last executing test programs:

3.023837623s ago: executing program 1 (id=3090):
r0 = socket$xdp(0x2c, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000800000000000", @ANYRES32, @ANYBLOB="07000000000000000000790bdf3d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x5, 0x0, @void}, 0x10)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES8=r3], 0x64}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000a80)={r5, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20)
sendmmsg$inet6(r7, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f80ff00"], 0x38}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r6, <r11=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f00000006c0)}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x10000054, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x3, 0x2}, 0x0, 0x1, 0xf335, 0x1000000009, 0x3, 0x4, 0x10, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, <r13=>0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @struct={0x10000, 0x4f8}, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}})
sendmmsg(0xffffffffffffffff, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)="f9db6d4e6ca7d40c978d37d3ea23d92438e15c1b6ce255bbee36e2dd57ae11821c1af092de99be476596eb92bc722e1b34a6ef9d82e4d70fcf379419bfdb759f54b461633cc8099c9cf1a921921f65a149e1bc3789ee998403a87f2f59f5b66b2627741662f5c1ebc1c63385e103734c8639f135f74b6660a0006033de0760b4a70fb6dfb36ad9374cf7f623cbd748fc8b593c521a8e7c790287ce4968ec6fb36c2cac4d2fbd2a408595579e23489649d76df75d416d79057fd7faf3d6a6b8b7f6387c6e0c421d663e3e1585307ad01149f5829b3499748a4c2202db18148844f1cdf7544b7b8c7eae685bd678cdf88eb6443b24035ab0fd678e8a2c79983fb568f57979f7a31293067caf5be041fd38cab2088e5400110024c9b9e5c985ac7472b7991ad56d78bedea9285ad4f9f7b04c3888c33f15ced41146d833770ae6ca503aff03170d8c2cf31ae0578afd708860936241cd7ae3bdb46ec3041b4ac9a2fb158d35bb9f743a8857dfbabc6df23e37a685743760a43da3a2d48be814d0070550f21b71435f7fc2e2c8d4872f1a2ba607cd257f5bce59c453070dc3fe710ffd41c815bbd9a760e70056b9767f17b0084f8c532b504b95550ca445b7c2ccb14250bc66af4dd9cd86bb91d40cd54da79240a457905c892151cbc8cddcdf39ca1b5117043cf0d35127ff44529c6dc6892749d44baa10e4dd7b78b647a65e5c099a8ba6bf790a6b24eb4144255f154b8cb80beff39069da12d0a1be35f39abd7ff8e591822aca3670d8d5846844288e780f", 0x231}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000240)={@multicast2, @multicast2, @multicast2}, &(0x7f0000000280)=0xc)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r11, 0x5000943f, &(0x7f0000002380)={{r11}, r12, 0xa, @unused=[0x9, 0x8, 0x0, 0x5], @devid=r13})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)=r12)

2.130348155s ago: executing program 1 (id=3105):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket(0x2, 0x80805, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x30, r1, 0x4, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xbdf}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040001}, 0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r6, 0x4}, &(0x7f0000000040)=0x8)

1.256637812s ago: executing program 1 (id=3121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x5, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x3, 0x7, 0x8, 0x8, 0xfe, 0x4}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0x124}}, 0x0)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={<r3=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r3}, &(0x7f00000005c0)=0x8)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000400080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500fc5f6a3397de9ab1975fba21", @ANYRES16=r7], 0x84}}, 0x20008040)

1.030648943s ago: executing program 1 (id=3123):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

952.334505ms ago: executing program 1 (id=3125):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4001af84, &(0x7f0000000180)=&(0x7f0000000140))

898.87425ms ago: executing program 1 (id=3126):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x1, 0x1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0x14, 0x841, 0x1, 0x7ffff, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', <r7=>0x0, 0x29, 0x1, 0x0, 0x4e6b, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x8, 0xbd22, 0x5}})
connect$can_bcm(r6, &(0x7f00000006c0)={0x1d, r7}, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
r8 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$netlink(r8, 0xffffffffffffffff, 0x44)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f57a1400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000006008bfe85300ff00fc010000000000000000000000000000ff01000000000000000000000000000106000400"/122], 0x0)
write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r10, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r10, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0xb, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', <r11=>0x0, 0x2f, 0x1, 0xd, 0xdc, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, 0x1, 0x7800, 0x7, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x30, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x50)

648.579965ms ago: executing program 0 (id=3129):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\t\x00', @ANYRES16=r1, @ANYBLOB="010628bd7000ffdbdf25150000000e001400696d6d656469617465000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0)

648.207524ms ago: executing program 0 (id=3130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x39, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}}, 0x40800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fbdbdff6ffffffffffffff00740000000800c4006b0000000800c400ff0f00000800c40000020000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r6, 0x40047451, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000680)={0x10000000})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100001100000125bd7000fedbdf2507000000", @ANYRES32=r11, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r13, 0x11, 0x70bd2d, 0x25dfdbfc, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2005c890}, 0x1000c810)
socket(0x1, 0x803, 0x0)

519.471396ms ago: executing program 0 (id=3131):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4b) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010003a0c000000020000000000000000", @ANYRES32=r7, @ANYBLOB="0000000008800000280012800b00010065727370616e00001800028006000f0003000000060011004e20000004001200"], 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r9=>0x0}) (async)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r10, &(0x7f0000000280)=[{{&(0x7f0000000340)={0xa, 0x4e27, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x400000000000167, 0x4000045) (async)
shutdown(r10, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r9, 0x0, r4}, 0x10) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100003042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="46060900000000001400128009020100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x0) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 32)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32)
connect$inet(r12, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10)

519.206699ms ago: executing program 0 (id=3132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}]}], {0x14}}, 0x8c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001076c16d9ebd68000000000000000000926220f2bb51dbab2ad4c6cfb2176e086eacaadd1277931f7644f976bb26594778e0a60176709dcb31", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x4c}}, 0x80)

450.949867ms ago: executing program 0 (id=3133):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r5=>r4, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0xc)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x80010, r7, 0x1000)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000040)={0x80, 0xde}, 0x2)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000100)="051a0000", 0x4}, {&(0x7f0000000200)="73ec500447db", 0x6}], 0x3)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd700000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730002000000"], 0x3c}}, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc00000010000100feffffbffedbdf2500000000000000000000000000000000fe880000000000000000000000000101000103944e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=<r12=>0x0, @ANYBLOB="ff02000000000e0000000000000000030000000000000000ac1414bb00000000200000000000000000000000000000000900000000132d0be6b2d6b2029fd0bae2b460c4000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff020000000000007cf80000000000000000000000e8d2fff88d0e0385b46bca000000001f00000000000000ff0100000000000002000000fcffffff400002002abd7000043500000a0001fd2000"], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r12, @ANYRES32=0x0, @ANYRES32=<r14=>0x0, @ANYRES64=r9], 0x138}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRESOCT=r14], 0x5c}}, 0x8855)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r15)
sendmsg$ETHTOOL_MSG_STRSET_GET(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="21032cbd7000fedbdf25010000000400030004000180280002800c00018008000100060000000c00018008000100040000000c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24044094}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0)

371.210839ms ago: executing program 2 (id=3135):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000ffff25bd7000fbdbdf25100000008f6b12a27a7dc04fb89392579f98b034143d8bfca0212eb94420bef760517d6082a8e41fe12e8df0c2693c2839ab67441c8267f9a296483dd26767", @ANYRES32=0x0, @ANYBLOB="4280000021200000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

370.970007ms ago: executing program 0 (id=3136):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
writev(r0, &(0x7f0000001b00)=[{&(0x7f0000000640)="16a48170c17bfacc", 0x8}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000500)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x23, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1, 0xffff}, {0x6, 0xf}}}, 0x30}}, 0x4000800) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x6b, 0x5, 0xffffff80, 0x4) (async)
r6 = socket(0x1, 0x5, 0x0) (async)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000400)=0x1) (async)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fc"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRESHEX, @ANYRESHEX=r8], 0x24}, 0x1, 0x0, 0x0, 0x8841}, 0x20000090)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='B\x00\x00', @ANYRES16=r9, @ANYBLOB="040027bd7000001000002600000008000300", @ANYRES32=r11, @ANYBLOB="0c00990007000000500000002400f300b60003000500a1000300070003000200010100f0fbff0008ff07020084e20300"], 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x24000045)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000007140100", @ANYRES32], 0x30}}, 0x94) (async)
sendto$l2tp(r2, &(0x7f0000000280)="15000000000000000000003b", 0xc, 0x20048055, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r12)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000000c0)) (async)
sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24a40000", @ANYRES16=r13, @ANYBLOB="01002bbd7000fddbdf250f00000005002f000000000005002e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x80)

369.809154ms ago: executing program 2 (id=3137):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_256={{0x304}, "ab8cb923c28ce26e", "12b7d60fa5668f438f1261d22b9f96ab6d60940b727b5c8b1a04771474fe173a", "9bd55916", "6ae62fa7066d4625"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94)
socket$packet(0x11, 0x3, 0x300)
socket$alg(0x26, 0x5, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x8000)
setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)
socket$inet6(0xa, 0x800, 0xfffffffc)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)

270.757856ms ago: executing program 2 (id=3138):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140f, 0x400, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20008001}, 0x20004000)
r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0xb30c34b898e785e2)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
sendfile(r0, r2, &(0x7f0000000200)=0xd, 0x43a5)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_lsm={0x1d, 0x11, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x17, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}]}, &(0x7f0000001400)='GPL\x00', 0x2, 0xd6, &(0x7f0000001440)=""/214, 0x40f00, 0x24, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001580)={0x5, 0x7, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000015c0)=[r2], &(0x7f0000001600)=[{0x3, 0x2, 0x10, 0x1}], 0x10, 0x200}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001880)={'ip6tnl0\x00', &(0x7f0000001800)={'ip6_vti0\x00', <r6=>0x0, 0x0, 0x4, 0x6, 0x9, 0x12, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x40, 0x8a, 0x4740}})
sendmsg$nl_route_sched(r5, &(0x7f0000001b40)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)=@newqdisc={0x23c, 0x24, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {0xfffa, 0xd}, {0x5, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xff, 0xa, 0x3ff, 0x1, 0xfb9, 0x0, 0x5}}, {0xe, 0x2, [0x3, 0x291b, 0x81, 0x8, 0x5]}}, {{0x1c, 0x1, {0x6, 0xfe, 0x1ff, 0x7fffffff, 0x0, 0x4, 0x10000, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x2e, 0x7, 0x101, 0x7f, 0x1, 0x9, 0x8, 0x4}}, {0xc, 0x2, [0x1, 0xb, 0x10, 0x5]}}, {{0x1c, 0x1, {0x4, 0x7, 0x20, 0x7, 0x0, 0xb7, 0x1, 0x7}}, {0x12, 0x2, [0x9, 0x0, 0x4, 0xb35e, 0x5, 0xfff7, 0x8]}}, {{0x1c, 0x1, {0x8, 0x9, 0x9, 0xfffffff7, 0x0, 0x3, 0x0, 0x3}}, {0xa, 0x2, [0x9, 0x2, 0x1]}}, {{0x1c, 0x1, {0x81, 0x1, 0x4, 0x3, 0x1, 0x401, 0x7, 0x5}}, {0xe, 0x2, [0x3, 0x0, 0x6, 0x0, 0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0xc4}}}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0x800, 0x8, 0x0, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0x8001, 0x7]}}, {{0x1c, 0x1, {0xfe, 0x9, 0x19, 0x7, 0x2, 0xb, 0x6, 0x5}}, {0xe, 0x2, [0x2, 0x1c3, 0x4, 0x100, 0x100]}}, {{0x1c, 0x1, {0x4, 0xe, 0x7, 0x3, 0x1, 0x7ff, 0xf3, 0x8}}, {0x14, 0x2, [0x6, 0x0, 0x6100, 0xa5d, 0x9, 0x1, 0x8, 0x0]}}, {{0x1c, 0x1, {0x5, 0x83, 0x7, 0x2f87, 0x1, 0x7, 0x40, 0x3}}, {0xa, 0x2, [0x5, 0x1, 0xd1ba]}}, {{0x1c, 0x1, {0xd, 0x6, 0x401, 0xfffffff8, 0x2, 0x3236, 0x1, 0xa}}, {0x18, 0x2, [0x1, 0x0, 0xc6d1, 0x9, 0x7, 0x2, 0x9, 0xc7c, 0x1, 0xf]}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0xeac9d4036b6b9729}, 0x4)
close(r1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001cc0)={r3, 0x58, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001b80)=@raw=[@alu={0x7, 0x1, 0xd, 0x6, 0x0, 0xc, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0xa, 0x1, 0x1, 0x1, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x4, 0x4, 0x5, 0x1, 0x8}], &(0x7f0000001bc0)='GPL\x00', 0x8, 0x0, &(0x7f0000001c00), 0x41000, 0x0, '\x00', r7, 0x1c, r8, 0x8, &(0x7f0000001d40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001d80)={0x4, 0xc, 0xfffffff9, 0x8}, 0x10, 0x7f2b, r4, 0x2, 0x0, &(0x7f0000001dc0)=[{0x2, 0x3, 0x5, 0xc}, {0x3, 0x2, 0x7, 0xb}], 0x10, 0x100}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0xe)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001f00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x40, r10, 0xb8d31c74ef98457f, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @local}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000)
setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000002000)=0x4ae, 0x4)
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r11, &(0x7f0000002040)={0x1a, 0x303, 0x4, 0x8, 0x3, 0x2}, 0x10)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x11, 0x10, &(0x7f0000002080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000002100)='syzkaller\x00', 0x6, 0xd, &(0x7f0000002140)=""/13, 0x40f00, 0x60, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000002180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0x10, 0x6, 0x8c1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002200)=[r2, 0xffffffffffffffff, r2, r3, r2], 0x0, 0x10, 0xfff}, 0x94)
bind$llc(r11, &(0x7f0000002300)={0x1a, 0x110, 0x3, 0x5, 0x4, 0xc, @local}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002580)={0x18, 0xc, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f00000023c0)='syzkaller\x00', 0xb6, 0xde, &(0x7f0000002400)=""/222, 0x41100, 0x42, '\x00', r6, 0x0, r12, 0x8, &(0x7f0000002500)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000002540)=[{0x4, 0x2, 0xb}, {0x2, 0x5, 0xa, 0x7}], 0x10, 0x2}, 0x94)
setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000002640)='wg2\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000002680)=[@timestamp, @mss={0x2, 0x800}, @sack_perm, @sack_perm, @timestamp, @mss={0x2, 0x8}], 0x6)
accept(0xffffffffffffffff, &(0x7f00000026c0)=@sco={0x1f, @none}, &(0x7f0000002740)=0x80)
socket(0x23, 0xa, 0xf)
socket$unix(0x1, 0x5, 0x0)

190.955132ms ago: executing program 2 (id=3139):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x3, @private0}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000001401"], 0x10}, 0x28000011)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={<r4=>0x0, 0x9}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={<r5=>0x0, 0x8}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000003c0)={<r6=>r4, 0xb2e3, 0x101, 0x6, 0x5, 0xfffd, 0x101, 0xa453, {r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x1, 0x8, 0x8, 0x6}}, &(0x7f0000000500)=0xb0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000700)={r6, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x0, 0x9}, 0x90)
r11 = socket(0x1, 0x5, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r11}, 0x20)
sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r10, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}}, 0x40804)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x0, 0x0, 0x1220, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x1160, 0x1188, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@string={{0xc0}, {0x4a, 0xfff, 'fsm\x00', "bb306f1a10bd0ba5fc36156ddf3c07659aa78b676a6d24da2c2e72ebc70f03e8fc2a67ed8594a958e8857370ea75ec62940b08c939231d5f7b091abb9155d934d0c3647ab48351a4419075c76b38a28c62d4f8479aea58be8d5f986f780cffb042d909156e4389330510cf49bcfc2aa48d8c9406a773b7d93b72967ae6d1caa9", 0x31, 0x1, {0x8}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r7, &(0x7f00000006c0)="486100f61116"}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r15=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

50.386926ms ago: executing program 2 (id=3140):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="7b0b0080ffff000071115700000000008510000002000000850000007600000095000000000000009500a505000000009bf05fd3afbdff712d4e9ee5199a679c7341e526d961aa3d219c2f32dae6fb6a117602bc5a1c9a9844ed3e67ab"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x47, 0x0, 0xffffffffffffffff, 0x6a7, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002740)={&(0x7f0000002680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0xb}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x2e]}}, &(0x7f00000026c0)=""/123, 0x2b, 0x7b, 0x0, 0x7}, 0x28)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a40)={0x6, 0x14, &(0x7f0000002800)=@raw=[@call={0x85, 0x0, 0x0, 0x95}, @exit, @map_val={0x18, 0x7, 0x2, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0xa, 0x9, 0xc6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], &(0x7f00000028c0)='GPL\x00', 0xd, 0x64, &(0x7f0000002900)=""/100, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002980)={0x4, 0xc, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000029c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000002a00)=[{0x3, 0x4, 0x0, 0x3}, {0x5, 0x4, 0x0, 0x5}, {0x4, 0x3, 0xf, 0x4}, {0x4, 0x2, 0xd, 0x4}], 0x10, 0x9}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002b80)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000002b00), &(0x7f0000002b40)='%-010d \x00'}, 0x20)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000008c0)={r0, &(0x7f00000007c0)='%-010d \x00', 0x2, &(0x7f0000000800)={@align=0x2, {0x5, 0x80, 0x200, 0x4}}, 0x400, &(0x7f0000000840), &(0x7f0000000880)=0x5})
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x21ff, 0x0, 0xffffffffffffffff, 0x9, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
vmsplice(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000001340)="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", 0xcc1}], 0x5, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054)
sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_FIRMWARE_NAME={0x17, 0x14, 'cpuacct.usage_user\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c811}, 0x200080d0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r13}, &(0x7f00000002c0), &(0x7f0000000240)=r14}, 0x20)
r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002c80)=@generic={&(0x7f0000002c40)='./file0\x00', 0x0, 0x14}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002dc0)=@bpf_ext={0x1c, 0x24, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0xa8, 0x9, 0x1, 0x735, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x7, 0x1, 0x5, 0xb, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000001680)=""/4096, 0x40f00, 0x18, '\x00', r2, 0x0, r6, 0x8, &(0x7f0000002780)={0x7c1, 0x1}, 0x8, 0x10, &(0x7f00000027c0)={0x2, 0xb, 0x80000000, 0x3}, 0x10, 0x492, r7, 0xa, &(0x7f0000002cc0)=[r8, r9, 0x1, r10, r11, r14, r15], &(0x7f0000002d00)=[{0x4, 0x5, 0x8, 0x8}, {0x5, 0x4, 0x3, 0x7}, {0x5, 0x1, 0x7}, {0x3, 0x2, 0xe, 0x9}, {0x3, 0x1, 0x7, 0x3}, {0x1, 0x4, 0x6, 0x8}, {0x2, 0x2, 0xd}, {0x4, 0x3, 0xb, 0x7}, {0x3, 0x5, 0x10, 0x2}, {0x0, 0x3, 0x0, 0xc}], 0x10, 0xf0}, 0x94)
r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r16, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000002e80)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r17, @ANYBLOB="040027bd7000ffdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0004000000060011000300000008001500040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000800290e059bc9e3c2af5684473e663e94db0b0001010000060011000700000008001500060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00050000000600110002000000080015000e000000"], 0xd0}}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001000200025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="079702000000000004002b8008000500", @ANYRES32=r2, @ANYBLOB="08004a04736312433c329e66f24271b22f7ac007459b4412a56303fe3240a9500c5bdf18dd9bbc980f66b3125fe9aea3a52ef21159fa79d9202bd10b31df45d4c58871735be03b894e5379551866", @ANYRES32=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

0s ago: executing program 2 (id=3141):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x40049409, &(0x7f0000000180)=&(0x7f0000000140))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38142' (ED25519) to the list of known hosts.
syzkaller login: [   50.542738][ T5595] cgroup: Unknown subsys name 'net'
[   50.617346][ T5595] cgroup: Unknown subsys name 'cpuset'
[   50.622988][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.473349][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.949977][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.956993][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.960529][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.970819][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.975612][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.975899][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.981281][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.984916][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.985140][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.991128][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.994090][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.994430][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.998079][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.000220][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.003033][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.486647][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.489660][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.492058][ T5607] bridge_slave_0: entered allmulticast mode
[   57.495325][ T5607] bridge_slave_0: entered promiscuous mode
[   57.515097][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.518147][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.521168][ T5607] bridge_slave_1: entered allmulticast mode
[   57.525903][ T5607] bridge_slave_1: entered promiscuous mode
[   57.570417][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.581747][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.622015][ T5607] team0: Port device team_slave_0 added
[   57.637973][ T5607] team0: Port device team_slave_1 added
[   57.691816][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.694593][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.703349][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.726800][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.729348][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.739035][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.766837][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.769885][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.772847][ T5606] bridge_slave_0: entered allmulticast mode
[   57.776847][ T5606] bridge_slave_0: entered promiscuous mode
[   57.782015][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.785931][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.789122][ T5606] bridge_slave_1: entered allmulticast mode
[   57.792740][ T5606] bridge_slave_1: entered promiscuous mode
[   57.814446][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.817353][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.819897][ T5608] bridge_slave_0: entered allmulticast mode
[   57.822446][ T5608] bridge_slave_0: entered promiscuous mode
[   57.837383][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.839958][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.842455][ T5608] bridge_slave_1: entered allmulticast mode
[   57.845433][ T5608] bridge_slave_1: entered promiscuous mode
[   57.863996][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.882782][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.887947][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.893236][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.901077][ T5607] hsr_slave_0: entered promiscuous mode
[   57.904348][ T5607] hsr_slave_1: entered promiscuous mode
[   57.942107][ T5606] team0: Port device team_slave_0 added
[   57.945633][ T5608] team0: Port device team_slave_0 added
[   57.959787][ T5606] team0: Port device team_slave_1 added
[   57.963382][ T5608] team0: Port device team_slave_1 added
[   58.016874][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.019512][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.030050][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.041735][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.045604][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.055969][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.061200][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.064419][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.074679][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.086580][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.089569][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.100362][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.195700][ T5606] hsr_slave_0: entered promiscuous mode
[   58.198852][ T5606] hsr_slave_1: entered promiscuous mode
[   58.201943][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   58.204681][ T5606] Cannot create hsr debugfs directory
[   58.210509][ T5608] hsr_slave_0: entered promiscuous mode
[   58.213696][ T5608] hsr_slave_1: entered promiscuous mode
[   58.216232][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[   58.218155][ T5608] Cannot create hsr debugfs directory
[   58.433812][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.444354][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.461167][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.467512][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.471169][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.477628][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.494183][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.500840][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.535020][ T5606] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.542653][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.550977][ T5606] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.555167][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.559296][ T5606] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.565469][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.575065][ T5606] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.581695][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.636984][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.644860][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.648409][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.653661][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.666057][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.671956][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.675343][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.679918][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.784773][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.819157][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   58.837306][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.842901][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.845727][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.853038][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.864316][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.866631][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.885075][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   58.896558][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   58.917013][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.920004][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.926169][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.928928][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.946909][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.949907][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.956415][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.959142][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.074764][ T4996] Bluetooth: hci1: command tx timeout
[   59.075068][   T54] Bluetooth: hci0: command tx timeout
[   59.077842][ T4996] Bluetooth: hci2: command tx timeout
[   59.391695][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.411349][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.459802][ T5606] veth0_vlan: entered promiscuous mode
[   59.466092][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.482844][ T5606] veth1_vlan: entered promiscuous mode
[   59.495731][ T5607] veth0_vlan: entered promiscuous mode
[   59.506939][ T5607] veth1_vlan: entered promiscuous mode
[   59.528790][ T5606] veth0_macvtap: entered promiscuous mode
[   59.535304][ T5608] veth0_vlan: entered promiscuous mode
[   59.544333][ T5606] veth1_macvtap: entered promiscuous mode
[   59.554177][ T5608] veth1_vlan: entered promiscuous mode
[   59.557885][ T5607] veth0_macvtap: entered promiscuous mode
[   59.566191][ T5607] veth1_macvtap: entered promiscuous mode
[   59.576261][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.589182][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.596493][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.606089][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.615587][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.619091][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.622615][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.626272][ T5608] veth0_macvtap: entered promiscuous mode
[   59.631247][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.648614][ T5608] veth1_macvtap: entered promiscuous mode
[   59.655918][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.659335][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.662871][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.680157][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.703038][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.729699][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.749667][ T5666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.752469][ T5666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.763899][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.767559][ T5666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.771445][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.773478][ T5666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.822173][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.829419][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.861827][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.866773][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.881573][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.884825][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.909199][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.913057][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.979036][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.987185][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.987812][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.219356][ T5724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.298822][ T5732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5'.
[   60.419986][ T5737] rdma_op ffff88816f1759f0 conn xmit_rdma 0000000000000000
[   60.635585][ T5751] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   60.638919][ T5753] netlink: 'syz.1.14': attribute type 21 has an invalid length.
[   60.641375][ T5753] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14'.
[   60.641468][ T5751] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[   60.646347][ T5753] netlink: 'syz.1.14': attribute type 5 has an invalid length.
[   60.650139][ T5753] netlink: 'syz.1.14': attribute type 6 has an invalid length.
[   60.653759][ T5753] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14'.
[   60.775068][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[   61.154782][ T4996] Bluetooth: hci0: command tx timeout
[   61.154815][   T54] Bluetooth: hci1: command tx timeout
[   61.163558][   T54] Bluetooth: hci2: command tx timeout
[   61.205894][ T5783] sctp: [Deprecated]: syz.1.27 (pid 5783) Use of int in maxseg socket option.
[   61.205894][ T5783] Use struct sctp_assoc_value instead
[   61.616239][ T5805] dvmrp0: entered allmulticast mode
[   61.759987][ T5810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.401457][ T5844] Bluetooth: MGMT ver 1.23
[   62.526464][ T5852] netlink: 'syz.2.57': attribute type 41 has an invalid length.
[   62.630684][ T5858] netlink: 'syz.0.60': attribute type 3 has an invalid length.
[   63.234616][   T54] Bluetooth: hci2: command tx timeout
[   63.237069][ T4996] Bluetooth: hci1: command tx timeout
[   63.237109][ T5620] Bluetooth: hci0: command tx timeout
[   63.450501][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[   63.527329][ T5941] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   63.881934][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   63.896873][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.127501][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'.
[   65.114694][    T9] cfg80211: failed to load regulatory.db
[   65.313303][ T5620] Bluetooth: hci0: command tx timeout
[   65.323331][ T5620] Bluetooth: hci1: command tx timeout
[   65.324037][ T4996] Bluetooth: hci2: command tx timeout
[   65.415953][ T6116] syzkaller0: entered promiscuous mode
[   65.420019][ T6116] syzkaller0: entered allmulticast mode
[   66.502822][ T6183] Zero length message leads to an empty skb
[   66.607989][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'.
[   66.617717][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'.
[   66.756399][ T6151] syz.0.148 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   66.766817][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(full) 
[   66.766834][ T6151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.766840][ T6151] Call Trace:
[   66.766845][ T6151]  <TASK>
[   66.766850][ T6151]  dump_stack_lvl+0xe8/0x150
[   66.766874][ T6151]  dump_header+0xd3/0x4b0
[   66.766891][ T6151]  oom_kill_process+0x3ab/0x970
[   66.766906][ T6151]  out_of_memory+0x1064/0x1480
[   66.766919][ T6151]  ? try_charge_memcg+0xbca/0x1590
[   66.766944][ T6151]  ? __pfx_out_of_memory+0x10/0x10
[   66.766955][ T6151]  ? do_raw_spin_unlock+0x4d/0x210
[   66.766968][ T6151]  try_charge_memcg+0xc74/0x1590
[   66.766984][ T6151]  ? __pfx_try_charge_memcg+0x10/0x10
[   66.766993][ T6151]  ? percpu_ref_tryget+0x15/0x180
[   66.767010][ T6151]  ? charge_memcg+0x20/0x2b0
[   66.767021][ T6151]  charge_memcg+0x19c/0x2b0
[   66.767031][ T6151]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[   66.767041][ T6151]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[   66.767052][ T6151]  swap_cache_alloc_folio+0x4de/0x990
[   66.767066][ T6151]  swap_cache_read_folio+0x44/0x120
[   66.767075][ T6151]  swap_cluster_readahead+0x3a0/0x640
[   66.767085][ T6151]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   66.767098][ T6151]  ? get_vma_policy+0x27b/0x3c0
[   66.767110][ T6151]  swapin_readahead+0x19a/0xc10
[   66.767117][ T6151]  ? __folio_batch_add_and_move+0x11a/0xc50
[   66.767127][ T6151]  ? swap_table_get+0x1e/0x260
[   66.767135][ T6151]  ? swap_table_get+0x1e/0x260
[   66.767142][ T6151]  ? __pfx_swapin_readahead+0x10/0x10
[   66.767151][ T6151]  ? swap_table_get+0x1e/0x260
[   66.767158][ T6151]  ? swap_table_get+0x1e/0x260
[   66.767164][ T6151]  ? swap_table_get+0x1e/0x260
[   66.767171][ T6151]  ? swap_table_get+0x216/0x260
[   66.767179][ T6151]  ? swap_cache_get_folio+0x2e7/0x2f0
[   66.767189][ T6151]  do_swap_page+0x455/0x5060
[   66.767201][ T6151]  ? __pte_offset_map+0x29/0x240
[   66.767212][ T6151]  ? __lock_acquire+0x683/0x2cf0
[   66.767221][ T6151]  ? do_swap_page+0x124/0x5060
[   66.767228][ T6151]  ? __pfx_do_swap_page+0x10/0x10
[   66.767235][ T6151]  ? __pte_offset_map+0x1ae/0x240
[   66.767244][ T6151]  ? pte_offset_map_rw_nolock+0xea/0x160
[   66.767253][ T6151]  handle_mm_fault+0x124c/0x3080
[   66.767271][ T6151]  ? handle_mm_fault+0xec/0x3080
[   66.767282][ T6151]  ? __pfx_handle_mm_fault+0x10/0x10
[   66.767289][ T6151]  ? lock_vma_under_rcu+0x45a/0x500
[   66.767308][ T6151]  do_user_addr_fault+0xa4d/0x1340
[   66.767323][ T6151]  ? trace_page_fault_user+0x84/0x1e0
[   66.767334][ T6151]  exc_page_fault+0x6a/0xc0
[   66.767344][ T6151]  asm_exc_page_fault+0x26/0x30
[   66.767351][ T6151] RIP: 0033:0x7f1ab60665d3
[   66.767359][ T6151] Code: 48 89 74 24 28 0f 85 cd 09 00 00 80 3d 2a f1 ee 00 00 49 89 f1 41 89 d2 89 cb c6 05 36 ba 3b 00 01 41 89 d7 0f 85 45 04 00 00 <80> 3d f6 f0 ee 00 00 0f 85 00 04 00 00 80 3d ec f0 ee 00 00 75 4f
[   66.767365][ T6151] RSP: 002b:00007ffee33d4a90 EFLAGS: 00010246
[   66.767372][ T6151] RAX: 00007f1ab6425fa0 RBX: 0000000000000026 RCX: 0000000000000026
[   66.767377][ T6151] RDX: 0000000000000001 RSI: 00007f1ab6426038 RDI: 0000000000000000
[   66.767381][ T6151] RBP: 00007f1ab6427da0 R08: 0000000000000001 R09: 00007f1ab6426038
[   66.767386][ T6151] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000010427
[   66.767390][ T6151] R13: 00007f1ab6425fac R14: 0000000000010119 R15: 0000000000000001
[   66.767401][ T6151]  </TASK>
[   66.767404][ T6151] memory: usage 307200kB, limit 307200kB, failcnt 2098
[   66.883926][ T6151] memory+swap: usage 307288kB, limit 9007199254740988kB, failcnt 0
[   66.886413][ T6151] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[   66.888709][ T6151] Memory cgroup stats for /syz0:
[   66.888870][ T6151] cache 0
[   66.891293][ T6151] rss 0
[   66.892133][ T6151] rss_huge 0
[   66.893334][ T6151] shmem 0
[   66.894324][ T6151] mapped_file 0
[   66.895450][ T6151] dirty 0
[   66.896449][ T6151] writeback 0
[   66.897600][ T6151] workingset_refault_anon 4
[   66.899022][ T6151] workingset_refault_file 0
[   66.900442][ T6151] swap 90112
[   66.901429][ T6151] swapcached 155648
[   66.902579][ T6151] pgpgin 6575
[   66.903626][ T6151] pgpgout 6570
[   66.904617][ T6151] pgfault 10302
[   66.905733][ T6151] pgmajfault 4
[   66.906844][ T6151] inactive_anon 16384
[   66.911808][ T6151] active_anon 4096
[   66.914434][ T6151] inactive_file 0
[   66.915989][ T6151] active_file 0
[   66.917245][ T6151] unevictable 0
[   66.918782][ T6151] hierarchical_memory_limit 314572800
[   66.920656][ T6151] hierarchical_memsw_limit 9223372036854771712
[   66.922669][ T6151] total_cache 0
[   66.924961][ T6151] total_rss 0
[   66.926445][ T6151] total_rss_huge 0
[   66.927772][ T6151] total_shmem 0
[   66.931212][ T6151] total_mapped_file 0
[   66.932543][ T6151] total_dirty 0
[   66.933902][ T6151] total_writeback 0
[   66.935492][ T6151] total_workingset_refault_anon 4
[   66.937225][ T6151] total_workingset_refault_file 0
[   66.938848][ T6151] total_swap 90112
[   66.940096][ T6151] total_swapcached 155648
[   66.941502][ T6151] total_pgpgin 6575
[   66.942754][ T6151] total_pgpgout 6570
[   66.944097][ T6151] total_pgfault 10302
[   66.945393][ T6151] total_pgmajfault 4
[   66.946673][ T6151] total_inactive_anon 16384
[   66.948136][ T6151] total_active_anon 4096
[   66.949539][ T6151] total_inactive_file 0
[   66.950907][ T6151] total_active_file 0
[   66.952258][ T6151] total_unevictable 0
[   66.953690][ T6151] anon_cost 0
[   66.954784][ T6151] file_cost 0
[   66.955873][ T6151] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.148,pid=6151,uid=0
[   66.960789][ T6151] Memory cgroup out of memory: Killed process 6151 (syz.0.148) total-vm:104220kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   67.339892][ T6152] syz.0.148 (6152) used greatest stack depth: 19648 bytes left
[   67.478635][ T6203] syzkaller0: entered promiscuous mode
[   67.480491][ T6203] syzkaller0: entered allmulticast mode
[   67.487671][ T6203] tipc: Started in network mode
[   67.489840][ T6203] tipc: Node identity 7a54e88a18c, cluster identity 4711
[   67.492918][ T6203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.499747][ T6203] tipc: Resetting bearer <eth:syzkaller0>
[   67.538023][ T6202] tipc: Resetting bearer <eth:syzkaller0>
[   67.557980][ T6202] tipc: Disabling bearer <eth:syzkaller0>
[   68.134241][ T6245] batadv_slave_1: entered promiscuous mode
[   68.145476][ T6243] batadv_slave_1: left promiscuous mode
[   68.288191][ T6257] netlink: 'syz.2.186': attribute type 3 has an invalid length.
[   68.529446][ T6277] syzkaller0: entered promiscuous mode
[   68.534538][ T6277] syzkaller0: entered allmulticast mode
[   70.971739][ T6378] syzkaller1: tun_chr_ioctl cmd 1074025677
[   70.974035][ T6378] syzkaller1: linktype set to 1
[   71.477422][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[   71.481298][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[   72.002665][ T6311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.007875][ T6324] netlink: 'syz.1.204': attribute type 1 has an invalid length.
[   72.016464][ T6324] netlink: 224 bytes leftover after parsing attributes in process `syz.1.204'.
[   72.020760][ T6324] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[   72.351020][ T6407] netlink: 'syz.1.240': attribute type 5 has an invalid length.
[   72.565540][ T6435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'.
[   72.961906][ T6478] IPv6: NLM_F_CREATE should be specified when creating new route
[   72.999968][ T6484] netlink: 'syz.0.274': attribute type 1 has an invalid length.
[   73.022572][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.041127][ T6484] bond1: (slave geneve2): making interface the new active one
[   73.045046][ T6484] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   74.859619][ T6572] syzkaller0: entered promiscuous mode
[   74.868350][ T6572] syzkaller0: entered allmulticast mode
[   74.887281][ T6575] vlan3: entered promiscuous mode
[   74.889528][ T6575] bridge0: entered promiscuous mode
[   74.920369][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'.
[   74.925930][ T6583] nbd: couldn't find a device at index 65546
[   75.110332][ T6595] netlink: 92 bytes leftover after parsing attributes in process `syz.0.324'.
[   75.245922][ T6610] netlink: set zone limit has 8 unknown bytes
[   75.297374][ T6614] syzkaller0: entered promiscuous mode
[   75.299244][ T6614] syzkaller0: entered allmulticast mode
[   75.306434][ T6614] tipc: Started in network mode
[   75.308115][ T6614] tipc: Node identity a2e585203934, cluster identity 4711
[   75.311054][ T6614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.321197][ T6614] tipc: Resetting bearer <eth:syzkaller0>
[   75.326598][ T6613] tipc: Resetting bearer <eth:syzkaller0>
[   75.333436][ T6613] tipc: Disabling bearer <eth:syzkaller0>
[   75.526453][ T6623] bond1: option downdelay: invalid value (18446744073709551487)
[   75.528774][ T6623] bond1: option downdelay: allowed values 0 - 2147483647
[   75.532588][ T6623] bond1 (unregistering): Released all slaves
[   75.642820][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.337'.
[   76.148274][ T6652] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   76.148274][ T6652] Please contact the netfilter-devel mailing list or update your nftables rules.
[   77.199983][ T6718] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.680404][ T6762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.884429][ T6786] netlink: 'syz.2.407': attribute type 27 has an invalid length.
[   77.887017][ T6786] netlink: 'syz.2.407': attribute type 4 has an invalid length.
[   77.889479][ T6786] netlink: 152 bytes leftover after parsing attributes in process `syz.2.407'.
[   77.894616][ T6786] syz_tun: entered allmulticast mode
[   78.105428][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'.
[   78.108953][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'.
[   78.112336][ T6806] netlink: 'syz.1.416': attribute type 13 has an invalid length.
[   78.503678][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   79.738024][ T6927] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   79.743566][ T6927] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   79.772231][ T6927] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   79.776204][ T6927] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   80.205543][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'.
[   80.341431][ T6954] xt_hashlimit: size too large, truncated to 1048576
[   80.926970][ T6978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.416542][ T6998] netlink: 'syz.1.500': attribute type 12 has an invalid length.
[   81.418989][ T6998] netlink: 'syz.1.500': attribute type 29 has an invalid length.
[   81.421350][ T6998] netlink: 148 bytes leftover after parsing attributes in process `syz.1.500'.
[   81.535991][ T7000] infiniband syz0: set down
[   81.537942][ T7000] infiniband syz0: added ipvlan1
[   81.548663][ T7000] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   81.553908][ T7000] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   81.559761][ T7000] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   81.579378][ T7000] RDS/IB: syz0: added
[   81.581340][ T7000] smc: adding ib device syz0 with port count 1
[   81.584634][ T7000] smc:    ib device syz0 port 1 has no pnetid
[   82.544394][ T6905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.199058][ T7080] netlink: 'syz.0.534': attribute type 2 has an invalid length.
[   83.218786][ T7080] netlink: 'syz.0.534': attribute type 2 has an invalid length.
[   83.224852][ T7080] netlink: 67 bytes leftover after parsing attributes in process `syz.0.534'.
[   83.320654][ T7097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'.
[   83.369682][ T7099] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   83.377320][ T7099] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   83.383950][ T7099] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   83.391347][ T7099] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   83.398189][ T7099] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   83.549625][   T81] smbdirect: ib_dev[syz2] removed
[   83.579108][ T7111] netlink: 'syz.1.547': attribute type 15 has an invalid length.
[   83.727607][ T7123] macvlan2: entered allmulticast mode
[   83.734656][ T7123] dummy0: entered allmulticast mode
[   83.737884][ T7123] dummy0: entered promiscuous mode
[   83.741860][ T7123] team0: Port device macvlan2 added
[   84.682052][ T7138] netlink: 116 bytes leftover after parsing attributes in process `syz.1.560'.
[   84.768461][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'.
[   84.771563][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'.
[   84.854726][ T7154] netlink: 'syz.1.568': attribute type 7 has an invalid length.
[   84.965933][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'.
[   85.081956][ T7186] netlink: 'syz.1.584': attribute type 30 has an invalid length.
[   85.359299][ T7225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.457498][ T7240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.491240][ T7240] syzkaller0: entered promiscuous mode
[   85.492975][ T7240] syzkaller0: entered allmulticast mode
[   85.495730][ T7240] tipc: Resetting bearer <eth:syzkaller0>
[   85.499098][ T7247] netlink: 'syz.1.610': attribute type 3 has an invalid length.
[   85.504107][ T7247] netlink: 666 bytes leftover after parsing attributes in process `syz.1.610'.
[   85.509138][ T7239] tipc: Resetting bearer <eth:syzkaller0>
[   86.427357][ T7239] tipc: Disabling bearer <eth:syzkaller0>
[   86.631987][ T7283] syzkaller0: entered promiscuous mode
[   86.636371][ T7283] syzkaller0: entered allmulticast mode
[   86.653347][ T7283] 0: reclassify loop, rule prio 0, protocol 800
[   86.722442][ T7293] netlink: 128 bytes leftover after parsing attributes in process `syz.2.632'.
[   86.786336][ T7298] netlink: 'syz.1.634': attribute type 4 has an invalid length.
[   86.799880][ T7298] netlink: 'syz.1.634': attribute type 4 has an invalid length.
[   86.927009][ T7321] netlink: 84 bytes leftover after parsing attributes in process `syz.1.646'.
[   86.935759][ T7321] vlan2: entered allmulticast mode
[   86.937553][ T7321] bond0: entered allmulticast mode
[   86.939431][ T7321] bond_slave_0: entered allmulticast mode
[   86.941600][ T7321] bond_slave_1: entered allmulticast mode
[   87.015055][   T31] IPVS: starting estimator thread 0...
[   87.025104][ T7335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.027768][ T7335] syzkaller0: entered promiscuous mode
[   87.029573][ T7335] syzkaller0: entered allmulticast mode
[   87.039024][ T7335] tipc: Resetting bearer <eth:syzkaller0>
[   87.042544][ T7334] tipc: Resetting bearer <eth:syzkaller0>
[   87.056357][ T7334] tipc: Disabling bearer <eth:syzkaller0>
[   87.109021][ T7333] IPVS: using max 84 ests per chain, 201600 per kthread
[   87.309264][ T7352] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[   87.332229][ T7352] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.339952][ T7352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'.
[   87.345736][ T7352] bond2: entered promiscuous mode
[   87.347511][ T7352] bond2: entered allmulticast mode
[   87.970678][ T7385] dvmrp1: tun_chr_ioctl cmd 1074025677
[   87.972587][ T7385] dvmrp1: linktype set to 776
[   88.478047][ T7393] syz.1.679 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   88.498351][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.1.679 Not tainted syzkaller #0 PREEMPT(full) 
[   88.498364][ T7393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.498368][ T7393] Call Trace:
[   88.498372][ T7393]  <TASK>
[   88.498376][ T7393]  dump_stack_lvl+0xe8/0x150
[   88.498390][ T7393]  dump_header+0xd3/0x4b0
[   88.498401][ T7393]  oom_kill_process+0x3ab/0x970
[   88.498411][ T7393]  out_of_memory+0x1064/0x1480
[   88.498418][ T7393]  ? try_charge_memcg+0xbca/0x1590
[   88.498434][ T7393]  ? __pfx_out_of_memory+0x10/0x10
[   88.498440][ T7393]  ? do_raw_spin_unlock+0x4d/0x210
[   88.498452][ T7393]  try_charge_memcg+0xc74/0x1590
[   88.498507][ T7393]  ? __pfx_try_charge_memcg+0x10/0x10
[   88.498519][ T7393]  ? percpu_ref_tryget+0x15/0x180
[   88.498536][ T7393]  ? charge_memcg+0x20/0x2b0
[   88.498547][ T7393]  charge_memcg+0x19c/0x2b0
[   88.498557][ T7393]  ? mem_cgroup_swapin_charge_folio+0x2b/0x390
[   88.498566][ T7393]  mem_cgroup_swapin_charge_folio+0x25a/0x390
[   88.498577][ T7393]  swap_cache_alloc_folio+0x4de/0x990
[   88.498591][ T7393]  swap_cache_read_folio+0x44/0x120
[   88.498600][ T7393]  swap_cluster_readahead+0x3a0/0x640
[   88.498611][ T7393]  ? __pfx_swap_cluster_readahead+0x10/0x10
[   88.498623][ T7393]  ? get_vma_policy+0x27b/0x3c0
[   88.498635][ T7393]  swapin_readahead+0x19a/0xc10
[   88.498644][ T7393]  ? swap_table_get+0x1e/0x260
[   88.498652][ T7393]  ? swap_table_get+0x1e/0x260
[   88.498659][ T7393]  ? __pfx_swapin_readahead+0x10/0x10
[   88.498668][ T7393]  ? swap_table_get+0x1e/0x260
[   88.498675][ T7393]  ? swap_table_get+0x1e/0x260
[   88.498681][ T7393]  ? swap_table_get+0x1e/0x260
[   88.498688][ T7393]  ? swap_table_get+0x216/0x260
[   88.498696][ T7393]  ? swap_cache_get_folio+0x2e7/0x2f0
[   88.498705][ T7393]  do_swap_page+0x455/0x5060
[   88.498717][ T7393]  ? __pte_offset_map+0x29/0x240
[   88.498728][ T7393]  ? __lock_acquire+0x683/0x2cf0
[   88.498737][ T7393]  ? do_swap_page+0x124/0x5060
[   88.498744][ T7393]  ? __pfx_do_swap_page+0x10/0x10
[   88.498757][ T7393]  ? __pte_offset_map+0x1ae/0x240
[   88.498766][ T7393]  ? pte_offset_map_rw_nolock+0xea/0x160
[   88.498775][ T7393]  handle_mm_fault+0x124c/0x3080
[   88.498787][ T7393]  ? handle_mm_fault+0xec/0x3080
[   88.498797][ T7393]  ? __pfx_handle_mm_fault+0x10/0x10
[   88.498804][ T7393]  ? lock_vma_under_rcu+0x45a/0x500
[   88.498822][ T7393]  do_user_addr_fault+0xa4d/0x1340
[   88.498837][ T7393]  ? trace_page_fault_user+0x84/0x1e0
[   88.498848][ T7393]  exc_page_fault+0x6a/0xc0
[   88.498857][ T7393]  asm_exc_page_fault+0x26/0x30
[   88.498865][ T7393] RIP: 0033:0x7fc6eb86b80c
[   88.498873][ T7393] Code: ca 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[   88.498878][ T7393] RSP: 002b:00007ffeefe1de90 EFLAGS: 00010206
[   88.498887][ T7393] RAX: 0000000000000000 RBX: 00007fc6ebc25fa0 RCX: 0000555574c86808
[   88.498908][ T7393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   88.498913][ T7393] RBP: 00007fc6ebc27da0 R08: 0000000000000000 R09: 0000000000000000
[   88.498917][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000015afb
[   88.498921][ T7393] R13: 00007fc6ebc25fac R14: 00000000000157ed R15: 00007ffeefe1df90
[   88.498933][ T7393]  </TASK>
[   88.502350][ T7393] memory: usage 307200kB, limit 307200kB, failcnt 2230
[   88.672279][ T7393] memory+swap: usage 307272kB, limit 9007199254740988kB, failcnt 0
[   88.678983][ T7393] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[   88.681869][ T7393] Memory cgroup stats for /syz1:
[   88.681926][ T7393] cache 0
[   88.685366][ T7393] rss 0
[   88.686457][ T7393] rss_huge 0
[   88.687876][ T7393] shmem 0
[   88.689041][ T7393] mapped_file 0
[   88.690313][ T7393] dirty 0
[   88.691418][ T7393] writeback 0
[   88.693023][ T7393] workingset_refault_anon 23
[   88.696400][ T7393] workingset_refault_file 4
[   88.697980][ T7393] swap 73728
[   88.699123][ T7393] swapcached 282624
[   88.700421][ T7393] pgpgin 24651
[   88.701657][ T7393] pgpgout 24641
[   88.702830][ T7393] pgfault 51813
[   88.704508][ T7393] pgmajfault 23
[   88.706024][ T7393] inactive_anon 28672
[   88.707795][ T7393] active_anon 12288
[   88.709520][ T7393] inactive_file 0
[   88.711162][ T7393] active_file 0
[   88.712710][ T7393] unevictable 0
[   88.714726][ T7393] hierarchical_memory_limit 314572800
[   88.717006][ T7393] hierarchical_memsw_limit 9223372036854771712
[   88.719528][ T7393] total_cache 0
[   88.721051][ T7393] total_rss 0
[   88.722514][ T7393] total_rss_huge 0
[   88.738014][ T7393] total_shmem 0
[   88.741387][ T7393] total_mapped_file 0
[   88.747010][ T7393] total_dirty 0
[   88.750572][ T7393] total_writeback 0
[   88.760980][ T7393] total_workingset_refault_anon 23
[   88.765909][ T7393] total_workingset_refault_file 4
[   88.786654][ T7393] total_swap 73728
[   88.789854][ T7393] total_swapcached 282624
[   88.795309][ T7393] total_pgpgin 24651
[   88.803372][ T7393] total_pgpgout 24641
[   88.805189][ T7393] total_pgfault 51813
[   88.806722][ T7393] total_pgmajfault 23
[   88.808237][ T7393] total_inactive_anon 28672
[   88.809937][ T7393] total_active_anon 12288
[   88.811313][ T7393] total_inactive_file 0
[   88.812612][ T7393] total_active_file 0
[   88.821452][ T7393] total_unevictable 0
[   88.826030][ T7393] anon_cost 0
[   88.829445][ T7393] file_cost 0
[   88.831735][ T7393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.679,pid=7393,uid=0
[   88.865167][ T7393] Memory cgroup out of memory: Killed process 7393 (syz.1.679) total-vm:102172kB, anon-rss:1256kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[   88.991868][ T7438] netlink: 'syz.2.696': attribute type 25 has an invalid length.
[   89.005586][ T7438] netlink: 'syz.2.696': attribute type 3 has an invalid length.
[   89.015036][ T7438] __nla_validate_parse: 4 callbacks suppressed
[   89.015047][ T7438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.696'.
[   89.135648][ T7448] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   89.486589][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[   89.490220][ T7479] netlink: 'syz.1.714': attribute type 5 has an invalid length.
[   89.494206][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'.
[   89.512049][ T7479] geneve2: entered promiscuous mode
[   89.519825][ T7479] geneve2: entered allmulticast mode
[   89.529125][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 52976 - 0
[   89.546267][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 52976 - 0
[   89.560385][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 52976 - 0
[   89.573422][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 52976 - 0
[   89.763175][ T7501] syzkaller0: entered promiscuous mode
[   89.770626][ T7501] syzkaller0: entered allmulticast mode
[   89.909582][ T7521] team0: Device vxcan1 is of different type
[   90.261435][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.264766][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.395688][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.419595][ T7563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.556171][ T7563] dummy0: left allmulticast mode
[   90.558835][ T7563] macvlan2: left allmulticast mode
[   90.567946][ T7563] bond2: left promiscuous mode
[   90.571503][ T7563] bond2: left allmulticast mode
[   90.579199][ T5482] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.592282][ T5482] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.603530][ T5482] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.616181][ T5482] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.049894][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'.
[   91.789861][ T7670] warning: `syz.2.793' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.017106][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'.
[   92.171446][ T7704] syzkaller0: entered promiscuous mode
[   92.174635][ T7704] syzkaller0: entered allmulticast mode
[   92.181387][ T7704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.186725][ T7704] tipc: Resetting bearer <eth:syzkaller0>
[   92.190326][ T7703] tipc: Resetting bearer <eth:syzkaller0>
[   92.202918][ T7703] tipc: Disabling bearer <eth:syzkaller0>
[   92.347058][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'.
[   92.350712][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.817'.
[   92.950979][ T7765] syzkaller0: entered promiscuous mode
[   92.953033][ T7765] syzkaller0: entered allmulticast mode
[   93.322269][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.846'.
[   93.403048][ T7788] sit0: entered promiscuous mode
[   93.410444][ T7788] netlink: 'syz.1.849': attribute type 1 has an invalid length.
[   93.416431][ T7788] netlink: 1 bytes leftover after parsing attributes in process `syz.1.849'.
[   93.931435][ T7834] netlink: 2 bytes leftover after parsing attributes in process `syz.0.870'.
[   94.514915][ T7889] nbd: socks must be embedded in a SOCK_ITEM attr
[   94.518729][ T7889] block nbd0: shutting down sockets
[   94.594253][ T7895] tipc: Started in network mode
[   94.599543][ T7895] tipc: Node identity 267e2d65b5cb, cluster identity 4711
[   94.606361][ T7895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.635352][ T7898] x_tables: duplicate underflow at hook 2
[   94.659351][ T7895] syzkaller0: entered promiscuous mode
[   94.661642][ T7895] syzkaller0: entered allmulticast mode
[   94.665052][ T7895] tipc: Resetting bearer <eth:syzkaller0>
[   94.681782][ T7894] tipc: Resetting bearer <eth:syzkaller0>
[   94.865557][ T7909] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[   94.945844][ T7913] __nla_validate_parse: 3 callbacks suppressed
[   94.945858][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.906'.
[   95.637766][ T7894] tipc: Disabling bearer <eth:syzkaller0>
[   96.051500][ T7962] netlink: 3 bytes leftover after parsing attributes in process `syz.2.929'.
[   96.200115][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.933'.
[   96.221216][ T7969] ip6tnl2: entered allmulticast mode
[   97.020566][ T8042] netlink: 660 bytes leftover after parsing attributes in process `syz.1.966'.
[   97.035844][ T8042] netlink: 76 bytes leftover after parsing attributes in process `syz.1.966'.
[   97.620794][ T8047] IPVS: length: 35 != 24
[   97.667749][ T8055] netlink: 'syz.0.972': attribute type 11 has an invalid length.
[   98.568001][ T8145] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   98.575733][ T8143] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   98.671905][ T8152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.710287][ T8152] syzkaller0: entered promiscuous mode
[   98.712625][ T8152] syzkaller0: entered allmulticast mode
[   98.715888][ T8152] tipc: Resetting bearer <eth:syzkaller0>
[   98.724978][ T8151] tipc: Resetting bearer <eth:syzkaller0>
[   99.116719][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'.
[   99.119718][ T8167] netlink: 'syz.2.1020': attribute type 21 has an invalid length.
[   99.674853][ T8151] tipc: Disabling bearer <eth:syzkaller0>
[   99.992575][ T5673] IPVS: starting estimator thread 0...
[  100.083204][ T8185] IPVS: using max 43 ests per chain, 103200 per kthread
[  100.107380][ T8191] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  100.266989][ T8195] syzkaller1: tun_chr_ioctl cmd 1074025677
[  100.271346][ T8195] syzkaller1: linktype set to 768
[  101.033789][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'.
[  101.043212][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'.
[  101.164912][ T8210] syzkaller0: entered promiscuous mode
[  101.173437][ T8210] syzkaller0: entered allmulticast mode
[  102.195251][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1044'.
[  102.360911][ T8263] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  102.368423][ T8261] netlink: 'syz.1.1061': attribute type 2 has an invalid length.
[  102.604397][ T8292] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1077'.
[  102.774914][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'.
[  103.338419][ T8360] gretap0: entered promiscuous mode
[  103.344029][ T8360] vlan2: entered promiscuous mode
[  103.466148][ T8370] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1110'.
[  104.318398][ T8429] syzkaller0: entered promiscuous mode
[  104.320249][ T8429] syzkaller0: entered allmulticast mode
[  104.587295][ T8451] syzkaller0: entered promiscuous mode
[  104.596831][ T8451] syzkaller0: entered allmulticast mode
[  104.641061][ T8451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.649672][ T8450] tipc: Resetting bearer <eth:syzkaller0>
[  104.701258][ T8450] tipc: Disabling bearer <eth:syzkaller0>
[  104.738737][ T8463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1153'.
[  104.774930][ T8465] syzkaller1: entered promiscuous mode
[  104.777007][ T8465] syzkaller1: entered allmulticast mode
[  105.722104][ T8577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.778887][ T8582] syzkaller0: entered promiscuous mode
[  105.781068][ T8582] syzkaller0: entered allmulticast mode
[  106.121121][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1215'.
[  106.652666][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'.
[  106.677167][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'.
[  106.678662][ T8634] ieee802154 phy0 wpan0: encryption failed: -22
[  106.813036][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1236'.
[  106.829017][ T8646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1236'.
[  106.832579][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'.
[  106.987092][ T8661] netlink: 'syz.1.1243': attribute type 3 has an invalid length.
[  107.040391][ T8665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1245'.
[  107.176470][ T8675] bond1: option resend_igmp: invalid value (2878)
[  107.178602][ T8675] bond1: option resend_igmp: allowed values 0 - 255
[  107.181651][ T8675] bond1 (unregistering): Released all slaves
[  107.374527][ T8687] netlink: 'syz.1.1254': attribute type 2 has an invalid length.
[  107.422370][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'.
[  107.587168][ T8706] sch_fq: defrate 4294967293 ignored.
[  108.109960][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'.
[  108.132283][ T8759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.548127][ T8816] bridge0: entered promiscuous mode
[  108.550107][ T8816] bridge0: entered allmulticast mode
[  108.577125][ T8819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.910524][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'.
[  108.913580][ T8833] netlink: 'syz.1.1318': attribute type 10 has an invalid length.
[  109.059506][ T8845] netlink: 'syz.1.1324': attribute type 11 has an invalid length.
[  110.131684][ T8904] vlan3: entered allmulticast mode
[  110.138620][ T8904] bond0: entered allmulticast mode
[  110.140881][ T8904] bond_slave_0: entered allmulticast mode
[  110.143831][ T8904] bond_slave_1: entered allmulticast mode
[  111.223732][ T8775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.524500][ T8962] __nla_validate_parse: 4 callbacks suppressed
[  111.524509][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1374'.
[  111.882728][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1384'.
[  112.161047][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1392'.
[  112.327357][ T9018] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma?
[  113.812674][ T9089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1435'.
[  113.818954][ T9089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1435'.
[  113.829672][ T9089] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.241222][ T9113] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1446'.
[  114.296663][ T9117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.797996][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  115.102627][ T9175] xt_hashlimit: max too large, truncated to 1048576
[  115.546099][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1494'.
[  115.593285][ T9224] block nbd0: server does not support multiple connections per device.
[  115.596086][ T9224] block nbd0: shutting down sockets
[  117.007260][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1527'.
[  117.090730][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.093536][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.097351][ T9307] bridge0: left allmulticast mode
[  117.136797][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.142309][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.192559][ T9307] vlan2: left allmulticast mode
[  117.198305][ T9307] bond0: left allmulticast mode
[  117.200052][ T9307] bond_slave_0: left allmulticast mode
[  117.201989][ T9307] bond_slave_1: left allmulticast mode
[  117.204608][ T9307] geneve2: left allmulticast mode
[  117.243762][ T5482] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.247370][ T5482] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 52976 - 0
[  117.254834][ T5482] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.261506][ T5482] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 52976 - 0
[  117.266548][ T5482] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.280209][ T5482] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 52976 - 0
[  117.290800][ T5482] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.301700][ T5482] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 52976 - 0
[  117.325367][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1533'.
[  117.460023][ T9328] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.465209][ T9328] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.484510][ T9332] tun0: tun_chr_ioctl cmd 1074025675
[  117.486781][ T9332] tun0: persist enabled
[  117.488743][ T9332] tun0: tun_chr_ioctl cmd 1074025675
[  117.490935][ T9332] tun0: persist disabled
[  117.507881][ T9335] IPVS: Unknown mcast interface: vcan0
[  117.538277][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'.
[  117.552743][ T9338] ipip0: entered promiscuous mode
[  117.557700][ T9338] ipip0: entered allmulticast mode
[  117.581903][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'.
[  117.586141][ T9342] netlink: 'syz.1.1544': attribute type 2 has an invalid length.
[  117.589439][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'.
[  117.615323][ T9344] syzkaller0: tun_chr_ioctl cmd 1074025677
[  117.617366][ T9344] syzkaller0: linktype set to 0
[  117.971377][ T9357] pim6reg0: tun_chr_ioctl cmd 1074812118
[  118.119296][ T9368] xt_NFQUEUE: number of total queues is 0
[  118.550042][ T9396] netlink: 'syz.1.1567': attribute type 1 has an invalid length.
[  118.728174][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'.
[  118.783507][ T9416] syzkaller0: entered promiscuous mode
[  118.785484][ T9416] syzkaller0: entered allmulticast mode
[  119.372054][ T9463] 8021q: adding VLAN 0 to HW filter on device batadv1
[  119.375809][ T9463] team0: Port device batadv1 added
[  119.477774][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'.
[  119.481365][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'.
[  119.876607][ T9501] tun0: tun_chr_ioctl cmd 2148553947
[  120.202247][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'.
[  120.266121][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'.
[  120.347555][ T9542] netlink: ct family unspecified
[  120.354888][ T9542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.502920][ T9556] syzkaller0: entered promiscuous mode
[  120.510668][ T9556] syzkaller0: entered allmulticast mode
[  120.542133][ T9559] syzkaller0: entered promiscuous mode
[  120.544952][ T9559] syzkaller0: entered allmulticast mode
[  121.523589][ T9571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.706934][ T9583] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  123.714102][ T9583] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1653'.
[  124.044361][ T9612] veth0: entered promiscuous mode
[  124.050778][ T9612] netlink: 'syz.2.1665': attribute type 1 has an invalid length.
[  124.053782][ T9614] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  124.056762][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'.
[  124.060435][ T9614] unsupported nla_type 216
[  124.123029][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1665'.
[  124.528117][ T9662] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1678'.
[  124.531768][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'.
[  124.537284][ T9662] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1678'.
[  125.057722][ T9714] netlink: 'syz.2.1684': attribute type 39 has an invalid length.
[  125.246972][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'.
[  125.266011][ T9730] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1689'.
[  125.322902][ T9730] netlink: 'syz.2.1689': attribute type 1 has an invalid length.
[  125.452770][ T9734] netlink: 'syz.2.1689': attribute type 3 has an invalid length.
[  125.456960][ T9734] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1689'.
[  125.483931][ T9734] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.488679][ T9734] bond1: (slave bond2): making interface the new active one
[  125.492513][ T9734] bond1: (slave bond2): Enslaving as an active interface with an up link
[  126.712171][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'.
[  126.759479][ T9799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.761864][ T9799] syzkaller0: entered promiscuous mode
[  126.764184][ T9799] syzkaller0: entered allmulticast mode
[  126.776298][ T9799] tipc: Resetting bearer <eth:syzkaller0>
[  126.780008][ T9798] tipc: Resetting bearer <eth:syzkaller0>
[  126.790916][ T9798] tipc: Disabling bearer <eth:syzkaller0>
[  126.868233][ T9802] syzkaller0: entered promiscuous mode
[  126.870046][ T9802] syzkaller0: entered allmulticast mode
[  127.162237][ T9817] netlink: 'syz.0.1729': attribute type 1 has an invalid length.
[  127.352016][ T9835] netlink: 'syz.0.1736': attribute type 1 has an invalid length.
[  127.569052][ T9855] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  127.960840][ T9880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.964320][ T9880] syzkaller0: entered promiscuous mode
[  127.966786][ T9880] syzkaller0: entered allmulticast mode
[  127.984187][ T9880] tipc: Resetting bearer <eth:syzkaller0>
[  127.991919][ T9878] tipc: Resetting bearer <eth:syzkaller0>
[  128.007434][ T9878] tipc: Disabling bearer <eth:syzkaller0>
[  128.182188][ T9894] netlink: 'syz.2.1764': attribute type 1 has an invalid length.
[  128.241103][ T9898] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  128.249272][ T9898] bond3 (unregistering): Released all slaves
[  129.258630][ T9979] __nla_validate_parse: 7 callbacks suppressed
[  129.258639][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'.
[  129.294316][ T9985] syzkaller0: entered promiscuous mode
[  129.296512][ T9985] syzkaller0: entered allmulticast mode
[  129.315181][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'.
[  129.342998][ T9987] bond2: option broadcast_neighbor: invalid value (4)
[  129.350135][ T9987] bond2 (unregistering): Released all slaves
[  129.372510][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  129.436286][ T9996] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  129.439673][ T9996] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  129.488077][T10000] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  129.491240][T10000] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  129.528878][T10005] netlink: 'syz.2.1814': attribute type 1 has an invalid length.
[  129.647794][T10013] xt_connbytes: Forcing CT accounting to be enabled
[  129.649962][T10013] xt_CT: You must specify a L4 protocol and not use inversions on it
[  129.774979][T10021] openvswitch: netlink: IP tunnel dst address not specified
[  129.777849][T10021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.319875][T10033] syzkaller0: entered promiscuous mode
[  130.321858][T10033] syzkaller0: entered allmulticast mode
[  130.327035][T10033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.329875][T10032] tipc: Resetting bearer <eth:syzkaller0>
[  130.338775][T10032] tipc: Disabling bearer <eth:syzkaller0>
[  130.874736][T10053] netlink: 'syz.1.1833': attribute type 49 has an invalid length.
[  130.878101][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  130.896711][T10052] xt_hashlimit: size too large, truncated to 1048576
[  130.956695][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  130.967032][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  130.975529][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  130.991234][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  131.000625][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'.
[  131.105518][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1840'.
[  131.121435][T10070] netlink: 'syz.1.1840': attribute type 30 has an invalid length.
[  131.138877][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.141750][T10070] netlink: 'syz.1.1840': attribute type 30 has an invalid length.
[  131.144986][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.148508][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.155975][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.189158][T10079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.287269][T10189] SET target dimension over the limit!
[  132.890456][T10225] syzkaller0: entered promiscuous mode
[  132.903228][T10225] syzkaller0: entered allmulticast mode
[  132.916611][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  132.919262][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  133.377548][T10251] openvswitch: netlink: IP tunnel dst address not specified
[  133.649646][T10274] dummy0: entered allmulticast mode
[  134.614920][T10360] __nla_validate_parse: 7 callbacks suppressed
[  134.614934][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'.
[  134.919293][T10379] netlink: 'syz.1.1986': attribute type 21 has an invalid length.
[  134.922644][T10379] IPv6: NLM_F_CREATE should be specified when creating new route
[  134.926730][T10379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.930995][T10379] IPv6: NLM_F_CREATE should be set when creating new route
[  134.934064][T10379] IPv6: NLM_F_CREATE should be set when creating new route
[  134.937117][T10379] IPv6: NLM_F_CREATE should be set when creating new route
[  135.070256][T10382] xt_hashlimit: size too large, truncated to 1048576
[  135.181666][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'.
[  135.680713][T10415] netlink: 'syz.2.2002': attribute type 11 has an invalid length.
[  135.683997][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'.
[  135.830962][T10421] syzkaller0: entered promiscuous mode
[  135.834497][T10421] syzkaller0: entered allmulticast mode
[  136.821885][   T33] audit: type=1800 audit(1785125898.472:2): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2013" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3343 res=0 errno=0
[  136.909142][T10447] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  137.291160][T10492] syzkaller0: entered promiscuous mode
[  137.296387][T10492] syzkaller0: entered allmulticast mode
[  137.307707][T10492] TC_ACT_REPEAT abuse ?
[  137.428352][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'.
[  137.842434][T10521] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2048'.
[  138.187026][T10549] bond3: Unable to set up delay as MII monitoring is disabled
[  138.190407][T10549] bond3 (unregistering): Released all slaves
[  138.666510][T10584] syzkaller1: entered promiscuous mode
[  138.668791][T10584] syzkaller1: entered allmulticast mode
[  138.675075][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'.
[  139.956582][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'.
[  139.962797][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2107'.
[  140.010296][   T33] audit: type=1804 audit(1785125901.662:3): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2106" name="/newroot/689/cgroup.controllers" dev="tmpfs" ino=3502 res=1 errno=0
[  140.022312][   T33] audit: type=1800 audit(1785125901.672:4): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2106" name="cgroup.controllers" dev="tmpfs" ino=3502 res=0 errno=0
[  140.091484][T10688] xfrm0: entered allmulticast mode
[  140.248580][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'.
[  141.149479][T10726] netlink: 'syz.1.2125': attribute type 10 has an invalid length.
[  141.596314][T10763] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2139'.
[  141.603048][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'.
[  141.937650][T10787] netlink: 'syz.0.2151': attribute type 1 has an invalid length.
[  141.980905][T10787] 8021q: adding VLAN 0 to HW filter on device bond3
[  142.087346][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2154'.
[  142.295283][T10800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2157'.
[  142.356335][T10800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.372025][T10800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.387919][T10800] bond0 (unregistering): Released all slaves
[  142.493445][T10804] xt_HMARK: spi-set and port-set can't be combined
[  142.563027][T10810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2162'.
[  142.568712][T10810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2162'.
[  142.572023][T10810] tipc: Invalid UDP bearer configuration
[  142.572049][T10810] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  142.600623][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'.
[  142.604394][T10812] netlink: 'syz.2.2163': attribute type 7 has an invalid length.
[  142.614791][T10812] netlink: 'syz.2.2163': attribute type 7 has an invalid length.
[  142.759815][T10825] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  142.789497][T10825] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  142.813862][T10827] netlink: 'syz.1.2170': attribute type 61 has an invalid length.
[  142.820603][T10827] netlink: 'syz.1.2170': attribute type 62 has an invalid length.
[  143.434543][T10863] syzkaller0: entered promiscuous mode
[  143.436464][T10863] syzkaller0: entered allmulticast mode
[  143.678478][T10886] ipvlan2: entered promiscuous mode
[  143.686473][T10886] bridge0: port 3(ipvlan2) entered blocking state
[  143.689529][T10886] bridge0: port 3(ipvlan2) entered disabled state
[  143.692204][T10886] ipvlan2: entered allmulticast mode
[  143.697484][T10886] bridge0: entered allmulticast mode
[  143.702297][T10886] ipvlan2: left allmulticast mode
[  143.705082][T10886] bridge0: left allmulticast mode
[  143.907318][T10911] netlink: 'syz.1.2212': attribute type 21 has an invalid length.
[  144.266649][T10930] xt_CT: You must specify a L4 protocol and not use inversions on it
[  144.322582][T10935] sctp: [Deprecated]: syz.2.2221 (pid 10935) Use of int in max_burst socket option deprecated.
[  144.322582][T10935] Use struct sctp_assoc_value instead
[  144.466234][T10941] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.472512][T10941] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.574270][ T4996] Bluetooth: hci2: link tx timeout
[  144.577418][ T4996] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.864979][T10956] netlink: 'syz.0.2227': attribute type 1 has an invalid length.
[  144.891879][T10956] 8021q: adding VLAN 0 to HW filter on device bond4
[  145.114758][T10978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.119884][T10977] tipc: Disabling bearer <eth:syzkaller0>
[  145.184215][T10982] __nla_validate_parse: 10 callbacks suppressed
[  145.184230][T10982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'.
[  145.582868][T11012] netlink: 'syz.0.2243': attribute type 1 has an invalid length.
[  145.640664][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'.
[  145.675872][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'.
[  145.856002][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'.
[  146.049631][T11069] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2266'.
[  146.158597][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'.
[  146.371324][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2283'.
[  146.386080][T11095] netlink: 'syz.1.2283': attribute type 8 has an invalid length.
[  146.390754][T11095] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2283'.
[  146.593257][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  146.805901][T11106] batman_adv: batadv0: Adding interface: gretap1
[  146.808544][T11106] batman_adv: batadv0: The MTU of interface gretap1 is too small (2022) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 5408 would solve the problem.
[  146.819148][T11106] batman_adv: batadv0: Interface activated: gretap1
[  147.029235][T11122] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.032859][T11122] 8021q: adding VLAN 0 to HW filter on device team0
[  147.036265][T11122] dummy0: left promiscuous mode
[  147.039971][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.078715][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.085069][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.090550][T11122] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  147.101263][  T328] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.103622][  T328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.107641][  T328] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.109898][  T328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.288455][T11127] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2294'.
[  147.292267][T11127] netlink: 'syz.2.2294': attribute type 9 has an invalid length.
[  147.386929][T11133] netlink: 'syz.2.2297': attribute type 1 has an invalid length.
[  147.944300][T11189] openvswitch: netlink: IP tunnel dst address not specified
[  148.017922][T11198] netlink: 'syz.0.2330': attribute type 58 has an invalid length.
[  148.020507][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2330'.
[  148.106923][T11205] SET target dimension over the limit!
[  148.137572][T11207] netlink: 'syz.0.2333': attribute type 1 has an invalid length.
[  148.169837][T11207] 8021q: adding VLAN 0 to HW filter on device bond5
[  148.180226][T11207] netlink: 'syz.0.2333': attribute type 10 has an invalid length.
[  148.183323][T11207] dummy0: entered promiscuous mode
[  148.261210][T11212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.347655][T11212] syzkaller0: entered promiscuous mode
[  148.354624][T11212] syzkaller0: entered allmulticast mode
[  148.358444][T11212] tipc: Resetting bearer <eth:syzkaller0>
[  148.373994][T11211] tipc: Resetting bearer <eth:syzkaller0>
[  149.712216][T11211] tipc: Disabling bearer <eth:syzkaller0>
[  149.721260][ T5689] tipc: Node number set to 2614199584
[  149.921686][T11276] netlink: 'syz.0.2364': attribute type 1 has an invalid length.
[  150.391897][T11325] netlink: 'syz.1.2383': attribute type 10 has an invalid length.
[  150.729624][T11347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.767947][T11349] __nla_validate_parse: 4 callbacks suppressed
[  150.767961][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'.
[  150.834882][T11353] bond6: entered promiscuous mode
[  150.839229][T11353] 8021q: adding VLAN 0 to HW filter on device bond6
[  151.219041][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2408'.
[  151.246362][T11381] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.252144][T11381] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  151.339475][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'.
[  151.424489][T11392] smc: removing ib device syz0
[  151.472577][T11393] netlink: 'syz.2.2414': attribute type 3 has an invalid length.
[  151.473553][T11392] smbdirect: ib_dev[syz0] removed
[  151.586252][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2414'.
[  152.070247][T11406] syzkaller0: entered promiscuous mode
[  152.075534][T11406] syzkaller0: entered allmulticast mode
[  152.287011][T11412] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2423'.
[  152.451635][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'.
[  152.454783][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'.
[  152.575897][T11442] Bluetooth: MGMT ver 1.23
[  152.662256][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2440'.
[  152.720642][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'.
[  152.809617][T11456] raw_sendmsg: syz.2.2443 forgot to set AF_INET. Fix it!
[  152.885489][T11459] vlan4: entered promiscuous mode
[  152.907544][   T33] audit: type=1800 audit(1785125914.562:5): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2437" name="memory.events" dev="tmpfs" ino=4505 res=0 errno=0
[  153.150381][T11484] netlink: 393 bytes leftover after parsing attributes in process `syz.2.2456'.
[  153.276467][ T5689] IPVS: starting estimator thread 0...
[  153.363769][T11495] IPVS: using max 84 ests per chain, 201600 per kthread
[  153.859940][T11541] syzkaller1: entered promiscuous mode
[  153.875277][T11541] syzkaller1: entered allmulticast mode
[  154.838378][T11618] netlink: 'syz.1.2515': attribute type 1 has an invalid length.
[  155.840517][T11671] sch_tbf: burst 0 is lower than device lo mtu (1294) !
[  156.026513][T11690] __nla_validate_parse: 3 callbacks suppressed
[  156.026521][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'.
[  156.035180][T11690] xt_TCPMSS: Only works on TCP SYN packets
[  156.180600][T11690] bridge_slave_1: left promiscuous mode
[  156.183444][T11690] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.188107][T11690] bridge_slave_0: left allmulticast mode
[  156.189987][T11690] bridge_slave_0: left promiscuous mode
[  156.191892][T11690] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.342046][T11708] block nbd0: not configured, cannot reconfigure
[  157.270703][T11796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2594'.
[  157.341230][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'.
[  157.456025][T11821] netlink: 748 bytes leftover after parsing attributes in process `syz.2.2605'.
[  157.510577][T11829] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002
[  157.547091][T11835] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2613'.
[  157.767999][T11854] : renamed from bond_slave_0 (while UP)
[  158.156099][T11891] C: renamed from veth1_to_team (while UP)
[  158.199588][T11891] netlink: 'syz.0.2639': attribute type 8 has an invalid length.
[  158.202065][T11891] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  159.028358][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'.
[  159.042198][T11941] vlan4: entered promiscuous mode
[  159.046164][T11941] bond0: entered promiscuous mode
[  159.048431][T11941] : entered promiscuous mode
[  159.050599][T11941] bond_slave_1: entered promiscuous mode
[  159.411704][T11977] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  159.469273][T11985] netlink: 712 bytes leftover after parsing attributes in process `syz.2.2682'.
[  159.473889][T11985] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.2682'.
[  159.477592][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2682'.
[  159.759303][T12013] IPv6: addrconf: prefix option has invalid lifetime
[  160.038222][T12046] netlink: 'syz.2.2709': attribute type 29 has an invalid length.
[  160.041573][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'.
[  160.454087][T12078] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  160.835100][T12111] ip6erspan0: entered allmulticast mode
[  161.092788][T12127] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[  161.258229][T12138] __nla_validate_parse: 2 callbacks suppressed
[  161.258243][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'.
[  161.265025][T12138] tc_dump_action: action bad kind
[  161.444786][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'.
[  161.499101][T12152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.587055][T12158] netlink: 'syz.0.2758': attribute type 1 has an invalid length.
[  161.813855][T12185] 8021q: adding VLAN 0 to HW filter on device team0
[  161.950256][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'.
[  161.975654][T12192] dvmrp0: entered allmulticast mode
[  162.067581][ T5666] dvmrp0: left allmulticast mode
[  162.180929][T12208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.245868][T12212] netlink: 'syz.1.2782': attribute type 2 has an invalid length.
[  162.251480][T12214] trusted_key: syz.0.2783 sent an empty control message without MSG_MORE.
[  162.290700][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'.
[  162.495422][T12227] syzkaller0: entered promiscuous mode
[  162.497455][T12227] syzkaller0: entered allmulticast mode
[  162.500860][T12227] 0: reclassify loop, rule prio 0, protocol 800
[  162.767150][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'.
[  162.993822][T12271] netlink: 'syz.2.2807': attribute type 41 has an invalid length.
[  163.597772][T12331] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001
[  164.012260][T12364] tap0: tun_chr_ioctl cmd 1074025677
[  164.017443][T12364] tap0: linktype set to 774
[  164.331723][T12393] macvlan0: entered promiscuous mode
[  164.334656][T12393] macvlan0: entered allmulticast mode
[  164.339041][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'.
[  164.595594][T12393] macvlan0 (unregistering): left promiscuous mode
[  164.597683][T12393] macvlan0 (unregistering): left allmulticast mode
[  164.775348][T12402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2843'.
[  164.784214][T12402] nbd: must specify at least one socket
[  164.810413][T12403] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2843'.
[  164.814859][T12402] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2843'.
[  164.956492][T12409] veth5: entered allmulticast mode
[  164.974493][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2846'.
[  164.981406][T12411] team0: Port device team_slave_0 removed
[  165.022034][T12411] syzkaller1: entered promiscuous mode
[  165.024526][T12411] syzkaller1: entered allmulticast mode
[  165.222427][T12426] geneve0: entered promiscuous mode
[  165.236232][T12426] geneve0: left promiscuous mode
[  165.554612][T12440] x_tables: unsorted entry at hook 1
[  165.562825][T12439] netlink: 'syz.0.2854': attribute type 1 has an invalid length.
[  165.625902][T12439] 8021q: adding VLAN 0 to HW filter on device bond7
[  165.639333][T12451] netlink: 'syz.2.2855': attribute type 1 has an invalid length.
[  165.669033][T12451] 8021q: adding VLAN 0 to HW filter on device bond4
[  165.690865][T12451] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  165.704147][T12439] bond7: (slave veth0_to_bond): making interface the new active one
[  165.707527][T12439] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  165.718477][T12451] macvlan3: entered promiscuous mode
[  165.720580][T12451] macvlan3: entered allmulticast mode
[  165.723591][T12451] bond4: entered promiscuous mode
[  165.725698][T12451] veth0_to_bond: entered promiscuous mode
[  165.731420][T12451] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  165.735258][T12451] bond4: left promiscuous mode
[  165.737237][T12451] veth0_to_bond: left promiscuous mode
[  165.752881][T12454] syzkaller0: entered promiscuous mode
[  165.756808][T12454] syzkaller0: entered allmulticast mode
[  165.771020][T12454] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.784710][T12454] tipc: Resetting bearer <eth:syzkaller0>
[  165.804730][T12453] tipc: Resetting bearer <eth:syzkaller0>
[  165.835381][T12453] tipc: Disabling bearer <eth:syzkaller0>
[  165.956257][T12469] geneve0: entered promiscuous mode
[  165.961877][T12469] geneve0: left promiscuous mode
[  166.128615][T12477] netlink: 'syz.1.2865': attribute type 1 has an invalid length.
[  166.152100][T12477] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.154773][T12475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.163495][T12477] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  166.229071][T12477] macvlan3: entered promiscuous mode
[  166.230860][T12477] macvlan3: entered allmulticast mode
[  166.232890][T12477] bond0: entered promiscuous mode
[  166.234929][T12477] veth0_to_bond: entered promiscuous mode
[  166.237295][T12477] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  166.239832][T12477] bond0: left promiscuous mode
[  166.241444][T12477] veth0_to_bond: left promiscuous mode
[  166.362795][T12487] bond2: entered allmulticast mode
[  166.433509][T12493] sctp: [Deprecated]: syz.1.2867 (pid 12493) Use of int in max_burst socket option.
[  166.433509][T12493] Use struct sctp_assoc_value instead
[  166.538373][T12494] __nla_validate_parse: 4 callbacks suppressed
[  166.538383][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'.
[  166.636751][T12505] batadv0: entered promiscuous mode
[  166.639571][T12505] macvtap1: entered promiscuous mode
[  166.646279][T12505] macvtap1: entered allmulticast mode
[  166.649333][T12505] batadv0: entered allmulticast mode
[  166.651588][T12505] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  166.657851][T12505] batadv0: left allmulticast mode
[  166.659796][T12505] batadv0: left promiscuous mode
[  166.725176][T12511] block nbd0: server does not support multiple connections per device.
[  166.729864][T12511] block nbd0: shutting down sockets
[  166.745948][T12511] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  166.784775][T12521] netlink: 'syz.0.2874': attribute type 1 has an invalid length.
[  166.787207][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2875'.
[  166.820354][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2875'.
[  166.842243][T12520] macvlan3: entered promiscuous mode
[  166.844281][T12520] macvlan3: entered allmulticast mode
[  166.846654][T12520] bond5: (slave macvlan3): Opening slave failed
[  166.857047][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'.
[  166.895268][T12533] syzkaller0: entered promiscuous mode
[  166.896984][T12533] syzkaller0: entered allmulticast mode
[  166.907760][T12533] batman_adv: batadv0: Adding interface: gretap2
[  166.909665][T12533] batman_adv: batadv0: Interface activated: gretap2
[  166.941219][T12535] syzkaller0: entered promiscuous mode
[  166.946428][T12535] syzkaller0: entered allmulticast mode
[  167.077549][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2880'.
[  167.112831][T12541] 8021q: adding VLAN 0 to HW filter on device bond3
[  167.133794][T12541] macvlan1: entered promiscuous mode
[  167.135969][T12541] macvlan1: entered allmulticast mode
[  167.138724][T12541] bond3: entered promiscuous mode
[  167.141002][T12541] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  167.150399][T12541] bond3: left promiscuous mode
[  167.267898][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2883'.
[  167.278751][T12554] netlink: 'syz.1.2882': attribute type 9 has an invalid length.
[  167.283665][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2882'.
[  167.306917][T12554] gretap0: entered promiscuous mode
[  167.308723][T12554] macvlan1: entered promiscuous mode
[  167.311958][T12554] macvlan1: entered allmulticast mode
[  167.314475][T12554] gretap0: entered allmulticast mode
[  167.341551][T12552] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  167.348489][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'.
[  167.364196][T12562] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2884'.
[  167.881129][T12595] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2887'.
[  167.959013][T12599] 8021q: adding VLAN 0 to HW filter on device bond6
[  167.996103][T12604] netlink: 'syz.2.2890': attribute type 1 has an invalid length.
[  168.019376][T12604] veth1: entered allmulticast mode
[  168.024060][T12604] bond7: (slave veth1): Enslaving as an active interface with a down link
[  168.034043][T12604] bond4: (slave veth0_to_bond): Releasing backup interface
[  168.039139][T12604] bond7: (slave veth0_to_bond): making interface the new active one
[  168.042071][T12604] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  168.050907][T12604] macvlan3: entered promiscuous mode
[  168.052635][T12604] macvlan3: entered allmulticast mode
[  168.055214][T12604] bond7: entered promiscuous mode
[  168.056907][T12604] veth0_to_bond: entered promiscuous mode
[  168.059278][T12604] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  168.062276][T12604] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  168.069186][T12604] bond7: left promiscuous mode
[  168.071212][T12604] veth0_to_bond: left promiscuous mode
[  168.416740][T12614] batadv0: entered promiscuous mode
[  168.419165][T12614] macvtap1: entered promiscuous mode
[  168.421573][T12614] macvtap1: entered allmulticast mode
[  168.424406][T12614] batadv0: entered allmulticast mode
[  168.428036][T12614] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  168.433682][T12614] batadv0: left allmulticast mode
[  168.437166][T12614] batadv0: left promiscuous mode
[  168.611734][T12618] veth5: entered allmulticast mode
[  168.651690][T12619] bond7: (slave veth0_to_bond): Releasing active interface
[  168.816562][T12627] netlink: 'syz.1.2900': attribute type 12 has an invalid length.
[  168.830126][T12629] gretap0: entered promiscuous mode
[  168.870243][T12632] IPv6: NLM_F_CREATE should be specified when creating new route
[  168.872740][T12632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.875007][T12632] IPv6: NLM_F_CREATE should be set when creating new route
[  168.877335][T12632] IPv6: NLM_F_CREATE should be set when creating new route
[  168.879893][T12632] IPv6: NLM_F_CREATE should be set when creating new route
[  168.922756][T12634] bridge_slave_0: left allmulticast mode
[  168.925147][T12634] bridge_slave_0: left promiscuous mode
[  168.928015][T12634] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.931900][T12634] bridge_slave_1: left allmulticast mode
[  168.934131][T12634] bridge_slave_1: left promiscuous mode
[  168.936269][T12634] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.947175][T12634] bond0: (slave veth0_to_bond): Releasing backup interface
[  168.957417][T12634] team0: Port device team_slave_1 removed
[  168.959491][T12634] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.962521][T12634] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.965683][T12634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  169.085069][T12637] macvtap1: entered promiscuous mode
[  169.086823][T12637] batadv0: entered promiscuous mode
[  169.088763][T12637] macvtap1: entered allmulticast mode
[  169.090613][T12637] batadv0: entered allmulticast mode
[  169.097690][T12637] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  169.103879][T12637] batadv0: left allmulticast mode
[  169.105481][T12637] batadv0: left promiscuous mode
[  169.210742][T12642] netlink: 'syz.1.2906': attribute type 1 has an invalid length.
[  169.246963][T12642] macvtap1: entered allmulticast mode
[  169.272862][T12642] bond4: (slave bridge3): making interface the new active one
[  169.276418][T12642] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  169.331600][T12650] netlink: 'syz.2.2909': attribute type 1 has an invalid length.
[  169.348339][T12650] 8021q: adding VLAN 0 to HW filter on device bond8
[  169.376768][T12650] veth5: entered allmulticast mode
[  169.382744][T12650] bond8: (slave veth5): Enslaving as an active interface with a down link
[  169.391258][T12650] bond7: (slave veth0_to_bond): Releasing active interface
[  169.400408][T12650] bond8: (slave veth0_to_bond): making interface the new active one
[  169.406098][T12650] veth0_to_bond: entered promiscuous mode
[  169.408555][T12650] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  169.425123][T12653] bond5: entered allmulticast mode
[  169.432954][T12650] macvlan4: entered promiscuous mode
[  169.438175][T12650] macvlan4: entered allmulticast mode
[  169.440384][T12650] bond8: entered promiscuous mode
[  169.442825][T12650] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  169.446493][T12650] bond8: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  169.451751][T12650] bond8: left promiscuous mode
[  169.490218][T12653] hsr_slave_1 (unregistering): left promiscuous mode
[  169.612654][T12669] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  169.636539][T12669] 8021q: adding VLAN 0 to HW filter on device bond6
[  169.654352][T12669] veth5: entered allmulticast mode
[  169.659539][T12669] bond6: (slave veth5): Enslaving as an active interface with a down link
[  169.665458][T12669] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  169.712766][T12679] 8021q: adding VLAN 0 to HW filter on device bond7
[  169.735713][T12679] veth7: entered allmulticast mode
[  169.741015][T12679] bond7: (slave veth7): Enslaving as an active interface with a down link
[  169.772751][T12679] bond6: (slave veth0_to_bond): Releasing active interface
[  169.781486][T12679] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  169.827693][T12679] macvlan3: entered promiscuous mode
[  169.829315][T12679] macvlan3: entered allmulticast mode
[  169.833051][T12679] bond7: entered promiscuous mode
[  169.838503][T12679] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  169.841237][T12679] bond7: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  169.849564][T12679] bond7: left promiscuous mode
[  170.895605][T12700] bridge0: port 3(macvlan0) entered blocking state
[  170.899168][T12700] bridge0: port 3(macvlan0) entered disabled state
[  170.901992][T12700] macvlan0: entered allmulticast mode
[  170.904976][T12700] gretap0: entered allmulticast mode
[  170.911888][T12700] macvlan0: entered promiscuous mode
[  170.916879][T12700] bridge0: port 3(macvlan0) entered blocking state
[  170.920331][T12700] bridge0: port 3(macvlan0) entered forwarding state
[  171.027468][T12705] validate_nla: 2 callbacks suppressed
[  171.027480][T12705] netlink: 'syz.0.2923': attribute type 1 has an invalid length.
[  171.038094][T12708] set match dimension is over the limit!
[  171.046564][T12705] 8021q: adding VLAN 0 to HW filter on device bond9
[  171.055428][T12709] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  171.075727][T12705] bond9: (slave veth0_to_bond): making interface the new active one
[  171.079767][T12705] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  171.151920][T12708] block nbd0: server does not support multiple connections per device.
[  171.157523][T12708] block nbd0: shutting down sockets
[  171.196105][T12715] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  171.227456][T12719] bridge0: port 1(macvlan0) entered blocking state
[  171.230181][T12719] bridge0: port 1(macvlan0) entered disabled state
[  171.232800][T12719] macvlan0: entered allmulticast mode
[  171.236982][T12719] macvlan0: entered promiscuous mode
[  171.290370][T12726] geneve0: entered promiscuous mode
[  171.296105][T12726] geneve0: left promiscuous mode
[  171.384338][T12747] netlink: 'syz.1.2935': attribute type 1 has an invalid length.
[  171.385007][T12743] block nbd0: server does not support multiple connections per device.
[  171.391039][T12743] block nbd0: shutting down sockets
[  171.402450][T12747] 8021q: adding VLAN 0 to HW filter on device bond8
[  171.417207][T12743] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  171.434987][T12747] bond7: (slave veth0_to_bond): Releasing active interface
[  171.435901][T12751] netlink: 'syz.0.2936': attribute type 1 has an invalid length.
[  171.552652][T12765] __nla_validate_parse: 23 callbacks suppressed
[  171.552665][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2940'.
[  171.610861][T12762] netlink: 'syz.0.2939': attribute type 1 has an invalid length.
[  171.610874][T12763] netlink: 'syz.0.2939': attribute type 1 has an invalid length.
[  172.632211][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2945'.
[  172.646587][T12788] 8021q: adding VLAN 0 to HW filter on device bond10
[  172.654978][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'.
[  172.693369][T12793] netlink: 'syz.2.2946': attribute type 1 has an invalid length.
[  172.719079][T12794] bond11: (slave bridge0): Enslaving as a backup interface with an up link
[  172.734283][T12793] bond11: (slave bridge2): Enslaving as a backup interface with a down link
[  172.743970][T12793] bond11: (slave bridge3): Enslaving as a backup interface with a down link
[  172.752215][T12793] bond11: (slave bridge4): Enslaving as a backup interface with a down link
[  172.762851][T12793] bond11: (slave bridge5): Enslaving as a backup interface with a down link
[  172.771588][T12793] bond11: (slave bridge6): Enslaving as a backup interface with a down link
[  172.780125][T12793] bond11: (slave bridge7): Enslaving as a backup interface with a down link
[  172.789818][T12793] bond11: (slave bridge8): Enslaving as a backup interface with a down link
[  172.798624][T12793] bond11: (slave bridge9): Enslaving as a backup interface with a down link
[  172.808182][T12793] bond11: (slave bridge10): Enslaving as a backup interface with a down link
[  172.818216][T12793] bond11: (slave bridge11): Enslaving as a backup interface with a down link
[  172.835357][T12793] bond11: (slave bridge12): Enslaving as a backup interface with a down link
[  172.854802][T12799] openvswitch: netlink: Duplicate or invalid key (type 0).
[  172.857156][T12799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.879999][T12801] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  172.882401][T12801] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  172.942747][T12808] netlink: 'syz.2.2950': attribute type 1 has an invalid length.
[  172.967035][T12810] netlink: 'syz.0.2947': attribute type 9 has an invalid length.
[  172.970395][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'.
[  172.977537][T12808] veth7: entered allmulticast mode
[  172.982276][T12808] bond12: (slave veth7): Enslaving as an active interface with a down link
[  172.991590][T12808] bond8: (slave veth0_to_bond): Releasing active interface
[  172.994818][T12808] veth0_to_bond: left promiscuous mode
[  172.999314][T12808] bond12: (slave veth0_to_bond): making interface the new active one
[  173.002260][T12808] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  173.015616][T12808] macvlan5: entered promiscuous mode
[  173.017403][T12808] macvlan5: entered allmulticast mode
[  173.019616][T12808] bond12: entered promiscuous mode
[  173.021516][T12808] veth0_to_bond: entered promiscuous mode
[  173.023906][T12808] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  173.027889][T12808] bond12: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of veth7
[  173.031600][T12808] bond12: left promiscuous mode
[  173.033423][T12808] veth0_to_bond: left promiscuous mode
[  173.109551][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[  173.115554][T12814] geneve0: entered promiscuous mode
[  173.191799][T12816] lo speed is unknown, defaulting to 1000
[  173.197386][T12816] lo speed is unknown, defaulting to 1000
[  173.201160][T12816] lo speed is unknown, defaulting to 1000
[  173.242406][T12819] lo speed is unknown, defaulting to 1000
[  173.245340][T12819] lo speed is unknown, defaulting to 1000
[  173.248743][T12819] lo speed is unknown, defaulting to 1000
[  173.251471][T12819] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  173.257168][T12819] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  173.263741][T12819] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  173.272445][T12819] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  173.286797][T12819] lo speed is unknown, defaulting to 1000
[  173.290872][T12819] lo speed is unknown, defaulting to 1000
[  173.294440][T12819] lo speed is unknown, defaulting to 1000
[  173.372953][T12816] infiniband sz1: set active
[  173.375058][   T24] lo speed is unknown, defaulting to 1000
[  173.379112][T12816] infiniband sz1: added lo
[  173.386728][T12816] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  173.391428][T12816] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  173.396787][T12816] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  173.417776][T12816] RDS/IB: sz1: added
[  173.419224][T12816] smc: adding ib device sz1 with port count 1
[  173.421196][T12816] smc:    ib device sz1 port 1 has no pnetid
[  173.423326][   T24] lo speed is unknown, defaulting to 1000
[  173.426365][T12816] lo speed is unknown, defaulting to 1000
[  173.511759][T12816] lo speed is unknown, defaulting to 1000
[  173.596795][T12816] lo speed is unknown, defaulting to 1000
[  175.569118][T12777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.610942][T12839] netlink: 'syz.2.2955': attribute type 1 has an invalid length.
[  175.649537][T12839] bond13: (slave bridge13): Enslaving as a backup interface with an up link
[  175.661156][T12842] syzkaller1: entered promiscuous mode
[  175.664853][T12842] syzkaller1: entered allmulticast mode
[  175.672118][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'.
[  175.734446][T12845] block nbd0: server does not support multiple connections per device.
[  175.736616][T12850] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  175.745794][T12845] block nbd0: shutting down sockets
[  175.792106][T12845] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2956'.
[  175.867571][T12858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2959'.
[  175.884260][T12858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.262835][T12883] validate_nla: 1 callbacks suppressed
[  176.262849][T12883] netlink: 'syz.0.2966': attribute type 9 has an invalid length.
[  176.270804][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'.
[  176.279146][T12883] macvlan5: entered promiscuous mode
[  176.281446][T12883] macvlan5: entered allmulticast mode
[  176.309955][T12885] netlink: 'syz.1.2967': attribute type 1 has an invalid length.
[  176.329202][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2967'.
[  176.423997][T12889] netlink: 'syz.1.2969': attribute type 1 has an invalid length.
[  176.449772][T12889] 8021q: adding VLAN 0 to HW filter on device bond9
[  176.459402][T12889] digital: digital_start_poll: Unknown protocol
[  176.485886][T12889] veth9: entered allmulticast mode
[  176.495573][T12889] bond9: (slave veth9): Enslaving as an active interface with a down link
[  176.522971][T12889] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  176.542517][T12889] macvlan4: entered promiscuous mode
[  176.548546][T12889] macvlan4: entered allmulticast mode
[  176.557093][T12889] bond9: entered promiscuous mode
[  176.561525][T12889] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  176.568262][T12889] bond9: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  176.579030][T12889] bond9: left promiscuous mode
[  176.757650][T12910] netlink: 'syz.2.2972': attribute type 1 has an invalid length.
[  176.779261][T12910] bond14: entered promiscuous mode
[  176.782088][T12910] 8021q: adding VLAN 0 to HW filter on device bond14
[  176.787433][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'.
[  176.801715][T12910] bond14 (unregistering): Released all slaves
[  176.885660][T12917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2973'.
[  176.909698][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2973'.
[  177.094238][T12928] netlink: 'syz.1.2976': attribute type 1 has an invalid length.
[  177.122589][T12928] 8021q: adding VLAN 0 to HW filter on device bond10
[  177.134475][T12928] bond9: (slave veth0_to_bond): Releasing active interface
[  177.142536][T12928] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  177.149465][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'.
[  177.158865][T12931] bond11: entered allmulticast mode
[  177.174042][T12931] macvlan7: entered promiscuous mode
[  177.175842][T12931] macvlan7: entered allmulticast mode
[  177.179559][T12931] bond11: entered promiscuous mode
[  177.184981][T12931] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  177.189752][T12931] bond11: left promiscuous mode
[  177.227459][T12936] netlink: 'syz.1.2979': attribute type 11 has an invalid length.
[  177.230131][T12937] netlink: 'syz.1.2979': attribute type 11 has an invalid length.
[  177.247679][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2979'.
[  177.252258][T12936] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2979'.
[  177.256177][T12937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2979'.
[  177.297866][T12941] netlink: 'syz.1.2981': attribute type 1 has an invalid length.
[  177.324712][T12941] 8021q: adding VLAN 0 to HW filter on device bond11
[  177.340330][T12941] veth13: entered allmulticast mode
[  177.346448][T12941] bond11: (slave veth13): Enslaving as an active interface with a down link
[  177.359848][T12944] veth15: entered allmulticast mode
[  177.364266][T12944] bond11: (slave veth15): Enslaving as an active interface with a down link
[  177.377531][T12944] bond10: (slave veth0_to_bond): Releasing active interface
[  177.389048][T12944] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  177.407051][T12944] macvlan4: entered promiscuous mode
[  177.409396][T12944] macvlan4: entered allmulticast mode
[  177.412171][T12944] bond11: entered promiscuous mode
[  177.415413][T12944] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  177.418421][T12944] bond11: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  177.424208][T12944] bond11: left promiscuous mode
[  177.436579][T12941] macvlan4: entered promiscuous mode
[  177.438386][T12941] macvlan4: entered allmulticast mode
[  177.440428][T12941] bond11: entered promiscuous mode
[  177.442478][T12941] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  177.445528][T12941] bond11: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  177.450727][T12941] bond11: left promiscuous mode
[  177.541405][T12952] macvtap2: entered promiscuous mode
[  177.543264][T12952] batadv0: entered promiscuous mode
[  177.546706][T12952] macvtap2: entered allmulticast mode
[  177.548504][T12952] batadv0: entered allmulticast mode
[  177.550859][T12952] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  177.557940][T12952] batadv0: left allmulticast mode
[  177.559643][T12952] batadv0: left promiscuous mode
[  177.577482][T12953] netlink: 'syz.0.2986': attribute type 1 has an invalid length.
[  177.581644][T12953] netlink: 'syz.0.2986': attribute type 2 has an invalid length.
[  177.585340][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'.
[  177.642220][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2987'.
[  177.652357][T12957] bond9: (slave veth0_to_bond): Releasing active interface
[  177.695422][T12959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2988'.
[  177.794593][T12965] veth5: entered allmulticast mode
[  177.804214][T12965] bond12: (slave veth5): Enslaving as an active interface with a down link
[  177.814315][T12965] bond12: (slave veth0_to_bond): making interface the new active one
[  177.818014][T12965] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  177.832304][T12965] macvlan7: entered promiscuous mode
[  177.836357][T12965] macvlan7: entered allmulticast mode
[  177.841960][T12965] bond12: entered promiscuous mode
[  177.843924][T12965] veth0_to_bond: entered promiscuous mode
[  177.846221][T12965] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  177.850069][T12965] bond12: (slave macvlan7): the slave hw address is in use by the bond; giving it the hw address of veth5
[  177.854243][T12965] bond12: left promiscuous mode
[  177.855909][T12965] veth0_to_bond: left promiscuous mode
[  177.879858][T12971] veth9: entered allmulticast mode
[  177.934170][T12975] bond12: (slave veth0_to_bond): Releasing active interface
[  178.074227][T12995] bond13: entered allmulticast mode
[  178.176457][T13004] 8021q: adding VLAN 0 to HW filter on device bond12
[  178.196800][T13009] 8021q: adding VLAN 0 to HW filter on device bond14
[  178.200448][T13004] bond11: (slave veth0_to_bond): Releasing active interface
[  178.205971][T13004] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  178.219083][T13012] syzkaller0: entered promiscuous mode
[  178.222850][T13012] syzkaller0: entered allmulticast mode
[  178.230581][T13009] macvlan7: entered promiscuous mode
[  178.232822][T13009] macvlan7: entered allmulticast mode
[  178.235980][T13009] bond14: entered promiscuous mode
[  178.238200][T13009] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  178.241977][T13009] bond14: left promiscuous mode
[  178.305661][T13017] macsec1: entered promiscuous mode
[  178.330819][T13020] bridge0: port 3(macvlan0) entered disabled state
[  178.409025][T13028] 8021q: adding VLAN 0 to HW filter on device bond15
[  178.427377][T13028] veth7: entered allmulticast mode
[  178.430720][T13028] bond15: (slave veth7): Enslaving as an active interface with a down link
[  178.438191][T13028] bond12: (slave veth0_to_bond): Releasing active interface
[  178.445358][T13028] bond15: (slave veth0_to_bond): making interface the new active one
[  178.448365][T13028] veth0_to_bond: entered promiscuous mode
[  178.450420][T13028] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  178.540053][T13040] bond13: option mode: invalid value (13)
[  178.545972][T13040] bond13 (unregistering): Released all slaves
[  178.630264][T13040] dummy0: entered promiscuous mode
[  178.680597][T13053] team0: Port device team_slave_0 removed
[  178.718716][T13056] bond13: (slave bridge4): Enslaving as an active interface with an up link
[  178.740658][T13056] macvlan4: entered promiscuous mode
[  178.750159][T13056] macvlan4: entered allmulticast mode
[  178.752542][T13056] bond13: (slave macvlan4): Error -98 calling set_mac_address
[  178.759262][T13058] syzkaller1: entered promiscuous mode
[  178.761080][T13058] syzkaller1: entered allmulticast mode
[  178.839242][T13066] 8021q: adding VLAN 0 to HW filter on device bond14
[  178.856865][T13069] bond14: entered allmulticast mode
[  178.987868][T13077] veth17: entered allmulticast mode
[  178.992259][T13077] bond15: (slave veth17): Enslaving as an active interface with a down link
[  179.015663][T13077] bond12: (slave veth0_to_bond): Releasing active interface
[  179.025437][T13077] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  179.064595][T13083] 8021q: adding VLAN 0 to HW filter on device bond16
[  179.084024][T13082] bond15: (slave veth0_to_bond): Releasing active interface
[  179.087148][T13082] veth0_to_bond: left promiscuous mode
[  179.098440][T13082] bond16: (slave veth0_to_bond): making interface the new active one
[  179.102788][T13082] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  179.126315][T13082] macvlan7: entered promiscuous mode
[  179.128644][T13082] macvlan7: entered allmulticast mode
[  179.131479][T13082] bond16: entered promiscuous mode
[  179.135074][T13082] veth0_to_bond: entered promiscuous mode
[  179.138363][T13082] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  179.141873][T13082] bond16: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  179.151871][T13082] bond16: left promiscuous mode
[  179.155504][T13082] veth0_to_bond: left promiscuous mode
[  179.186073][ T5666] bond16: (slave veth0_to_bond): link status definitely down, disabling slave
[  179.192407][ T5666] bond16: now running without any active interface!
[  179.283678][T13095] 8021q: adding VLAN 0 to HW filter on device bond15
[  179.298974][T13095] bond15: (slave veth0_to_bond): making interface the new active one
[  179.305459][T13095] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  179.317897][T13093] macvlan4: entered promiscuous mode
[  179.320133][T13093] macvlan4: entered allmulticast mode
[  179.323538][T13093] bond16: (slave macvlan4): Opening slave failed
[  179.337880][T13095] bond15: entered promiscuous mode
[  179.341363][T13095] veth0_to_bond: entered promiscuous mode
[  179.344870][T13095] bond15: entered allmulticast mode
[  179.346578][T13095] veth0_to_bond: entered allmulticast mode
[  179.515757][T13112] batadv0: entered promiscuous mode
[  179.519691][T13112] macvtap1: entered promiscuous mode
[  179.524131][T13112] macvtap1: entered allmulticast mode
[  179.528395][T13112] batadv0: entered allmulticast mode
[  179.537862][T13112] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  179.544593][T13112] batadv0: left allmulticast mode
[  179.551761][T13112] batadv0: left promiscuous mode
[  179.599648][T13120] macvlan4: entered promiscuous mode
[  179.601317][T13120] macvlan4: entered allmulticast mode
[  179.603889][T13120] bond17: entered promiscuous mode
[  179.605915][T13120] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  179.614752][T13120] bond17: left promiscuous mode
[  179.645635][T13113] lo speed is unknown, defaulting to 1000
[  179.756939][T13127] 8021q: adding VLAN 0 to HW filter on device bond17
[  179.769468][T13127] syzkaller0: entered promiscuous mode
[  179.771737][T13127] syzkaller0: entered allmulticast mode
[  179.794666][T13127] veth9: entered allmulticast mode
[  179.801216][T13127] bond17: (slave veth9): Enslaving as an active interface with a down link
[  179.819145][T13127] bond16: (slave veth0_to_bond): Releasing active interface
[  179.829312][T13127] bond17: (slave veth0_to_bond): making interface the new active one
[  179.832508][T13127] veth0_to_bond: entered promiscuous mode
[  179.834936][T13127] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  179.842022][T13130] openvswitch: netlink: Flow actions attr not present in new flow.
[  179.870110][T13113] lo speed is unknown, defaulting to 1000
[  180.132807][T13154] 8021q: adding VLAN 0 to HW filter on device bond16
[  180.231342][T13162] 8021q: adding VLAN 0 to HW filter on device bond18
[  180.258321][T13162] veth11: entered allmulticast mode
[  180.269035][T13162] bond18: (slave veth11): Enslaving as an active interface with a down link
[  180.306699][T13160] bond19 (unregistering): Released all slaves
[  180.329141][T13162] bond17: (slave veth0_to_bond): Releasing active interface
[  180.332245][T13162] veth0_to_bond: left promiscuous mode
[  180.340066][T13162] bond18: (slave veth0_to_bond): making interface the new active one
[  180.345532][T13162] veth0_to_bond: entered promiscuous mode
[  180.348849][T13162] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  180.376234][T13178] 8021q: adding VLAN 0 to HW filter on device bond18
[  180.387861][T13170] macvlan7: entered promiscuous mode
[  180.390049][T13170] macvlan7: entered allmulticast mode
[  180.392591][T13170] bond18: entered promiscuous mode
[  180.395911][T13170] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  180.399046][T13170] bond18: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  180.406850][T13170] bond18: left promiscuous mode
[  180.430972][T13180] bond15: (slave veth0_to_bond): Releasing active interface
[  180.435551][T13180] veth0_to_bond: left promiscuous mode
[  180.437772][T13180] veth0_to_bond: left allmulticast mode
[  180.500819][T13174] bond15: (slave veth0_to_bond): Releasing active interface
[  180.510111][T13174] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  180.521802][T13174] bond18: entered promiscuous mode
[  180.525216][T13174] bond18: entered allmulticast mode
[  180.643897][T13185] 8021q: adding VLAN 0 to HW filter on device bond17
[  180.764221][T13199] block nbd0: server does not support multiple connections per device.
[  180.767339][T13199] block nbd0: shutting down sockets
[  180.828698][T13209] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  180.947325][T13219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.954610][T13219] macvlan8: entered promiscuous mode
[  180.956404][T13219] macvlan8: entered allmulticast mode
[  180.959323][T13219] bond19: entered promiscuous mode
[  180.961651][T13219] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  180.967529][T13219] bond19: left promiscuous mode
[  181.013685][T13224] 8021q: adding VLAN 0 to HW filter on device bond18
[  181.022424][T13224] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  181.035485][T13224] macvlan6: entered promiscuous mode
[  181.037996][T13224] macvlan6: entered allmulticast mode
[  181.041732][T13224] bond18: entered promiscuous mode
[  181.044018][T13224] veth0_to_bond: entered promiscuous mode
[  181.047044][T13224] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  181.052168][T13224] bond18: left promiscuous mode
[  181.054826][T13224] veth0_to_bond: left promiscuous mode
[  181.073212][ T5620] Bluetooth: hci1: command 0x0406 tx timeout
[  181.394555][T13258] 8021q: adding VLAN 0 to HW filter on device bond21
[  181.411901][T13258] macvlan8: entered promiscuous mode
[  181.415121][T13258] macvlan8: entered allmulticast mode
[  181.418377][T13258] bond21: entered promiscuous mode
[  181.421111][T13258] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  181.428866][T13258] bond21: left promiscuous mode
[  181.685055][T13284] bond22: (slave bridge4): Enslaving as an active interface with an up link
[  181.772966][T13300] validate_nla: 26 callbacks suppressed
[  181.772980][T13300] netlink: 'syz.2.3088': attribute type 1 has an invalid length.
[  181.802847][T13300] 8021q: adding VLAN 0 to HW filter on device bond19
[  181.833706][T13300] veth11: entered allmulticast mode
[  181.859195][T13300] bond18: (slave veth0_to_bond): Releasing backup interface
[  181.875518][T13300] bond19: (slave veth0_to_bond): making interface the new active one
[  181.881268][T13300] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  181.927324][T13300] macvlan6: entered promiscuous mode
[  181.929588][T13300] macvlan6: entered allmulticast mode
[  181.934036][T13300] bond19: entered promiscuous mode
[  181.937576][T13300] veth0_to_bond: entered promiscuous mode
[  181.944018][T13300] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  181.949248][T13300] bond19: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  181.959305][T13300] bond19: left promiscuous mode
[  181.961550][T13300] veth0_to_bond: left promiscuous mode
[  181.963865][T13310] netlink: 'syz.1.3090': attribute type 9 has an invalid length.
[  181.963876][T13310] __nla_validate_parse: 38 callbacks suppressed
[  181.963881][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3090'.
[  181.990397][T13310] erspan0: entered promiscuous mode
[  182.000016][T13310] macvlan4: entered promiscuous mode
[  182.001898][T13310] macvlan4: entered allmulticast mode
[  182.004063][T13310] erspan0: entered allmulticast mode
[  182.017387][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'.
[  182.031219][T13315] macvlan8: entered allmulticast mode
[  182.179615][T13328] bond19: (slave veth0_to_bond): Releasing active interface
[  182.341321][T13337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.349987][ T5689] lo speed is unknown, defaulting to 1000
[  182.374697][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'.
[  182.543830][T13347] netlink: 'syz.2.3103': attribute type 1 has an invalid length.
[  182.574675][T13347] macvtap2: entered allmulticast mode
[  182.585583][T13347] macvtap3: entered allmulticast mode
[  182.598859][T13347] bond20: (slave bridge14): making interface the new active one
[  182.604012][T13347] bond20: (slave bridge14): Enslaving as an active interface with an up link
[  182.640956][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'.
[  182.665665][T13351] bond21: (slave bridge15): Enslaving as an active interface with an up link
[  182.678915][T13351] macvlan6: entered promiscuous mode
[  182.681324][T13351] macvlan6: entered allmulticast mode
[  182.684550][T13351] bond21: (slave macvlan6): Error -98 calling set_mac_address
[  182.828244][T13358] netlink: 'syz.2.3107': attribute type 1 has an invalid length.
[  182.865446][T13358] veth13: entered allmulticast mode
[  182.906763][T13362] bond22: (slave veth0_to_bond): making interface the new active one
[  182.910889][T13362] bond22: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  183.021461][T13369] batman_adv: batadv0: Adding interface: gretap2
[  183.024437][T13369] batman_adv: batadv0: The MTU of interface gretap2 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.035232][T13369] batman_adv: batadv0: Interface activated: gretap2
[  183.167523][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'.
[  183.191099][T13375] erspan0: entered promiscuous mode
[  183.274930][T13390] netlink: 'syz.0.3116': attribute type 1 has an invalid length.
[  183.297188][T13390] 8021q: adding VLAN 0 to HW filter on device bond23
[  183.316994][T13390] bond18: (slave veth0_to_bond): Releasing active interface
[  183.323687][T13390] veth0_to_bond: left promiscuous mode
[  183.332573][T13390] bond23: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  183.347261][T13393] macvlan0: entered promiscuous mode
[  183.352696][T13390] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  183.365222][T13390] macvlan10: entered promiscuous mode
[  183.367555][T13390] macvlan10: entered allmulticast mode
[  183.370361][T13390] bond23: entered promiscuous mode
[  183.372529][T13390] veth0_to_bond: entered promiscuous mode
[  183.376592][T13390] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  183.380083][T13390] bond23: left promiscuous mode
[  183.382115][T13390] veth0_to_bond: left promiscuous mode
[  183.400944][T13394] macvlan0: entered allmulticast mode
[  183.404376][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'.
[  183.410652][T13394] macvlan0 (unregistering): left promiscuous mode
[  183.413592][T13394] macvlan0 (unregistering): left allmulticast mode
[  183.519923][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'.
[  183.540670][T13400] syzkaller0: entered promiscuous mode
[  183.542778][T13400] syzkaller0: entered allmulticast mode
[  183.553026][T13402] bond24: (slave bridge5): Enslaving as an active interface with an up link
[  183.565604][T13402] syz_tun: entered allmulticast mode
[  183.699118][T13410] macvlan10: entered promiscuous mode
[  183.701329][T13410] macvlan10: entered allmulticast mode
[  183.708418][T13410] bond24: (slave macvlan10): Error -98 calling set_mac_address
[  183.746483][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'.
[  183.807214][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'.
[  183.961751][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'.
[  184.057824][T13433] team0: Port device team_slave_0 removed
[  184.065561][T13436] block nbd0: server does not support multiple connections per device.
[  184.069573][T13436] block nbd0: shutting down sockets
[  184.219561][T13401] syz_tun: left allmulticast mode
[  184.287639][T13460] netlink: 'syz.0.3130': attribute type 1 has an invalid length.
[  184.434609][T13473] x_tables: duplicate entry at hook 1
[  184.718468][T13491] batadv0: entered promiscuous mode
[  184.720872][T13491] macvtap4: entered promiscuous mode
[  184.723953][T13491] macvtap4: entered allmulticast mode
[  184.726214][T13491] batadv0: entered allmulticast mode
[  184.729317][T13491] 8021q: adding VLAN 0 to HW filter on device macvtap4
[  184.736188][T13491] batadv0: left allmulticast mode
[  184.738501][T13491] batadv0: left promiscuous mode
[  184.836683][T13436] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  184.839402][T13436] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  184.862077][T13436] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  184.865195][T13436] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  184.940128][T13436] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  184.944897][T13436] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  184.948256][T13436] CPU: 1 UID: 0 PID: 13436 Comm: syz.1.3126 Not tainted syzkaller #0 PREEMPT(full) 
[  184.951831][T13436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.955294][T13436] RIP: 0010:klist_remove+0x156/0x340
[  184.957031][T13436] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 cd 5b 6d f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ae 5b 6d f6 49 8b 44 24 58 48 89 44 24 08
[  184.963414][T13436] RSP: 0018:ffffc9000b0df820 EFLAGS: 00010202
[  184.965529][T13436] RAX: 000000000000000b RBX: ffff888115c61dc0 RCX: 0000000000000000
[  184.968335][T13436] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  184.971087][T13436] RBP: ffffc9000b0df920 R08: ffffffff903d5b63 R09: 1ffffffff207ab6c
[  184.973950][T13436] R10: dffffc0000000000 R11: fffffbfff207ab6d R12: 0000000000000000
[  184.976624][T13436] R13: 1ffff110221a5e0c R14: ffff888110d2f060 R15: dffffc0000000000
[  184.979406][T13436] FS:  00007fc6ec9486c0(0000) GS:ffff8882a8f54000(0000) knlGS:0000000000000000
[  184.982102][T13436] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.984083][T13436] CR2: 00007f65681aeb00 CR3: 000000010fa40000 CR4: 00000000000006f0
[  184.986639][T13436] Call Trace:
[  184.987665][T13436]  <TASK>
[  184.988625][T13436]  ? __pfx_klist_remove+0x10/0x10
[  184.990255][T13436]  ? kobject_move+0x5e2/0x720
[  184.991835][T13436]  ? __pfx_kobject_move+0x10/0x10
[  184.993369][T13436]  ? do_raw_spin_unlock+0x4d/0x210
[  184.995172][T13436]  ? get_device_parent+0x366/0x3a0
[  184.996980][T13436]  device_move+0x18e/0x720
[  184.998538][T13436]  hci_conn_del_sysfs+0xb8/0x1a0
[  185.000199][T13436]  hci_conn_del+0xc3d/0x1200
[  185.001767][T13436]  hci_conn_hash_flush+0x189/0x260
[  185.003537][T13436]  hci_dev_close_sync+0x7fc/0x10a0
[  185.005235][T13436]  ? __pfx___mutex_lock+0x10/0x10
[  185.006957][T13436]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  185.008806][T13436]  ? do_raw_spin_lock+0x12b/0x2f0
[  185.010591][T13436]  hci_dev_do_close+0x30/0xc0
[  185.012251][T13436]  hci_rfkill_set_block+0x1f4/0x290
[  185.014131][T13436]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  185.016149][T13436]  rfkill_set_block+0x19f/0x4d0
[  185.017885][T13436]  rfkill_fop_write+0x43b/0x560
[  185.019621][T13436]  ? apparmor_file_permission+0x1f4/0x300
[  185.021614][T13436]  ? __pfx_rfkill_fop_write+0x10/0x10
[  185.023559][T13436]  ? security_kernfs_init_security+0x240/0x270
[  185.025725][T13436]  ? rw_verify_area+0x203/0x4c0
[  185.027437][T13436]  ? tun_chr_write_iter+0x18a/0x200
[  185.029293][T13436]  ? __pfx_rfkill_fop_write+0x10/0x10
[  185.031171][T13436]  vfs_write+0x296/0xba0
[  185.032685][T13436]  ? __pfx_vfs_write+0x10/0x10
[  185.034420][T13436]  ? __fget_files+0x2a/0x420
[  185.036044][T13436]  ? __fget_files+0x2a/0x420
[  185.037736][T13436]  ? __fget_files+0x3a2/0x420
[  185.039442][T13436]  ? __fget_files+0x2a/0x420
[  185.041092][T13436]  ksys_write+0x150/0x270
[  185.042589][T13436]  ? __pfx_ksys_write+0x10/0x10
[  185.044360][T13436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.046513][T13436]  do_syscall_64+0x174/0x580
[  185.048142][T13436]  ? trace_irq_disable+0x3b/0x140
[  185.049933][T13436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.052030][T13436] RIP: 0033:0x7fc6eb99de99
[  185.053662][T13436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.060408][T13436] RSP: 002b:00007fc6ec948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  185.063294][T13436] RAX: ffffffffffffffda RBX: 00007fc6ebc25fa0 RCX: 00007fc6eb99de99
[  185.066063][T13436] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  185.068727][T13436] RBP: 00007fc6eba33eaf R08: 0000000000000000 R09: 0000000000000000
[  185.071465][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.074285][T13436] R13: 00007fc6ebc26038 R14: 00007fc6ebc25fa0 R15: 00007ffeefe1dd28
[  185.076981][T13436]  </TASK>
[  185.078086][T13436] Modules linked in:
[  185.080110][T13436] ---[ end trace 0000000000000000 ]---
[  185.098862][T13436] RIP: 0010:klist_remove+0x156/0x340
[  185.101062][T13436] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 cd 5b 6d f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ae 5b 6d f6 49 8b 44 24 58 48 89 44 24 08
[  185.109343][T13436] RSP: 0018:ffffc9000b0df820 EFLAGS: 00010202
[  185.111845][T13436] RAX: 000000000000000b RBX: ffff888115c61dc0 RCX: 0000000000000000
[  185.116021][T13436] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  185.119930][T13436] RBP: ffffc9000b0df920 R08: ffffffff903d5b63 R09: 1ffffffff207ab6c
[  185.122952][T13436] R10: dffffc0000000000 R11: fffffbfff207ab6d R12: 0000000000000000
[  185.128666][T13436] R13: 1ffff110221a5e0c R14: ffff888110d2f060 R15: dffffc0000000000
[  185.131913][T13436] FS:  00007fc6ec9486c0(0000) GS:ffff88818d954000(0000) knlGS:0000000000000000
[  185.135887][T13436] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  185.139714][T13436] CR2: 0000556bb172be48 CR3: 000000010fa40000 CR4: 00000000000006f0
[  185.142901][T13436] Kernel panic - not syncing: Fatal exception
[  185.145757][T13436] Kernel Offset: disabled
[  185.147089][T13436] Rebooting in 86400 seconds..
