? __pfx__printk+0x10/0x10
[  384.483970][    C0]  vpanic+0x281/0x750
[  384.485525][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  384.487179][    C0]  ? __pfx_vpanic+0x10/0x10
[  384.488864][    C0]  ? irqentry_exit+0x74/0x90
[  384.490331][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.492181][    C0]  panic+0xb9/0xc0
[  384.493604][    C0]  ? __pfx_panic+0x10/0x10
[  384.495098][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  384.497098][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  384.499301][    C0]  ? __xfrm_state_delete+0x666/0xca0
[  384.501092][    C0]  check_panic_on_warn+0x89/0xb0
[  384.502945][    C0]  ? __xfrm_state_delete+0x666/0xca0
[  384.504679][    C0]  end_report+0x78/0x160
[  384.506060][    C0]  kasan_report+0x129/0x150
[  384.507518][    C0]  ? __xfrm_state_delete+0x666/0xca0
[  384.509280][    C0]  __xfrm_state_delete+0x666/0xca0
[  384.511097][    C0]  xfrm_timer_handler+0x18f/0xa00
[  384.513044][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  384.515115][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  384.517485][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.519319][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  384.521310][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  384.523501][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  384.525419][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  384.527234][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  384.528982][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  384.530946][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  384.532894][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  384.534602][    C0]  handle_softirqs+0x286/0x870
[  384.536290][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  384.538212][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  384.540347][    C0]  __irq_exit_rcu+0xca/0x1f0
[  384.542076][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  384.544262][    C0]  irq_exit_rcu+0x9/0x30
[  384.545878][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  384.548091][    C0]  </IRQ>
[  384.549314][    C0]  <TASK>
[  384.550539][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  384.552695][    C0] RIP: 0010:kmem_cache_alloc_noprof+0x31/0x3c0
[  384.554768][    C0] Code: 41 56 41 55 41 54 53 48 83 ec 20 89 f5 49 89 fe 65 48 8b 05 31 9b 88 10 48 89 44 24 18 48 8b 44 24 50 48 89 44 24 08 8b 47 1c <48> 89 04 24 8b 1d a5 75 8b 0d 21 f3 89 df e8 ec a7 fd ff 89 df e8
[  384.561635][    C0] RSP: 0018:ffffc90003fdf9b0 EFLAGS: 00000282
[  384.563945][    C0] RAX: 0000000000000898 RBX: ffff8880345b8000 RCX: ffff888022299cc0
[  384.567139][    C0] RDX: 0000000000000000 RSI: 0000000000000cc0 RDI: ffff88810000f640
[  384.569910][    C0] RBP: 0000000000000cc0 R08: ffff888108e6c643 R09: 1ffff110211cd8c8
[  384.572682][    C0] R10: dffffc0000000000 R11: ffffed10211cd8c9 R12: 0000000000000000
[  384.575721][    C0] R13: dffffc0000000000 R14: ffff88810000f640 R15: 0000000000000000
[  384.578347][    C0]  ? copy_sighand+0x50/0x230
[  384.579901][    C0]  ? _raw_spin_unlock+0x28/0x50
[  384.581624][    C0]  copy_sighand+0x50/0x230
[  384.583247][    C0]  copy_process+0x165f/0x3c00
[  384.584873][    C0]  ? copy_process+0x97f/0x3c00
[  384.586658][    C0]  ? __pfx_copy_process+0x10/0x10
[  384.588426][    C0]  kernel_clone+0x21e/0x840
[  384.589946][    C0]  ? css_rstat_updated+0x23a/0x4f0
[  384.591652][    C0]  ? __pfx_kernel_clone+0x10/0x10
[  384.593381][    C0]  __x64_sys_clone+0x18b/0x1e0
[  384.595097][    C0]  ? count_memcg_event_mm+0x21/0x260
[  384.596867][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[  384.599003][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  384.600927][    C0]  ? do_syscall_64+0xbe/0x3b0
[  384.602528][    C0]  do_syscall_64+0xfa/0x3b0
[  384.604049][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.606052][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.608345][    C0]  ? exc_page_fault+0x9f/0xf0
[  384.610086][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.612439][    C0] RIP: 0033:0x7f3ecfb85453
[  384.614113][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  384.621518][    C0] RSP: 002b:00007fff63d5fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  384.625001][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ecfb85453
[  384.628182][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  384.630960][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  384.633946][    C0] R10: 00005555609337d0 R11: 0000000000000246 R12: 0000000000000000
[  384.636960][    C0] R13: 00000000000927c0 R14: 000000000005dbdc R15: 00007fff63d5fe00
[  384.639929][    C0]  </TASK>
[  384.641650][    C0] Kernel Offset: disabled
[  384.643147][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:54:28  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff8881072d8237 R9 =1ffff11020e5b046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01914 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555560933500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3ed08f56c0 CR3=000000011096c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f3ecfc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888028b318c0 RCX=ffffffff8b7d1e5c RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888028b318c0 RBP=ffffc900001e09b8 RSP=ffffc900001e08c0
R8 =ffff888028b318c3 R9 =1ffff11005166318 R10=dffffc0000000000 R11=ffffed1005166319
R12=1ffff9200003c120 R13=0000000000000001 R14=ffffc900001e0920 R15=1ffff11005166318
RIP=ffffffff8b7d1e6b RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6c574b66c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34e0fb CR3=0000000106a4a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f181f612e53
XMM06=0000000000000000 00007f181f612e4d XMM07=0000000000000000 00007f181f612e61
XMM08=0000000000000000 00007f181f612ee7 XMM09=0000000000000000 00007f181f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
