last executing test programs:

2.270830906s ago: executing program 2 (id=1903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000020000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

2.211134268s ago: executing program 2 (id=1904):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020004feffff4b940000d500000000850000002e000000181100002b6d038523bf4cc4a8288f0cdd5acb2884bdfeb36ae3151752bd820286baa024a9500d143b77348d019b7bfb516265842dc1702a7f1bfda0bc4ecd087c8d2a2f049abc07ae3e50f1acb6274e506df94d7dd55440a8545fa4e6eae12d6c3eac731db5ec3d85b9f6399f1e67d7ff438cb7959c5b542999621aef209cc14b36a9d762e3b56d0a4c7ddde55ca8d47bdda4b990154b6b1fb78a8b21e903bcaf37b71a2b4ad65ce64d5a033e9bf1e7feabd3300624e6b977bbae6c65e37a766a16b1574500000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="240000001a0001970000", @ANYRES32=0x0, @ANYBLOB="0000080098aa91ece1c51ef3c6563172ac12f67de96c529364370c13bc9038f8603ddb8ef6fe579e5e26e44b36597aa891f46d35ac3a44f1b37ae384efe153d657f9ad09dd9a93a95210b16f7fd3ed8aa5f9c4636254562810fc7828f21cb8f07c936783f988591d6f771bb7d1c618f763dd732d97357d685a160b6c7a9de8", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=<r9=>0x0, @ANYBLOB="3c840300000000002c0012800e000100697036677265746170000000188002801400070000000000000000000000ffffff00ffff0a000100aa"], 0x58}}, 0x80)
r10 = socket(0x2c, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, 0x0, &(0x7f0000000180))
sendmsg$inet6(r10, &(0x7f0000000980)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000140)="a9f18d0996f0ac6611471d47dc31a2081318ef18c6", 0x15}, {&(0x7f0000000240)="f58175210c880811a2cf2a610ddb7513813ad0c1999ce37069c6bd32b04470f57f0c118dfbf07c63a8348918bf2c3a9a716c1bf20c2154478b64fc40f469579033e15bd431e3d9d66d82a3bc08fa484ca32983c792ae1c7bfe04566a", 0x5c}, {&(0x7f00000002c0)="e7c5f2a1f1e04cf94138f75af1cfe294d66f8fb36853fdfb73a5b22162efebc743d0f3c0f5d85c92bd5f267cf47a848b298e86f085655fa31f4dfd5c777285e5e95d35f6f03f27f5750a08eb2a4be615e4056ab28c7ba77b70717f3505c891159a7797f32ce27115c67a6dbb63300807f6b021da4dc942d5a4b78f1e0ccbfae5cfff74f2d675d4c2b04ca89e84c5fa0c", 0x90}, {&(0x7f0000000380)="592adb0107db0b9b545b2eb01a32b1da55ab3b68b0110e89f97f85f3a7d2c08ef6d55f1671c4670e57f7dee091eb576945a08ed239f82a06ae4d435177e1c31800f13ba7a235c614fc4359d2f0723293d32dafa386e9451b74d2939e3d934739fefcd5225f66f23d20e6559482d3c7f1d8563faa68159a1636", 0x79}, {&(0x7f0000000500)="3ccd629dc2ce9230783b620f8a2ef8ea8e1c08f5ac43ea177a9b9ceadfe8b2d79c12812c11b4dfb8a0037685c3964d6e33ca0a411de08c9766b2c8fc917a7ddda8a2697c624c726e", 0x48}, {&(0x7f0000000580)="bb22f90c686a79c1bf1e8c23ee20e41af25fef3231e37949a2cba08c2f173d8a662d068e3fc834d6f4820777fc97345aa67c50c367d618eb87d26eac4e845f27956068cb1b1f19f3c16c6a6976225ff6cde97661393144a5827ca8da9d32f35f2e6cc9bce7c4f7a60171161b44310f96210ea40774b31588af64a21c0e22ae0c2374e967128b5a1da380383696bc4c26531e9234063802b950dbaf5f52ac9a0235333aa31cfb3215bc5a0a84dd3402361d9f2ec2caa8030e97b371f2221bd1db5748e641763dbcd9742abebf0e932070eb27495b3385ff8823e7b9643f5f0500992bd3520968cff3dd014298b88f0e851a41cc9096bbd7f38e", 0xf9}], 0x6, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x1d, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x25fec2e8}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x87, 0x3, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x1d, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @dstopts={{0x110, 0x29, 0x37, {0x88, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x48000}, @pad1, @generic={0xf, 0xe6, "93df2bd2b10777d3a9db99af5e19f064ad601a929cd1c3dd7518804e3a59f0e9e89eb52eda9eed43b38a7b85da77debe6f57aaa73ae4736368d477ce5c393d72c8e87baf4d424f38eadd0efb16170f63ba23fcb5b82d4aefbbc10b92ba21f6a29b118d147d0e53b5ff6d533841442b1b45d78aa58c38b85701d4d965666562435a346c2f801b4ba5b7935b51975dea29a420746cbe728f9daf08f1d9d665f81f814ca6009760126982c9cbe44859f7bdac7aed1a6c38a4db270a58d9ff7310a811190b83a6dd6abc47cfb6b8138904bafeb176240726770cf5df7ebe785c9e2162fc279ca816"}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x0, 0x8, 0x0, [@empty]}}}, @dontfrag={{0x14}}], 0x250}, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000a80)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r11 = socket$inet(0x2, 0x1, 0x7fff)
ioctl$SIOCGETSGCNT_IN6(r11, 0x89e1, &(0x7f0000000ac0)={@loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010101}})
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f0000000a40)={&(0x7f0000000440), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xd004}, 0x408d4)
bind$bt_l2cap(r12, &(0x7f0000000400)={0x1f, 0x80, @none, 0x0, 0x2}, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="380000000314010027bd7000fddbdf250900020073797a30000000000800410072786500140033007866726d300000000000000000000000f6544f67d927694c740c9ec31375a454129cfd22ae6aae52fe6487544e5e08", @ANYRESOCT=r12, @ANYRES16=r7, @ANYRES32=r9], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014)

2.110826836s ago: executing program 1 (id=1906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000380)={&(0x7f0000000280)=[{0x3, 0x0, 0x0, {0x11af, 0x4d2a46d9, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x4, 0xffb, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0xfffffffd}}, {0x9276, 0x0, 0x0, {0x1, 0xffff0001}}, {0x1df7, 0x0, 0x0, {0x2, 0x3ff}}, {0x7fff, 0x2, 0x0, {0x5, 0x1, 0x2}}, {0x6, 0x1, 0x0, {0x0, 0x400, 0x2}}], 0x7, 0x20, 0x1, 0x64})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
socket(0x80000000000000a, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0xcb, 0x4)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
socket(0x23, 0x80000, 0x5ca5)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x2d, 0x2, 0x0)

680.719128ms ago: executing program 1 (id=1909):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

604.721106ms ago: executing program 1 (id=1912):
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket(0x400000000010, 0x3, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket(0x23, 0x80805, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

488.99883ms ago: executing program 1 (id=1913):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x68a, 0x101, 0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

320.856605ms ago: executing program 1 (id=1918):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

217.722951ms ago: executing program 1 (id=1919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004000000000000000ffffffff180100002020782500000000002020207b"], 0x0, 0x8, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

160.779925ms ago: executing program 0 (id=1921):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)

160.62365ms ago: executing program 0 (id=1922):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000100000400000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e027429b49dcd4ff9782762f86dd", 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

160.331632ms ago: executing program 0 (id=1923):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x800}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000240)=""/170, 0x3f, 0xaa, 0x0, 0x80000000, 0x10000, @value=r2}, 0x28)
ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000340))
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000))

132.161545ms ago: executing program 2 (id=1924):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000440)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0xc)
r2 = socket$inet(0x2, 0x3, 0x1)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4, @remote}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

80.494297ms ago: executing program 2 (id=1925):
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)

70.189738ms ago: executing program 0 (id=1926):
r0 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000000c0)=""/1, &(0x7f0000d23000)=0x1)

54.284772ms ago: executing program 2 (id=1927):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)

476.588µs ago: executing program 0 (id=1928):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000509000000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="ef"], 0x20}, 0x1, 0xffffa888}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

228.482µs ago: executing program 2 (id=1929):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf", @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x0)

0s ago: executing program 0 (id=1930):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0x9}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80200a, 0x0, 0x9, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x100004, 0xffffffff}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22173' (ED25519) to the list of known hosts.
syzkaller login: [   57.009122][ T5598] cgroup: Unknown subsys name 'net'
[   57.122525][ T5598] cgroup: Unknown subsys name 'cpuset'
[   57.127220][ T5598] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.434104][ T5598] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.996446][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.000550][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.004377][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.016606][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.022241][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.026920][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.036757][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.042685][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.046080][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.048584][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.097693][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.103539][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.107041][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.109665][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.112339][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.678913][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.682717][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.685833][ T5643] bridge_slave_0: entered allmulticast mode
[   71.689554][ T5643] bridge_slave_0: entered promiscuous mode
[   71.717339][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.720294][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.723318][ T5643] bridge_slave_1: entered allmulticast mode
[   71.727118][ T5643] bridge_slave_1: entered promiscuous mode
[   71.772810][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.791414][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.847039][ T5643] team0: Port device team_slave_0 added
[   71.870678][ T5643] team0: Port device team_slave_1 added
[   71.901034][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.903334][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.905483][ T5640] bridge_slave_0: entered allmulticast mode
[   71.907956][ T5640] bridge_slave_0: entered promiscuous mode
[   71.928005][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.930441][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.932779][ T5640] bridge_slave_1: entered allmulticast mode
[   71.935843][ T5640] bridge_slave_1: entered promiscuous mode
[   71.947893][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.950620][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.960925][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.966665][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.969111][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.979001][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.018978][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.023853][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.027174][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.029425][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.031832][ T5649] bridge_slave_0: entered allmulticast mode
[   72.034573][ T5649] bridge_slave_0: entered promiscuous mode
[   72.058109][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.060899][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.063405][ T5649] bridge_slave_1: entered allmulticast mode
[   72.066366][ T5649] bridge_slave_1: entered promiscuous mode
[   72.089887][ T5640] team0: Port device team_slave_0 added
[   72.119273][ T5643] hsr_slave_0: entered promiscuous mode
[   72.122363][ T5643] hsr_slave_1: entered promiscuous mode
[   72.127032][ T5640] team0: Port device team_slave_1 added
[   72.132258][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.139132][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.180818][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.183169][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.191309][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.206892][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.209240][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.217070][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.227899][ T5649] team0: Port device team_slave_0 added
[   72.241176][ T5649] team0: Port device team_slave_1 added
[   72.269447][ T5640] hsr_slave_0: entered promiscuous mode
[   72.273128][ T5640] hsr_slave_1: entered promiscuous mode
[   72.275287][ T5640] debugfs: 'hsr0' already exists in 'hsr'
[   72.277103][ T5640] Cannot create hsr debugfs directory
[   72.303388][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.305439][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.313255][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.317643][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.320479][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   72.328704][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.417005][ T5649] hsr_slave_0: entered promiscuous mode
[   72.419261][ T5649] hsr_slave_1: entered promiscuous mode
[   72.421611][ T5649] debugfs: 'hsr0' already exists in 'hsr'
[   72.423422][ T5649] Cannot create hsr debugfs directory
[   72.575114][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.584323][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.595170][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.600213][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.603182][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.610868][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.620715][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.627689][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.690532][ T5640] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.696668][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.699852][ T5640] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.704604][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.715627][ T5640] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.721114][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.723680][ T5640] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.727262][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.785832][ T5649] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.791145][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   72.794114][ T5649] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.797682][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   72.808002][ T5649] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.812577][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   72.815084][ T5649] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.818801][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   72.889752][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.919058][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   72.925056][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.938585][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.941797][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.963273][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.966066][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.973092][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[   72.986872][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.989274][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.006997][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.009254][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.016355][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.041312][ T5649] 8021q: adding VLAN 0 to HW filter on device team0
[   73.071287][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.074193][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.088522][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.091283][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.120772][   T55] Bluetooth: hci1: command tx timeout
[   73.123478][ T5003] Bluetooth: hci0: command tx timeout
[   73.201711][ T5003] Bluetooth: hci2: command tx timeout
[   73.434074][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.466151][ T5643] veth0_vlan: entered promiscuous mode
[   73.476267][ T5643] veth1_vlan: entered promiscuous mode
[   73.497756][ T5643] veth0_macvtap: entered promiscuous mode
[   73.504847][ T5643] veth1_macvtap: entered promiscuous mode
[   73.512797][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.522183][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.538470][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.550327][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.568665][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.574907][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.588538][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.608815][ T5649] veth0_vlan: entered promiscuous mode
[   73.613288][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.633679][ T5640] veth0_vlan: entered promiscuous mode
[   73.655570][ T5649] veth1_vlan: entered promiscuous mode
[   73.662122][ T5640] veth1_vlan: entered promiscuous mode
[   73.709030][ T4766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.717577][ T4766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.751477][ T5640] veth0_macvtap: entered promiscuous mode
[   73.757657][ T5649] veth0_macvtap: entered promiscuous mode
[   73.761640][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.763161][ T5640] veth1_macvtap: entered promiscuous mode
[   73.766836][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.785889][ T5649] veth1_macvtap: entered promiscuous mode
[   73.809166][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.821493][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.826884][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.837471][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.837832][ T5643] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.867307][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.873978][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.884162][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.892680][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.897170][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.906490][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.916795][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.921654][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.060579][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.066947][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.098325][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.101529][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.122385][ T5751] nbd: must specify at least one socket
[   74.129165][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.136684][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.203490][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.215096][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.234750][ T5755] sctp: [Deprecated]: syz.2.16 (pid 5755) Use of int in max_burst socket option.
[   74.234750][ T5755] Use struct sctp_assoc_value instead
[   74.243336][ T5755] netlink: 'syz.2.16': attribute type 1 has an invalid length.
[   74.246342][ T5755] netlink: 224 bytes leftover after parsing attributes in process `syz.2.16'.
[   74.431557][ T5761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'.
[   74.498487][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'.
[   74.502579][ T5768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'.
[   74.997544][ T5791] Zero length message leads to an empty skb
[   75.002313][ T5791] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   75.201207][ T5003] Bluetooth: hci0: command tx timeout
[   75.203652][ T5003] Bluetooth: hci1: command tx timeout
[   75.280248][   T55] Bluetooth: hci2: command tx timeout
[   75.340091][ T5801] netlink: 'syz.2.39': attribute type 1 has an invalid length.
[   75.346759][ T5801] netlink: 'syz.2.39': attribute type 2 has an invalid length.
[   75.350874][ T5801] netlink: 'syz.2.39': attribute type 1 has an invalid length.
[   75.354193][ T5801] netlink: 'syz.2.39': attribute type 2 has an invalid length.
[   75.973638][ T5841] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   76.021584][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'.
[   76.182384][ T5856] netlink: 'syz.0.63': attribute type 10 has an invalid length.
[   76.191108][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.198219][ T5856] team0: Port device netdevsim1 added
[   76.213672][ T5856] netlink: 'syz.0.63': attribute type 10 has an invalid length.
[   76.222935][ T5856] team0: Port device netdevsim1 removed
[   76.231040][ T5856] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.239401][ T5856] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[   76.327781][ T5865] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[   76.333414][ T5865] netlink: 'syz.0.66': attribute type 2 has an invalid length.
[   76.361409][ T5860] bond1: entered allmulticast mode
[   76.857062][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   76.859504][ T5898] syz.2.77 uses obsolete (PF_INET,SOCK_PACKET)
[   76.878395][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.883552][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[   76.901811][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.274815][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   77.280121][ T5003] Bluetooth: hci1: command tx timeout
[   77.280306][ T5641] Bluetooth: hci0: command tx timeout
[   77.292027][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   77.360081][ T5641] Bluetooth: hci2: command tx timeout
[   78.423358][ T5954] netlink: 'syz.2.100': attribute type 4 has an invalid length.
[   78.498948][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'.
[   78.554034][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.103'.
[   78.610632][ T5966] openvswitch: netlink: Flow key attr not present in new flow.
[   78.615082][ T5965] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[   78.695183][ T5972] team0: Device wg0 is of different type
[   78.699189][ T5972] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[   79.219384][ T6003] tipc: Started in network mode
[   79.223282][ T6003] tipc: Node identity 8a0556ef2787, cluster identity 4711
[   79.226507][ T6003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.241290][ T6003] Bluetooth: MGMT ver 1.23
[   79.289686][ T6012] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[   79.319298][ T6002] tipc: Disabling bearer <eth:syzkaller0>
[   79.360551][ T5003] Bluetooth: hci1: command tx timeout
[   79.363194][ T5641] Bluetooth: hci0: command tx timeout
[   79.373452][ T6017] __nla_validate_parse: 1 callbacks suppressed
[   79.373462][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'.
[   79.380884][ T6017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.440122][ T5641] Bluetooth: hci2: command 0x0419 tx timeout
[   79.567317][ T6029] trusted_key: syz.1.131 sent an empty control message without MSG_MORE.
[   79.665584][ T6033] team0: No ports can be present during mode change
[   79.685870][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'.
[   79.765307][ T6037] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.791779][ T6042] bond1: (slave batadv1): Opening slave failed
[   79.807993][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[   79.812083][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'.
[   79.814947][ T6047] validate_nla: 3 callbacks suppressed
[   79.814955][ T6047] netlink: 'syz.1.143': attribute type 19 has an invalid length.
[   79.833345][ T6047] netlink: 'syz.1.143': attribute type 20 has an invalid length.
[   79.916392][ T6052] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   80.438804][ T6077] netlink: 'syz.0.155': attribute type 1 has an invalid length.
[   80.464447][ T6077] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.486789][ T6077] bond1: (slave veth3): Enslaving as an active interface with a down link
[   80.499329][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'.
[   80.502959][ T6077] bond1: entered allmulticast mode
[   80.510295][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'.
[   80.513539][ T6077] bond1: left allmulticast mode
[   80.515624][ T6077] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.683319][ T6083] dvmrp0: entered allmulticast mode
[   81.520235][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   82.435577][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'.
[   82.798038][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'.
[   83.847972][ T6263] tipc: Started in network mode
[   83.856492][ T6263] tipc: Node identity eae99f12bd2c, cluster identity 4711
[   83.880560][ T6263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.885199][ T6263] syzkaller0: entered promiscuous mode
[   83.887367][ T6263] syzkaller0: entered allmulticast mode
[   83.916079][ T6263] tipc: Resetting bearer <eth:syzkaller0>
[   83.924721][ T6262] tipc: Resetting bearer <eth:syzkaller0>
[   83.953876][ T6262] tipc: Disabling bearer <eth:syzkaller0>
[   84.266307][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'.
[   84.331882][ T6290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'.
[   85.219514][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.224708][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.244424][ T6309] netlink: 136 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.256857][ T6309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.262652][ T6309] netlink: 'syz.0.259': attribute type 3 has an invalid length.
[   85.266754][ T6309] netlink: 1 bytes leftover after parsing attributes in process `syz.0.259'.
[   85.898506][ T6352] Bluetooth: MGMT ver 1.23
[   86.077242][ T6361] : entered promiscuous mode
[   86.533882][ T6386] netlink: 256 bytes leftover after parsing attributes in process `syz.0.284'.
[   86.592867][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.610974][ T6386] bridge_slave_0 (unregistering): left allmulticast mode
[   86.613973][ T6386] bridge_slave_0 (unregistering): left promiscuous mode
[   86.616992][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.637996][ T6398] syzkaller0: entered promiscuous mode
[   86.643836][ T6398] syzkaller0: entered allmulticast mode
[   86.657400][ T6398] TC_ACT_REPEAT abuse ?
[   86.888847][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'.
[   86.895724][ T6415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'.
[   86.899919][ T6415] netlink: 188 bytes leftover after parsing attributes in process `syz.1.291'.
[   87.103599][ T6425] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   87.117251][ T6425] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   87.140332][   T24] cfg80211: failed to load regulatory.db
[   87.396694][ T6445] can: request_module (can-proto-5) failed.
[   88.245883][ T6476] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   88.426809][ T6482] erspan0: entered promiscuous mode
[   88.566221][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'.
[   88.646342][ T6491] Cannot find set identified by id 0 to match
[   88.831992][ T6505] syzkaller1: tun_chr_ioctl cmd 2147767521
[   89.163088][ T6523] netlink: 'syz.1.338': attribute type 4 has an invalid length.
[   89.186509][ T6523] netlink: 'syz.1.338': attribute type 4 has an invalid length.
[   89.328227][ T6534] netlink: 'syz.0.343': attribute type 30 has an invalid length.
[   89.356699][ T6535] sctp: [Deprecated]: syz.1.344 (pid 6535) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.356699][ T6535] Use struct sctp_sack_info instead
[   89.359339][ T6537] netlink: 'syz.0.346': attribute type 1 has an invalid length.
[   90.843096][ T6578] __nla_validate_parse: 1 callbacks suppressed
[   90.843107][ T6578] netlink: 220 bytes leftover after parsing attributes in process `syz.2.361'.
[   90.851376][ T6578] tc_dump_action: action bad kind
[   90.854674][ T6593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.907272][ T6595] netlink: 'syz.1.367': attribute type 4 has an invalid length.
[   90.916328][ T6595] netlink: 'syz.1.367': attribute type 4 has an invalid length.
[   91.024003][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   91.095747][ T6609] syzkaller1: entered promiscuous mode
[   91.099591][ T6609] syzkaller1: entered allmulticast mode
[   91.973106][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'.
[   91.978782][ T6671] ip6gre1: entered promiscuous mode
[   91.981681][ T6671] ip6gre1: entered allmulticast mode
[   91.991830][ T6671] netlink: 'syz.1.400': attribute type 6 has an invalid length.
[   91.994470][ T6671] netlink: 72 bytes leftover after parsing attributes in process `syz.1.400'.
[   92.658132][    T9] IPVS: starting estimator thread 0...
[   92.751629][ T6682] IPVS: using max 39 ests per chain, 93600 per kthread
[   93.325925][ T6709] syzkaller0: entered promiscuous mode
[   93.328317][ T6709] syzkaller0: entered allmulticast mode
[   93.994964][ T6740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'.
[   94.014972][ T6740] ip6gre1: entered promiscuous mode
[   94.017171][ T6740] ip6gre1: entered allmulticast mode
[   94.028021][ T6740] netlink: 'syz.0.429': attribute type 6 has an invalid length.
[   94.031182][ T6740] netlink: 72 bytes leftover after parsing attributes in process `syz.0.429'.
[   94.043832][ T6740] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.047550][ T6740] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.906166][ T6762] netlink: 'syz.0.438': attribute type 18 has an invalid length.
[   94.913460][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'.
[   94.940394][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.944263][ T6762] netlink: 'syz.0.438': attribute type 18 has an invalid length.
[   94.950212][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.953220][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'.
[   94.956626][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.959517][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.092596][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'.
[   95.095726][ T6773] netlink: 80 bytes leftover after parsing attributes in process `syz.0.443'.
[   95.115192][ T6774] netlink: 'syz.2.442': attribute type 16 has an invalid length.
[   95.205144][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.207742][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.255619][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.266495][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.397827][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.405936][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.465128][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.468500][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.652538][ T6797] netlink: 'syz.1.450': attribute type 1 has an invalid length.
[   95.668323][ T6797] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.874819][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[   95.971710][ T6813] netlink: 480 bytes leftover after parsing attributes in process `syz.0.457'.
[   95.982229][ T6813] netlink: 480 bytes leftover after parsing attributes in process `syz.0.457'.
[   95.997249][ T6815] syzkaller0: entered promiscuous mode
[   95.999541][ T6815] syzkaller0: entered allmulticast mode
[   96.260986][ T6832] netlink: 'syz.0.465': attribute type 16 has an invalid length.
[   96.410303][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.487714][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.501577][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.653324][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.656397][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.664982][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.667931][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.671872][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.676575][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.681407][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.688796][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.416822][ T6882] xt_hashlimit: size too large, truncated to 1048576
[   97.650946][ T6893] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.482'.
[   97.827707][ T6912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.855341][ T6912] syzkaller0: entered promiscuous mode
[   97.857239][ T6912] syzkaller0: entered allmulticast mode
[   97.869550][ T6912] tipc: Resetting bearer <eth:syzkaller0>
[   97.893278][ T6910] tipc: Resetting bearer <eth:syzkaller0>
[   98.276666][ T6937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'.
[   98.835845][ T6947] netlink: 240 bytes leftover after parsing attributes in process `syz.1.504'.
[   98.841554][ T6947] netlink: 'syz.1.504': attribute type 9 has an invalid length.
[   98.869690][ T6947] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.504'.
[   99.250156][ T6910] tipc: Disabling bearer <eth:syzkaller0>
[   99.277536][ T6835] tipc: Node number set to 1472569106
[   99.355713][ T6964] netlink: 'syz.2.511': attribute type 13 has an invalid length.
[   99.358530][ T6964] netlink: 'syz.2.511': attribute type 17 has an invalid length.
[   99.468974][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.476136][ T6964] 8021q: adding VLAN 0 to HW filter on device team0
[   99.493442][ T6964] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.579647][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.591393][ T6964] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.627589][ T6964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.634875][ T6964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.663390][ T6964] veth1_vlan: left promiscuous mode
[   99.673293][ T6964] veth0_vlan: left promiscuous mode
[   99.677309][ T6964] veth0_vlan: entered promiscuous mode
[   99.684767][ T6964] veth1_vlan: entered promiscuous mode
[   99.698911][ T6964] veth1_macvtap: left promiscuous mode
[   99.707182][ T6964] veth0_macvtap: left promiscuous mode
[   99.710758][ T6964] veth0_macvtap: entered promiscuous mode
[   99.719881][ T6964] veth1_macvtap: entered promiscuous mode
[   99.727310][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   99.734248][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   99.742243][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   99.749392][ T6964] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   99.772092][ T6964] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.797749][ T6968] tipc: Started in network mode
[   99.799914][ T6968] tipc: Node identity 429d6b8081ea, cluster identity 4711
[   99.803282][ T6968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.806407][ T6973] syzkaller0: entered promiscuous mode
[   99.815029][ T6973] syzkaller0: entered allmulticast mode
[   99.829084][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.832176][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.855468][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.858496][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.892036][ T6977] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   99.898957][ T6992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.519'.
[   99.917077][ T6981] tipc: Resetting bearer <eth:syzkaller0>
[   99.921454][ T5639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.948535][ T6960] tipc: Resetting bearer <eth:syzkaller0>
[   99.989438][ T6960] tipc: Disabling bearer <eth:syzkaller0>
[  100.005734][ T5639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.009869][ T5639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.021068][ T5639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.287683][ T7015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.527'.
[  100.297090][ T7015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.527'.
[  100.311597][ T7015] team0 (unregistering): Port device team_slave_0 removed
[  100.317969][ T7015] team0 (unregistering): Port device team_slave_1 removed
[  101.453764][ T7086] nbd: must specify an index to disconnect
[  102.033937][ T7132] netlink: 'syz.2.575': attribute type 22 has an invalid length.
[  102.037028][ T7132] __nla_validate_parse: 4 callbacks suppressed
[  102.037037][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'.
[  102.047849][ T5639] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.047922][ T7132] netlink: 'syz.2.575': attribute type 22 has an invalid length.
[  102.055976][ T5639] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.066637][ T5639] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.066677][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'.
[  102.074002][ T5639] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.087343][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.576'.
[  102.465751][ T7156] bridge_slave_0: left allmulticast mode
[  102.474185][ T7156] bridge_slave_0: left promiscuous mode
[  102.478888][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.504783][ T7156] bridge_slave_1: left allmulticast mode
[  102.507203][ T7156] bridge_slave_1: left promiscuous mode
[  102.515912][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.535255][ T7156] bond0: (slave bond_slave_0): Releasing backup interface
[  102.558560][ T7156] bond0: (slave bond_slave_1): Releasing backup interface
[  102.579505][ T7156] team0: Port device team_slave_0 removed
[  102.588372][ T7156] team0: Port device team_slave_1 removed
[  102.593226][ T7156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.597576][ T7156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.604308][ T7156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  102.611891][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'.
[  102.644771][ T7158] ipvlan0: entered allmulticast mode
[  102.649688][ T7158] veth0_vlan: entered allmulticast mode
[  102.655731][ T7162] team0: Mode changed to "activebackup"
[  102.757622][ T7171] bridge0: port 1(ip6gretap0) entered blocking state
[  102.760548][ T7171] bridge0: port 1(ip6gretap0) entered disabled state
[  102.763793][ T7171] ip6gretap0: entered allmulticast mode
[  102.769003][ T7171] ip6gretap0: entered promiscuous mode
[  102.775085][ T7171] bridge0: port 1(ip6gretap0) entered blocking state
[  102.777994][ T7171] bridge0: port 1(ip6gretap0) entered forwarding state
[  103.509091][ T7216] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[  103.530321][ T7218] warning: `syz.2.603' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  103.697400][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'.
[  103.775620][ T7242] tc_dump_action: action bad kind
[  103.918867][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'.
[  104.697078][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'.
[  104.788229][ T7304] syzkaller0: entered promiscuous mode
[  104.793343][ T7304] syzkaller0: entered allmulticast mode
[  104.847684][ T7306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.633'.
[  105.988662][ T7344] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[  105.991661][ T7344] netlink: 'syz.2.644': attribute type 2 has an invalid length.
[  106.149476][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'.
[  106.233552][ T7359] netlink: 128 bytes leftover after parsing attributes in process `syz.2.650'.
[  106.252119][ T7359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.916184][ T7415] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  107.725709][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'.
[  108.105026][ T7515] netlink: 'syz.1.717': attribute type 2 has an invalid length.
[  108.113543][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'.
[  108.257189][ T7529] dummy0: entered promiscuous mode
[  108.265908][ T7528] dummy0: left promiscuous mode
[  108.601438][ T7560] netlink: 'syz.1.738': attribute type 3 has an invalid length.
[  108.617501][ T7561] syzkaller0: entered promiscuous mode
[  108.623072][ T7561] syzkaller0: entered allmulticast mode
[  108.631029][ T7560] block nbd1: NBD_DISCONNECT
[  108.684318][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'.
[  108.757111][ T7569] netlink: 'syz.1.744': attribute type 6 has an invalid length.
[  108.971645][ T7590] netlink: 2 bytes leftover after parsing attributes in process `syz.1.754'.
[  109.188543][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'.
[  110.426003][ T7674] sock: sock_set_timeout: `syz.0.791' (pid 7674) tries to set negative timeout
[  110.589005][ T7682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.595159][ T7682] syzkaller0: entered promiscuous mode
[  110.597385][ T7682] syzkaller0: entered allmulticast mode
[  110.613464][ T7682] tipc: Resetting bearer <eth:syzkaller0>
[  110.618668][ T7681] tipc: Resetting bearer <eth:syzkaller0>
[  110.627981][ T7684] netlink: 'syz.1.797': attribute type 1 has an invalid length.
[  110.630903][ T7684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.797'.
[  110.631004][ T7681] tipc: Disabling bearer <eth:syzkaller0>
[  110.969833][ T7710] syzkaller1: entered promiscuous mode
[  110.974508][ T7710] syzkaller1: entered allmulticast mode
[  111.003521][ T7714] netlink: 104 bytes leftover after parsing attributes in process `syz.0.812'.
[  111.192822][ T7725] geneve3: entered promiscuous mode
[  111.194521][ T7725] geneve3: entered allmulticast mode
[  111.542017][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'.
[  111.954782][ T7790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.035003][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'.
[  112.149785][ T7803] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  112.195650][ T7806] netlink: 100 bytes leftover after parsing attributes in process `syz.1.855'.
[  112.864815][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'.
[  113.064326][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.068039][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.540656][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'.
[  113.616264][ T7881] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  114.155447][ T7907] netlink: 'syz.2.897': attribute type 1 has an invalid length.
[  115.478776][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'.
[  115.927262][ T7990] atomic_op ffff888118004198 conn xmit_atomic 0000000000000000
[  116.313824][ T7998] netlink: 72 bytes leftover after parsing attributes in process `syz.0.934'.
[  116.955810][ T8043] netlink: 'syz.2.950': attribute type 1 has an invalid length.
[  116.981272][ T8043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.950'.
[  116.984908][ T8043] bond2: entered promiscuous mode
[  116.987159][ T8043] bond2: entered allmulticast mode
[  117.001711][ T8043] bond2: (slave geneve3): making interface the new active one
[  117.004898][ T8043] geneve3: entered promiscuous mode
[  117.007248][ T8043] geneve3: entered allmulticast mode
[  117.011839][ T8043] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  117.015725][ T5639] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  117.022062][ T5639] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  117.028154][ T5639] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  117.036075][ T5639] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  117.091430][   T34] audit: type=1800 audit(1781131211.332:2): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.951" name="memory.events" dev="tmpfs" ino=1430 res=0 errno=0
[  117.108183][   T34] audit: type=1804 audit(1781131211.352:3): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.951" name="/newroot/280/memory.events" dev="tmpfs" ino=1430 res=1 errno=0
[  117.445417][ T8075] netlink: 'syz.1.963': attribute type 1 has an invalid length.
[  117.448598][ T8075] netlink: 'syz.1.963': attribute type 2 has an invalid length.
[  117.621568][ T8090] netlink: 'syz.2.969': attribute type 49 has an invalid length.
[  117.697907][ T8090] ip6gretap0: entered promiscuous mode
[  117.699905][ T8090] ip6gretap0: entered allmulticast mode
[  117.802516][ T8094] xt_hashlimit: max too large, truncated to 1048576
[  117.804997][ T8094] No such timeout policy "syz1"
[  117.843452][ T8097] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  117.923234][ T8101] netlink: 'syz.2.974': attribute type 22 has an invalid length.
[  117.926845][ T8101] bond0: option ad_select: unable to set because the bond device is up
[  118.207822][ T8076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.992942][ T8158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.022774][ T8162] veth0: entered promiscuous mode
[  119.031414][ T8161] veth0: left promiscuous mode
[  119.154916][ T8160] netlink: 'syz.1.997': attribute type 2 has an invalid length.
[  119.163218][ T8160] netlink: 'syz.1.997': attribute type 2 has an invalid length.
[  119.239282][ T8173] block nbd0: not configured, cannot reconfigure
[  119.605629][ T8203] netlink: 'syz.2.1016': attribute type 21 has an invalid length.
[  119.743477][ T8215] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1022'.
[  119.921699][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'.
[  120.182373][ T8235] block nbd0: server does not support multiple connections per device.
[  120.189721][ T8235] block nbd0: shutting down sockets
[  120.262251][ T8243] netlink: 'syz.1.1033': attribute type 4 has an invalid length.
[  120.281328][ T8243] netlink: 'syz.1.1033': attribute type 4 has an invalid length.
[  120.332925][ T8246] Bluetooth: MGMT ver 1.23
[  120.635139][ T8262] tipc: Enabled bearer <eth:vlan0>, priority 16
[  120.702924][ T8264] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1043'.
[  120.710145][ T8264] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1043'.
[  120.716657][ T8264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1043'.
[  121.095795][ T6835] IPVS: starting estimator thread 0...
[  121.155426][ T8286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1053'.
[  121.190354][ T8284] IPVS: using max 80 ests per chain, 192000 per kthread
[  121.319458][ T8296] netlink: 'syz.2.1058': attribute type 10 has an invalid length.
[  121.323378][ T8296] syz_tun: entered promiscuous mode
[  121.345002][ T8296] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  121.752199][ T6835] tipc: Node number set to 2911000303
[  121.833068][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  121.845181][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  121.860643][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  121.876876][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  122.743998][ T8372] 8021q: adding VLAN 0 to HW filter on device macsec1
[  122.750888][ T6852] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  122.835930][ T8374] netlink: 'syz.0.1095': attribute type 5 has an invalid length.
[  122.896276][ T8382] netlink: 'syz.0.1098': attribute type 21 has an invalid length.
[  122.905283][ T8382] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.912006][ T8382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.916006][ T8382] IPv6: NLM_F_CREATE should be set when creating new route
[  122.918977][ T8382] IPv6: NLM_F_CREATE should be set when creating new route
[  122.922034][ T8382] IPv6: NLM_F_CREATE should be set when creating new route
[  122.943872][ T8382] netlink: 'syz.0.1098': attribute type 21 has an invalid length.
[  122.950154][ T8382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.148084][   T34] audit: type=1107 audit(1781131217.392:4): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  123.170085][ T8391] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  123.909774][ T8441] bridge2: the hash_elasticity option has been deprecated and is always 16
[  123.919364][ T8441] bridge2: entered allmulticast mode
[  124.186375][ T8466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.193976][ T8466] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  124.208910][ T8466] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  124.217981][ T8466] syzkaller0: mtu less than device minimum
[  124.958206][ T8508] 8021q: adding VLAN 0 to HW filter on device bond3
[  125.258656][ T8539] syzkaller0: entered promiscuous mode
[  125.267673][ T8539] syzkaller0: entered allmulticast mode
[  125.362000][ T6854] tipc: Node number set to 3279383424
[  125.753006][ T8582] __nla_validate_parse: 49 callbacks suppressed
[  125.753018][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'.
[  125.783288][ T8582] bond4: option broadcast_neighbor: invalid value (30)
[  125.786601][ T8582] bond4 (unregistering): Released all slaves
[  125.868230][ T8589] pimreg: entered allmulticast mode
[  126.212484][ T8609] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  126.223950][ T8609] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1188'.
[  126.239780][ T8609] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  126.247723][ T8609] netlink: 638 bytes leftover after parsing attributes in process `syz.0.1188'.
[  126.259357][ T8609] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1188'.
[  126.329688][ T8620] netlink: 'syz.0.1191': attribute type 1 has an invalid length.
[  126.669048][ T8658] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.683775][ T8660] netlink: 'syz.0.1201': attribute type 1 has an invalid length.
[  127.572824][ T8734] netlink: 'syz.0.1219': attribute type 32 has an invalid length.
[  128.022728][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'.
[  128.584710][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  128.592860][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  129.060181][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1246'.
[  129.425944][ T8811] tipc: Failed to remove unknown binding: 66,1,1/1472569106:189681844/189681846
[  129.777288][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.083545][ T8850] syzkaller1: entered promiscuous mode
[  130.085908][ T8850] syzkaller1: entered allmulticast mode
[  130.493560][ T8868] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  130.596343][ T8872] sctp: [Deprecated]: syz.1.1279 (pid 8872) Use of int in maxseg socket option.
[  130.596343][ T8872] Use struct sctp_assoc_value instead
[  130.705145][ T8877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.715900][ T8877] syzkaller0: entered promiscuous mode
[  130.718303][ T8877] syzkaller0: entered allmulticast mode
[  130.758426][ T8877] tipc: Resetting bearer <eth:syzkaller0>
[  130.772065][ T8876] tipc: Resetting bearer <eth:syzkaller0>
[  130.786368][ T8876] tipc: Disabling bearer <eth:syzkaller0>
[  131.042556][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'.
[  131.538073][ T8920] sctp: [Deprecated]: syz.2.1301 (pid 8920) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.538073][ T8920] Use struct sctp_sack_info instead
[  131.993065][ T8944] syzkaller0: entered promiscuous mode
[  131.995325][ T8944] syzkaller0: entered allmulticast mode
[  132.575840][ T8954] vlan2: entered promiscuous mode
[  132.577718][ T8954] bond_slave_1: entered promiscuous mode
[  132.616717][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  132.621551][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  132.625610][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  132.629788][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  132.633636][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  132.803544][ T8966] x_tables: duplicate entry at hook 1
[  132.903230][ T8976] netlink: 'syz.0.1326': attribute type 1 has an invalid length.
[  132.914574][ T8976] netlink: 'syz.0.1326': attribute type 4 has an invalid length.
[  132.923587][ T8976] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1326'.
[  133.290588][ T9007] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1333'.
[  133.571703][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'.
[  133.660826][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1351'.
[  133.976055][ T9053] netlink: 'syz.1.1363': attribute type 11 has an invalid length.
[  133.978920][ T9050] syzkaller1: entered promiscuous mode
[  133.982812][ T9050] syzkaller1: entered allmulticast mode
[  133.996949][ T9053] netlink: 'syz.1.1363': attribute type 11 has an invalid length.
[  134.023405][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.037354][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.041106][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.044658][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.111347][ T9060] openvswitch: netlink: Message has 4 unknown bytes.
[  134.115022][ T9060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.458960][ T9087] xt_CT: No such helper "netbios-ns"
[  134.898520][ T9146] syzkaller0: entered promiscuous mode
[  134.902253][ T9146] syzkaller0: entered allmulticast mode
[  134.909492][ T9146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.912762][ T9145] tipc: Resetting bearer <eth:syzkaller0>
[  134.939678][ T9145] tipc: Disabling bearer <eth:syzkaller0>
[  135.207770][ T9172] sctp: [Deprecated]: syz.1.1412 (pid 9172) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.207770][ T9172] Use struct sctp_sack_info instead
[  136.541212][ T9209] batman_adv: batadv0: Adding interface: dummy0
[  136.544007][ T9209] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.554976][ T9209] batman_adv: batadv0: Interface activated: dummy0
[  136.570375][ T9212] batadv0: mtu less than device minimum
[  136.578447][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.584810][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.590177][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.595866][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.600974][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.606082][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.611163][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.616270][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.621685][ T9212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  136.697760][ T9214] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  136.704137][ T9221] __nla_validate_parse: 10 callbacks suppressed
[  136.705013][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'.
[  136.712434][ T9214] bond3 (unregistering): Released all slaves
[  137.125215][ T9258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.139707][ T9258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.149757][ T9260] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1451'.
[  137.156311][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'.
[  137.268895][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1457'.
[  137.382275][ T9286] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  138.257313][ T9336] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1487'.
[  138.325328][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  138.487111][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'.
[  138.507743][ T9351] bridge3: port 1(vlan2) entered blocking state
[  138.510497][ T9351] bridge3: port 1(vlan2) entered disabled state
[  138.513922][ T9351] vlan2: entered allmulticast mode
[  138.518068][ T9351] bridge3: entered allmulticast mode
[  138.532649][ T9351] vlan2: left allmulticast mode
[  138.536008][ T9351] bridge3: left allmulticast mode
[  138.697707][ T9366] netlink: 'syz.0.1502': attribute type 3 has an invalid length.
[  138.700962][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'.
[  138.745687][ T9361] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1500'.
[  139.058777][ T9396] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  139.192136][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1524'.
[  139.425917][ T9423] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  139.431051][ T9423] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  139.525966][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1535'.
[  139.554401][ T9436] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.574868][ T9436] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.581801][ T9440] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  139.622626][ T9440] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.648184][ T9440] vlan2: entered promiscuous mode
[  139.652325][ T9440] bond3: entered promiscuous mode
[  139.654283][ T9440] vlan2: entered allmulticast mode
[  139.656186][ T9440] bond3: entered allmulticast mode
[  139.673359][ T9444] ip6gretap0: left allmulticast mode
[  139.680039][ T9444] ip6gretap0: left promiscuous mode
[  139.682055][ T9444] bridge0: port 1(ip6gretap0) entered disabled state
[  139.690564][ T9444] batman_adv: batadv0: Interface deactivated: dummy0
[  139.693002][ T9444] batman_adv: batadv0: Removing interface: dummy0
[  139.711427][ T9440] 8021q: adding VLAN 0 to HW filter on device batadv1
[  139.720389][ T9440] bond3: (slave batadv1): making interface the new active one
[  139.725571][ T9440] batadv1: entered promiscuous mode
[  139.729496][ T9440] batadv1: entered allmulticast mode
[  139.735367][ T9440] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  139.819176][ T9450] xt_CT: You must specify a L4 protocol and not use inversions on it
[  139.822205][ T9450] netlink: 'syz.2.1541': attribute type 21 has an invalid length.
[  139.972647][ T9466] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  140.969651][ T9484] syzkaller1: entered promiscuous mode
[  140.973830][ T9484] syzkaller1: entered allmulticast mode
[  143.798859][ T9476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.275219][ T9532] xt_CT: No such helper "snmp"
[  144.933926][ T9563] netlink: 'syz.2.1591': attribute type 4 has an invalid length.
[  145.971840][ T9612] net_ratelimit: 14 callbacks suppressed
[  145.971855][ T9612] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  145.977568][ T9613] netlink: 'syz.2.1599': attribute type 1 has an invalid length.
[  146.014232][ T9613] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.024028][ T9613] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  146.094944][ T9621] netlink: 'syz.1.1601': attribute type 10 has an invalid length.
[  146.106894][ T9621] __nla_validate_parse: 3 callbacks suppressed
[  146.106909][ T9621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1601'.
[  146.131280][ T9623] unsupported nlmsg_type 40
[  146.141181][ T9621] team0: Port device geneve1 added
[  146.284540][ T9635] syzkaller1: tun_chr_ioctl cmd 1074025677
[  146.286565][ T9635] syzkaller1: linktype set to 769
[  146.433823][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'.
[  146.570106][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.572490][ T9658] bridge0: port 2(bridge_slave_1) entered listening state
[  146.574922][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.577214][ T9658] bridge0: port 1(bridge_slave_0) entered listening state
[  146.596783][ T9658] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.699319][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'.
[  147.131658][ T9683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1632'.
[  147.483663][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'.
[  147.523957][ T9710] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1646'.
[  147.614461][ T9720] netlink: 'syz.1.1650': attribute type 1 has an invalid length.
[  147.719443][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'.
[  147.753123][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'.
[  148.001315][ T9744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.565829][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1665'.
[  148.747224][ T9792] netlink: zone id is out of range
[  148.757137][ T9792] netlink: zone id is out of range
[  148.757183][ T9794] netlink: 'syz.2.1672': attribute type 1 has an invalid length.
[  148.759364][ T9792] netlink: zone id is out of range
[  148.765606][ T9792] netlink: zone id is out of range
[  148.769482][ T9792] netlink: zone id is out of range
[  148.772935][ T9792] netlink: zone id is out of range
[  148.823781][ T9799] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1673'.
[  149.045528][ T9818] bridge_slave_1: left allmulticast mode
[  149.047616][ T9818] bridge_slave_1: left promiscuous mode
[  149.052488][ T9818] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.459914][ T9848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  149.462227][ T9848] IPv6: NLM_F_CREATE should be set when creating new route
[  149.464771][ T9848] IPv6: NLM_F_CREATE should be set when creating new route
[  149.659734][ T9867] netlink: set zone limit has 4 unknown bytes
[  149.849501][ T9883] netlink: 'syz.1.1709': attribute type 12 has an invalid length.
[  149.993462][ T9896] macvtap1: entered promiscuous mode
[  149.995920][ T9896] macvtap1: entered allmulticast mode
[  149.998171][ T9896] veth1_vlan: entered allmulticast mode
[  150.013889][ T9896] macvtap2: entered promiscuous mode
[  150.016129][ T9896] macvtap2: entered allmulticast mode
[  150.028978][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.035567][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.042069][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.049685][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.198934][ T9915] netlink: 'syz.0.1724': attribute type 12 has an invalid length.
[  150.202466][ T9915] netlink: 'syz.0.1724': attribute type 11 has an invalid length.
[  150.879076][ T9953] IPv6: NLM_F_CREATE should be specified when creating new route
[  151.027043][ T9963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.343116][ T9988] vlan3: entered promiscuous mode
[  151.345233][ T9988] syz_tun: entered promiscuous mode
[  151.394130][ T9990] netlink: 'syz.1.1761': attribute type 1 has an invalid length.
[  151.804267][T10009] hm3): entered promiscuous mode
[  152.182417][T10037] __nla_validate_parse: 11 callbacks suppressed
[  152.182490][T10037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1782'.
[  153.511016][T10080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1803'.
[  153.611935][T10088] netlink: 'syz.0.1807': attribute type 1 has an invalid length.
[  153.644343][T10088] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.687666][T10091] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  153.825454][T10097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1811'.
[  153.856025][T10099] netlink: 'syz.2.1812': attribute type 21 has an invalid length.
[  153.859343][T10099] netlink: 'syz.2.1812': attribute type 6 has an invalid length.
[  153.862722][T10099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1812'.
[  154.008353][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'.
[  154.133333][T10126] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  154.193929][T10133] netlink: 'syz.1.1829': attribute type 1 has an invalid length.
[  154.249353][T10133] 8021q: adding VLAN 0 to HW filter on device bond3
[  154.276436][T10133] bond3: (slave geneve2): making interface the new active one
[  154.281156][T10133] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  154.359772][T10147] netlink: 'syz.2.1835': attribute type 15 has an invalid length.
[  154.412481][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'.
[  154.548526][T10170] syz_tun: entered allmulticast mode
[  154.555237][T10170] bond0: entered promiscuous mode
[  154.556904][T10170] bond_slave_0: entered promiscuous mode
[  154.558900][T10170] bond_slave_1: entered promiscuous mode
[  154.561346][T10170] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  154.566105][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1846'.
[  154.607124][T10167] syzkaller0: entered promiscuous mode
[  154.609600][T10167] syzkaller0: entered allmulticast mode
[  154.892873][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'.
[  154.903068][T10203] gretap0: entered promiscuous mode
[  154.905884][T10203] macvlan2: entered allmulticast mode
[  154.907703][T10203] gretap0: entered allmulticast mode
[  154.991525][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'.
[  155.021918][T10211] 8021q: adding VLAN 0 to HW filter on device bond5
[  155.050612][T10211] 8021q: adding VLAN 0 to HW filter on device bond5
[  155.053709][T10211] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  155.059096][T10211] bond5: (slave vti0): Error -95 calling set_mac_address
[  155.096130][T10216] bond5: (slave dummy0): Error -99 calling set_mac_address
[  155.127448][T10218] netlink: 'syz.0.1867': attribute type 28 has an invalid length.
[  155.235417][T10229] netlink: 'syz.0.1872': attribute type 32 has an invalid length.
[  155.247077][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'.
[  155.676204][T10268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.736128][T10268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.803224][T10280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.886539][ T6841] IPVS: starting estimator thread 0...
[  155.934759][T10284] netlink: 'syz.1.1898': attribute type 1 has an invalid length.
[  155.937949][T10284] netlink: 'syz.1.1898': attribute type 1 has an invalid length.
[  155.941660][T10284] netlink: 'syz.1.1898': attribute type 8 has an invalid length.
[  155.980204][T10288] IPVS: using max 81 ests per chain, 194400 per kthread
[  156.051141][T10298] xfrm0 speed is unknown, defaulting to 1000
[  156.064795][T10298] xfrm0 speed is unknown, defaulting to 1000
[  156.074948][T10298] xfrm0 speed is unknown, defaulting to 1000
[  156.211557][T10303] netlink: 'syz.1.1906': attribute type 13 has an invalid length.
[  156.220260][T10303] netlink: 'syz.1.1906': attribute type 17 has an invalid length.
[  156.295966][T10298] infiniband syz0: set active
[  156.307438][T10298] infiniband syz0: added xfrm0
[  156.339824][T10298] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  156.346305][T10298] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  156.353601][T10298] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  156.386522][T10298] RDS/IB: syz0: added
[  156.396172][T10298] smc: adding ib device syz0 with port count 1
[  156.403221][T10298] smc:    ib device syz0 port 1 has no pnetid
[  156.663840][T10302] tipc: Resetting bearer <eth:vlan0>
[  157.036131][T10303] 8021q: adding VLAN 0 to HW filter on device team0
[  157.042745][T10303] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.195491][T10303] veth1_vlan: left promiscuous mode
[  157.198723][T10303] veth0_vlan: left promiscuous mode
[  157.204669][T10303] veth0_vlan: entered promiscuous mode
[  157.212635][T10303] veth1_vlan: entered promiscuous mode
[  157.220234][T10303] veth1_macvtap: left promiscuous mode
[  157.223638][T10303] veth0_macvtap: left promiscuous mode
[  157.227479][T10303] veth0_macvtap: entered promiscuous mode
[  157.288719][T10303] veth1_macvtap: entered promiscuous mode
[  157.298174][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  157.327252][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  157.355981][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  157.384047][T10303] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  157.415782][T10303] bond1: left allmulticast mode
[  157.418146][T10303] 8021q: adding VLAN 0 to HW filter on device bond1
[  157.450554][T10303] ip6gre1: left promiscuous mode
[  157.452727][T10303] ip6gre1: left allmulticast mode
[  157.457573][T10303] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.513664][T10303] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  157.520878][T10303] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.525971][ T6841] xfrm0 speed is unknown, defaulting to 1000
[  157.557474][ T6854] xfrm0 speed is unknown, defaulting to 1000
[  157.578547][T10298] xfrm0 speed is unknown, defaulting to 1000
[  157.622353][T10315] __nla_validate_parse: 5 callbacks suppressed
[  157.622384][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'.
[  157.639463][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1909'.
[  157.777837][T10298] xfrm0 speed is unknown, defaulting to 1000
[  157.795900][T10323] netlink: 'syz.0.1914': attribute type 1 has an invalid length.
[  157.799228][T10323] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1914'.
[  157.802982][T10322] syzkaller0: entered promiscuous mode
[  157.802994][T10322] syzkaller0: entered allmulticast mode
[  157.809664][T10322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.821349][T10320] tipc: Resetting bearer <eth:syzkaller0>
[  157.852906][T10320] tipc: Disabling bearer <eth:syzkaller0>
[  157.923738][T10298] xfrm0 speed is unknown, defaulting to 1000
[  157.932135][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'.
[  158.126354][T10342] netlink: 'syz.0.1923': attribute type 4 has an invalid length.
[  158.142923][T10342] netlink: 'syz.0.1923': attribute type 4 has an invalid length.
[  158.163383][ T5674] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.166425][ T5674] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.169218][ T5674] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.179627][ T5674] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.259629][T10354] netlink: 'syz.2.1929': attribute type 1 has an invalid length.
[  158.263279][T10354] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1929'.
[  158.271686][    C1] ------------[ cut here ]------------
[  158.275234][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  158.279226][    C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: syz-executor/10355
[  158.284673][    C1] Modules linked in:
[  158.287881][    C1] CPU: 1 UID: 0 PID: 10355 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  158.291824][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.295884][    C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  158.298484][    C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  158.306443][    C1] RSP: 0018:ffffc90000a086b8 EFLAGS: 00010246
[  158.308942][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  158.312141][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90414480
[  158.315354][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.318600][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888199872628
[  158.321937][    C1] R13: 0000000000000000 R14: ffffffff90414480 R15: ffff8881063b31b8
[  158.325243][    C1] FS:  0000555564bf2500(0000) GS:ffff8882a92ae000(0000) knlGS:0000000000000000
[  158.328798][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.331648][    C1] CR2: 00007f3f711adac0 CR3: 0000000111d44000 CR4: 00000000000006f0
[  158.334875][    C1] Call Trace:
[  158.336197][    C1]  <IRQ>
[  158.337388][    C1]  rate_control_send_low+0x1a7/0x7b0
[  158.340261][    C1]  rate_control_get_rate+0x20b/0x5d0
[  158.342467][    C1]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  158.344824][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  158.347354][    C1]  ? __ieee80211_beacon_add_tim+0x1180/0x15a0
[  158.349818][    C1]  ? ieee80211_beacon_get_ap+0x8cb/0x2040
[  158.352219][    C1]  ieee80211_beacon_get_ap+0x196a/0x2040
[  158.354484][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  158.356911][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.359132][    C1]  ? lock_acquire+0x106/0x350
[  158.361113][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.363343][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.365654][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  158.367912][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.370236][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  158.372495][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  158.374960][    C1]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  158.377130][    C1]  __iterate_interfaces+0x2ab/0x590
[  158.379205][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  158.381698][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  158.384600][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  158.387022][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  158.389816][    C1]  mac80211_hwsim_beacon+0xbb/0x180
[  158.391993][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  158.394337][    C1]  __hrtimer_run_queues+0x3c0/0xa20
[  158.396511][    C1]  hrtimer_run_softirq+0x17a/0x240
[  158.398618][    C1]  handle_softirqs+0x22a/0x840
[  158.400681][    C1]  ? __irq_exit_rcu+0xca/0x220
[  158.402648][    C1]  __irq_exit_rcu+0xca/0x220
[  158.404470][    C1]  irq_exit_rcu+0x9/0x30
[  158.406172][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  158.408476][    C1]  </IRQ>
[  158.409690][    C1]  <TASK>
[  158.411145][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  158.413654][    C1] RIP: 0010:lock_is_held_type+0x106/0x150
[  158.416000][    C1] Code: 1a 00 00 b8 ff ff ff ff 65 0f c1 05 24 ed 91 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7
[  158.423682][    C1] RSP: 0018:ffffc90003ae7838 EFLAGS: 00000206
[  158.426123][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046
[  158.429292][    C1] RDX: 0000000000000000 RSI: ffffffff8e20f5c5 RDI: ffffffff8c28a9e0
[  158.432676][    C1] RBP: 00000000ffffffff R08: ffffffff8222e0ac R09: ffffffff8ea9a180
[  158.435803][    C1] R10: ffffc90003ae7c20 R11: fffff5200075cf86 R12: 0000000000000246
[  158.439034][    C1] R13: ffff88810e54d880 R14: ffffffff8e95ce20 R15: ffff88810e54d880
[  158.442421][    C1]  ? fs_reclaim_acquire+0x7c/0x100
[  158.444536][    C1]  ? alloc_empty_file+0x5b/0x1d0
[  158.446618][    C1]  __might_resched+0x86/0x4d0
[  158.448614][    C1]  ? alloc_empty_file+0x5b/0x1d0
[  158.450719][    C1]  kmem_cache_alloc_noprof+0x73/0x650
[  158.452824][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  158.455001][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  158.457134][    C1]  alloc_empty_file+0x5b/0x1d0
[  158.459121][    C1]  path_openat+0x10f/0x3860
[  158.461095][    C1]  ? arch_stack_walk+0xfb/0x150
[  158.463118][    C1]  ? do_getname+0x2e/0x250
[  158.464943][    C1]  ? stack_trace_save+0xa9/0x100
[  158.466982][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  158.469187][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  158.471434][    C1]  ? do_getname+0x2e/0x250
[  158.473259][    C1]  ? stack_depot_save_flags+0x33/0x810
[  158.475652][    C1]  ? do_getname+0x2e/0x250
[  158.477634][    C1]  ? kasan_save_track+0x4f/0x80
[  158.479633][    C1]  ? kasan_save_track+0x3e/0x80
[  158.481737][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  158.483817][    C1]  ? __pfx_path_openat+0x10/0x10
[  158.485861][    C1]  ? register_lock_class+0x31/0x2e0
[  158.488043][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  158.490229][    C1]  do_file_open+0x23e/0x4a0
[  158.492115][    C1]  ? __pfx_do_file_open+0x10/0x10
[  158.494205][    C1]  ? _raw_spin_unlock+0x28/0x50
[  158.496206][    C1]  ? alloc_fd+0x64b/0x6c0
[  158.498004][    C1]  do_sys_openat2+0x113/0x200
[  158.500072][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  158.502191][    C1]  ? __se_sys_symlinkat+0x17e/0x2b0
[  158.504281][    C1]  ? kmem_cache_free+0x182/0x650
[  158.506337][    C1]  __x64_sys_openat+0x138/0x170
[  158.508395][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.511023][    C1]  do_syscall_64+0x174/0xf80
[  158.512951][    C1]  ? trace_irq_disable+0x3b/0x140
[  158.515026][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.517452][    C1] RIP: 0033:0x7f3f7115d68e
[  158.519287][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  158.527026][    C1] RSP: 002b:00007ffe9f8fa758 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  158.530509][    C1] RAX: ffffffffffffffda RBX: 0000555564bf2500 RCX: 00007f3f7115d68e
[  158.533617][    C1] RDX: 0000000000080001 RSI: 00007f3f71233d04 RDI: ffffffffffffff9c
[  158.536696][    C1] RBP: 00007f3f71233d04 R08: 0000000000000000 R09: 0000000000000000
[  158.540077][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  158.543260][    C1] R13: 00007ffe9f8fa830 R14: 00000000000269c0 R15: 00007ffe9f8fada0
[  158.546488][    C1]  </TASK>
[  158.547726][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  158.550621][    C1] CPU: 1 UID: 0 PID: 10355 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  158.554416][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.558421][    C1] Call Trace:
[  158.559811][    C1]  <IRQ>
[  158.561018][    C1]  vpanic+0x56c/0xa60
[  158.562588][    C1]  ? __pfx__printk+0x10/0x10
[  158.564422][    C1]  ? __pfx_vpanic+0x10/0x10
[  158.566255][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  158.568259][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  158.570390][    C1]  panic+0xc5/0xd0
[  158.571905][    C1]  ? __pfx_panic+0x10/0x10
[  158.573719][    C1]  __warn+0x315/0x4c0
[  158.575311][    C1]  ? __rate_control_send_low+0x524/0x800
[  158.577557][    C1]  ? __rate_control_send_low+0x524/0x800
[  158.579773][    C1]  __report_bug+0x29a/0x540
[  158.581615][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  158.583698][    C1]  ? rcu_is_watching+0x15/0xb0
[  158.585620][    C1]  ? __kasan_check_byte+0x12/0x40
[  158.587680][    C1]  ? __rate_control_send_low+0x524/0x800
[  158.589752][    C1]  ? __pfx___report_bug+0x10/0x10
[  158.591722][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  158.593817][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  158.595840][    C1]  ? kernel_text_address+0xa5/0xe0
[  158.598026][    C1]  report_bug_entry+0x19a/0x290
[  158.599856][    C1]  ? __rate_control_send_low+0x5bb/0x800
[  158.601991][    C1]  ? __rate_control_send_low+0x5c0/0x800
[  158.604110][    C1]  handle_bug+0xce/0x200
[  158.605759][    C1]  exc_invalid_op+0x1a/0x50
[  158.607554][    C1]  asm_exc_invalid_op+0x1a/0x20
[  158.609528][    C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  158.611948][    C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  158.619354][    C1] RSP: 0018:ffffc90000a086b8 EFLAGS: 00010246
[  158.621621][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  158.624724][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90414480
[  158.627760][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.630890][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888199872628
[  158.634013][    C1] R13: 0000000000000000 R14: ffffffff90414480 R15: ffff8881063b31b8
[  158.637194][    C1]  ? __rate_control_send_low+0x58d/0x800
[  158.639402][    C1]  rate_control_send_low+0x1a7/0x7b0
[  158.641428][    C1]  rate_control_get_rate+0x20b/0x5d0
[  158.643574][    C1]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  158.645970][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  158.648532][    C1]  ? __ieee80211_beacon_add_tim+0x1180/0x15a0
[  158.650971][    C1]  ? ieee80211_beacon_get_ap+0x8cb/0x2040
[  158.653165][    C1]  ieee80211_beacon_get_ap+0x196a/0x2040
[  158.655384][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  158.657653][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.659681][    C1]  ? lock_acquire+0x106/0x350
[  158.662124][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.664286][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.666385][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  158.668639][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  158.670890][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  158.673075][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  158.675541][    C1]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  158.677710][    C1]  __iterate_interfaces+0x2ab/0x590
[  158.679805][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  158.682253][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  158.685749][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  158.688149][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  158.690967][    C1]  mac80211_hwsim_beacon+0xbb/0x180
[  158.693094][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  158.695445][    C1]  __hrtimer_run_queues+0x3c0/0xa20
[  158.698030][    C1]  hrtimer_run_softirq+0x17a/0x240
[  158.700124][    C1]  handle_softirqs+0x22a/0x840
[  158.702053][    C1]  ? __irq_exit_rcu+0xca/0x220
[  158.704035][    C1]  __irq_exit_rcu+0xca/0x220
[  158.705909][    C1]  irq_exit_rcu+0x9/0x30
[  158.707579][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  158.709526][    C1]  </IRQ>
[  158.710639][    C1]  <TASK>
[  158.711851][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  158.714304][    C1] RIP: 0010:lock_is_held_type+0x106/0x150
[  158.716714][    C1] Code: 1a 00 00 b8 ff ff ff ff 65 0f c1 05 24 ed 91 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7
[  158.724211][    C1] RSP: 0018:ffffc90003ae7838 EFLAGS: 00000206
[  158.726500][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046
[  158.729419][    C1] RDX: 0000000000000000 RSI: ffffffff8e20f5c5 RDI: ffffffff8c28a9e0
[  158.733592][    C1] RBP: 00000000ffffffff R08: ffffffff8222e0ac R09: ffffffff8ea9a180
[  158.736710][    C1] R10: ffffc90003ae7c20 R11: fffff5200075cf86 R12: 0000000000000246
[  158.739643][    C1] R13: ffff88810e54d880 R14: ffffffff8e95ce20 R15: ffff88810e54d880
[  158.743741][    C1]  ? fs_reclaim_acquire+0x7c/0x100
[  158.745725][    C1]  ? alloc_empty_file+0x5b/0x1d0
[  158.747605][    C1]  __might_resched+0x86/0x4d0
[  158.749350][    C1]  ? alloc_empty_file+0x5b/0x1d0
[  158.751276][    C1]  kmem_cache_alloc_noprof+0x73/0x650
[  158.753280][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  158.755329][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  158.757311][    C1]  alloc_empty_file+0x5b/0x1d0
[  158.759886][    C1]  path_openat+0x10f/0x3860
[  158.761721][    C1]  ? arch_stack_walk+0xfb/0x150
[  158.763673][    C1]  ? do_getname+0x2e/0x250
[  158.765378][    C1]  ? stack_trace_save+0xa9/0x100
[  158.767417][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  158.770285][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  158.772511][    C1]  ? do_getname+0x2e/0x250
[  158.774387][    C1]  ? stack_depot_save_flags+0x33/0x810
[  158.776531][    C1]  ? do_getname+0x2e/0x250
[  158.778388][    C1]  ? kasan_save_track+0x4f/0x80
[  158.780393][    C1]  ? kasan_save_track+0x3e/0x80
[  158.782320][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  158.784438][    C1]  ? __pfx_path_openat+0x10/0x10
[  158.786442][    C1]  ? register_lock_class+0x31/0x2e0
[  158.788561][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[  158.790506][    C1]  do_file_open+0x23e/0x4a0
[  158.792976][    C1]  ? __pfx_do_file_open+0x10/0x10
[  158.794905][    C1]  ? _raw_spin_unlock+0x28/0x50
[  158.796621][    C1]  ? alloc_fd+0x64b/0x6c0
[  158.798274][    C1]  do_sys_openat2+0x113/0x200
[  158.800258][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  158.802292][    C1]  ? __se_sys_symlinkat+0x17e/0x2b0
[  158.804348][    C1]  ? kmem_cache_free+0x182/0x650
[  158.806348][    C1]  __x64_sys_openat+0x138/0x170
[  158.808309][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.810770][    C1]  do_syscall_64+0x174/0xf80
[  158.812718][    C1]  ? trace_irq_disable+0x3b/0x140
[  158.814799][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.817192][    C1] RIP: 0033:0x7f3f7115d68e
[  158.818981][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  158.826694][    C1] RSP: 002b:00007ffe9f8fa758 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  158.830150][    C1] RAX: ffffffffffffffda RBX: 0000555564bf2500 RCX: 00007f3f7115d68e
[  158.833448][    C1] RDX: 0000000000080001 RSI: 00007f3f71233d04 RDI: ffffffffffffff9c
[  158.836522][    C1] RBP: 00007f3f71233d04 R08: 0000000000000000 R09: 0000000000000000
[  158.840683][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  158.843874][    C1] R13: 00007ffe9f8fa830 R14: 00000000000269c0 R15: 00007ffe9f8fada0
[  158.847141][    C1]  </TASK>
[  158.849276][    C1] Kernel Offset: disabled
[  158.851055][    C1] Rebooting in 86400 seconds..
