last executing test programs:

1.450640168s ago: executing program 0 (id=3683):
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
close(r0)
sendto$inet(r3, &(0x7f0000000780)="8de32a12eacec4ecb22b382a8edbc5decbeb26b97585fbcae752aebd9019793f58e42c03c249c8ac60505770a1f8f88cbc27879e04f7", 0x36, 0x40, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000900000000000002", @ANYRES32=0x0, @ANYBLOB='0'], 0x50}, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x94b, 0x6, 0x40}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r4=>r1, 0x94b, 0x6, 0x40})
accept4(r4, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f0000000080)=0x80, 0x800)
r5 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) (async)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
splice(r2, 0x0, r1, 0x0, 0x30fea7, 0xa) (async)
splice(r2, 0x0, r1, 0x0, 0x30fea7, 0xa)

539.120246ms ago: executing program 0 (id=3687):
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000063"], 0x114}], 0x1}, 0x0)

538.551356ms ago: executing program 2 (id=3688):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 64)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=<r5=>0x0)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60)
close(r4) (async, rerun: 32)
close(0x4) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080), 0x4)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r10, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
write(r11, &(0x7f00000001c0)="b40ab29f61", 0x5)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) (async)
splice(r0, 0x0, r11, 0x0, 0x25a5, 0x0)

471.591383ms ago: executing program 0 (id=3689):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x36, 0x0, 0x6, 0x0, 0x2e}, 0x28)

470.026225ms ago: executing program 0 (id=3691):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000201a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0)

363.022434ms ago: executing program 1 (id=3693):
r0 = socket(0x1000000000000010, 0x80802, 0x0)
sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000000)="ec5a7c66c96cfe04c0babda621f97f9c789c8d92f84a08b5e2b5518b41e67ae9517947cb81f4c66b04f983e2774f10659d94ea304f1266", 0x37}, {&(0x7f0000000240)="acdb68d643a96902f75f908ece28789d39b2df446f111ba8cdc645bc2d7daf75423cd40239010a12dcbb7d44e633ed31199fff8696aeb6740d04d3f9bbe821f8ab8ea5e8a5c7d9d24c20a4dd8c26b5e87ba336deff2c20daf78ae76c7139be009020c71a55abd3cce7d6b67a656acd2a28252602d38f275f5bfe40b51848fd930a87611ed71ad74f464e8ea3cd80017bd8b731", 0x93}, {&(0x7f0000000300)="22cf590932cae7e6f5f03de5522fc04ba8540e224857902e0d53a1839cb54a70e260e0fbe3431d7b578cb5c1bd4a595a856aeea4af85184fd510bd9846f0302cd53fae943bbf2ea18ace5615d5d21455d5158003ddf630f745b0b6c879fd3dba32ab558df8ea767328ffdf763c94374ffab120f4665ff7d7408b385865f72bf598ef165bf7e19d78bd4910bafee20925e04823c651268b051a10cd8f9b47bf08a9", 0xa1}, {&(0x7f0000000100)}, {&(0x7f00000001c0)="d40fa37b05", 0x5}, {&(0x7f00000003c0)="b254223daaa606cd7b6a25b72a2fdce9c71ae47a0caa162134c33e3672fa97f513df5097eab767021b678c1d9794d8344cbdd1906c5edcebc241e13034bfe7d2b52d04ed14bd1ba6269c641ba53769cef0a340d13f108e096e69a9f932f7c3ab813f728303f3ea0845f53f480cd648a9037773ae0fb2f1fc686e38d9e0d2e22a5b84189853f84740b81b6a27f221cb9ac40ccde9c6cc567dfcf1752fdd3abb193063112af142e7dde08e9539b70db24f71b14b8f488ffe59775247ff15c18a4086b41fa11db00024652403a63a66e3501b7faad30ea8d81c1576f17a5edf792e", 0xe0}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="f71eacc7ef529f5eb24830f6da672b5770d4138d63bfdc4d5709d2d185c08e90be00b313d10b9ad64411b03864df0aa430ccb113b8e3e1017b6c29cc4ca00d99c3fa413eec2c812fec723f5055ebe4d3dbae46111c67bef0e9d5322177edc00ce1bcbb44569cc8e15433413264666df2b2648ed630f6f32ad51255199a63602d5743e00192b2ca43af12", 0x8a}, {&(0x7f0000001580)="76171a959e4c834dcdaeb3e2bd4fe9fe1accf6240bc3fc3c2336d6cde23ad7c83c7d75d6dbce99cf9bf2f86718f7b931c1dd9582384d616a5c812b4205a80df4b7bc1294a9fcf3ced036555128604f5759ec40a7e42329260b314f2d3aff90f886dc8ea1f080a07ba680faf318abb83339abe1", 0x73}], 0x9}, 0x1)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)

362.702908ms ago: executing program 2 (id=3694):
syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0)

292.913472ms ago: executing program 1 (id=3695):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x4)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x39000, 0x0)

292.323166ms ago: executing program 2 (id=3696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r4, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000c31e7a542b6944a2c77b0000000024a3b285e8ed17d82b0000000000000a58000000060a09040000000000000000020000002c000480280001800e000100696d6d65646961746500000014000280080002800400028008000140000000000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x80}}, 0x0)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0xce23, 0x7, @remote, 0x80000000}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0xce23, 0x7, @remote, 0x80000000}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'pimreg\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'pimreg\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x9, 0xffff5571, 0xffffcb85, 0x7, 0x24000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x9, 0xffff5571, 0xffffcb85, 0x7, 0x24000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r12, &(0x7f0000000840)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x5}, 0x1c) (async)
connect$inet6(r12, &(0x7f0000000840)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x5}, 0x1c)
connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)

191.53908ms ago: executing program 0 (id=3697):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100037040000000000000000fffffff5a70300000059ae7dff7d3401ff03000300000000750a001743c391198b335d77a44130074f0d66439225fedea6c5f66a7362bd034d994107d39e477bfa28606d1f98b815ed1d24b270e669d70229016f141fb75f0344aca832c96d5bb1213286d54a00df9daca355e8", @ANYRES32=0x0, @ANYBLOB="000000000000000020001280090001006970697000000000100002800800140002004000040013001400030074756e6c3000"/60], 0x54}}, 0x1020)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
write(r3, &(0x7f00000001c0)="b40ab29f61", 0x5)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

191.308345ms ago: executing program 1 (id=3698):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x36, 0x0, 0x6, 0x0, 0x5f}, 0x28)

188.932021ms ago: executing program 2 (id=3699):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0)

179.565368ms ago: executing program 1 (id=3700):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x10dc}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYBLOB="c512373a17f097355bd37938522db1d731b14e1c2915abba7b06bc0c2ca75e0fa90699b863dc21606b693a954cc59ae753dadbfcd51bb99cef78f72cbb7e095f82c5acc18feed108e6f2dbe62a88e5437191741269ea3b5ca56a4d1f1d4e54778a9a7e4cd8f7ffc6e4bdad6af4405bdb1438bc3d4be1eb4c2cb5f00eb9745a5a9b6d49d74c7da90789643b86350f4b602b9ae6459c213da065fff57c3021916d04fe2cc2d1c615cb7949bb8a77034b42d3aa3f725fe7388cf06e37cc7455cf1f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004b2b3fb354f480c4919c8916c8680dafc6c215a21941b6aab8f3b5c2886daee7283390d6e451f1b3067decc10c5a9e7724c24b540fe3611cb94a634d66efe55d951191029d9fcf783414db719a2e3fe66ff5485a405efbe1918faac46d14f64c4a66428b47f315e4d85876377af4636c5b2d62c5f86a188a919e544b181657fc8c34e15241c57299cefb6f03000000000000005266ba1eaa66842186ee3c17754a265fd1b3ce2d7542def5a0", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbb7251000000005000f000200000008000100a8"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)

88.458147ms ago: executing program 2 (id=3701):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="0b83df04aebc9ab0220bcea3a3f1797f5e0500758c95595194d18646c32a2e62a2ea95d8ef951b244dabcfc3361ead1dc86f16e25348b58f731e5c11f6e54412ef0022b60b794fb68dc1ebe03d77099d6e8a2d9e527f9185a6d264"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)

87.700482ms ago: executing program 1 (id=3702):
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900010000000000ff0000008020"], 0x24}}, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async)
unshare(0x68040200) (async)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket(0x1e, 0x4, 0x0) (async)
r9 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) (async)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r8, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

87.493868ms ago: executing program 0 (id=3703):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76872000200fbffeffeffffffffffff0a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000e89ed4a89a2269e840b7c66a323d6a00"/144]}, 0x108)
splice(r1, 0x0, r4, 0x0, 0x7, 0x5)
close(r3)
write$cgroup_int(r4, 0x0, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)="b5", 0x1}], 0x1)

12.602361ms ago: executing program 1 (id=3704):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000f00)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0}, 0x94)
accept4(r0, &(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001380)=0x80, 0x41000) (async)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x24)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="fb000000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250200000008006a000600000008003f0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x801) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001340)=ANY=[@ANYBLOB="ef04e23ab084af76fe8cd61e79", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRESHEX=0x0, @ANYBLOB], 0x1c}}, 0x0) (async)
bind$rxrpc(r2, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async)
r5 = socket(0xb, 0x3, 0x8) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket(0x5, 0x1, 0x0) (async)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, 0x0, 0x0) (async)
connect$phonet_pipe(r8, &(0x7f0000001300)={0x23, 0x2, 0x2}, 0x10) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x31, 0x53b, 0x70bd2b, 0x0, {0x9}}, 0x14}}, 0x0) (async)
accept4(r7, 0x0, &(0x7f0000000180), 0x80000) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040), 0x6) (async)
ioctl$sock_bt_hci(r9, 0x400448dc, 0x0) (async)
sendmsg$inet_sctp(r5, &(0x7f00000012c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="8a48fa7bb0310de262bd72ebd4f5ab", 0xf}, {&(0x7f0000000200)="df6818a8eed1f93d500f0aabaff35ba26311d056ba5ffc83c6b0ed6c60fc7f6af56dacf0c6cc35f8a5c9bd1e387ecfca492ab6542ceb335acca922cb67e63007f9b6f510177af0671a725e23eb0ca6a6000247fc4e334c4b997cebb6bad9bda48fc410b0b0ca1c7c50b59c08e801019684d4804e3d578047c03d08aa00ff30c7a4b819848149ecced043f787d7237800a1cd47709dd9b1f6637eb955549aa201917955c5728e2755e23b8fda3850278fd475efea79ed31a42682eeddbbe6eb7db59596e1a8c50507ebd5027e9a4e06b4735ae8aa7bbe1e4ea2b27582a95cd5bdbdd9da4eca154370fbbba204c6bbbb8ee9e6c0c9f55fe91956331fb08c0454bbd27599f4a070aec30886740725dbb732bd0c73f4425f69083fd796f04b36d971f8b21d32697834eccad6d55926d9465baf47119aa89d2a3b0a8c3acd34fa942553a17f37077182bda3736a8a49652455543cb765a431d546219125195f25bc1c440a158ca7cf3ae93e170b0471aa16a23d57d4cd00c38c43a0dddf8c8a647701a275c475e165f2d64dd8584134cfbcfeedf999fc1f57ab172ed0f3f8695234b05b1345e7f6350994e9b37a9eb8bf1b1e8bd26db8076bbd9f4c7ae639f4ab1347ff79a4ff8ab225c70dd7c9bd9842f9b822c4ff9daedc6cfa7d631a61ca8126d9315899cc0b9bf02d8f9fc2f8074cf48237a490a336640bd966c005e58fb4536a7edc8e3737211658c4a47494bf5e5b6e8cffd849c39d43b31c0b6a6c69e1a3c72b8e1473f5de6cddd98dabaec15e138ba8c28e5383579a8e2a73ec54561f0799a042e280f83de9aedd4d29aadcbe438ea104d28d19692ff4a877691652f0f504be6ce4a6379d6f25562c3dd50dbac7202d1460cfeba453009a2b846b00f0150b0fea489b9935bc320d5efb170b592ec12b59caf06015bfbe7f6fa3bf2764d6b6b4e309b1760fbfc58a8cf4de0410f934b3a30f941b4280a210d56934777663aae39b821e8323e70d54e983ce3af641981c80c8e2560af9e5041582c9bdc80a9e713c4880e69aab3d3d74ebf2844282c7a678c936a6bd9254ab49f41692aa4e85fc8d6a03315eb9ed14f69b3e35b74428df6dc7072469c63ddbb3812f7babdc100322e1810ec8a42f891f8905ba7096172114398f31142c0f8f4f0f550b971bd16483105869c7c89649cd77b30f11adf180600bd8e0e2563fe1fcfeb6ae307916033af973fec82c377a1c7f8ef10922b31031612706a0a6aefcec1c890be62cc0d24b47ca4820901dd77085ab45474cc5532085f038c471c6be472b3012a07f8262ab90d162e2d26332eaf9ed244cba2af26c48aee24c56e157afa65304c12c3e3fc82fb763562bbeba1cd9dade8e18a102b76982e20f6788ea34750d33b2f7e30de1f5a94749e146be5c56b69879c7f7970a3867d792b1d90d316d5544b8f3dddbeb5fbf6bb0517c0725e7acd6adc8d9576a46716feefe0668fb308fe948ff43a1846c51ba4931d415a4711a727463ffd402c08f5d7bc32293a4805487e149c86fbae1442b2141bbae514717a2ff195376f52647bd75a02f574fb20767637c2bcd0e9843faf73a1ae35691be150a9e0615dc84bc10417c4843e588e87095d14e4225a45705727e7f3ca89bdee71e71d482619fca22e3aebb90c4c4dbca4ce0ed0836a17e2d21724f14e8f208ef562e20863539aa3a91d77adb9c004cde1a507897d613804c5171ac0d9484b30ecce159539f981b5bb657c6ea3f87dacbf49a278c4a5202b89e4174e7e64c81666273233cd7d156be070860b6621c7e1b6e307bdba1bcae7797573b66011071653eeca780eb7f7b01ec526251705a5f223957ab75d988c99456fc53efebca6a852be11bc36966c35cb32e36ea976d2ee37c13d43b1d82a72909b801977e96049709a9f04039f18802be76ec04a268d9c1f08415e0e0f957a67663b525f28ee8beab8b5c989416bcadc13415cd65850c69f11ba229f65d9384b5710567ccea435807acf2637bb5d66b31810dce4cfda67503efd65793b90991ea79f8880877d4ed773e604e140f82608361534c129ea139686c325b7fa8377367c852975a2af15600ce61aaf9fe1920f2006e99291d8f9a3a8cb4a59a6ae03bebd32e3670eacc2117b9ee48113b8bc6296400bc12175f22e5e5d6cecda83338916b3b4bb05041cbd69922e8244f9efacd78afeb0c551432917c2b70b0a2e3d12dab0d7e2b4b39ed3bdb5963de5c6ad9fcdfe78865f8fd1d7d0feefcb913ae0c3efaed92414d06a8aa74aadf73855a39dbe2c53304d3dbbd8be684dca0f85d38543a7d12ec4f3e868acadc7f27516846a47dcbb055827831beef2de005e6d005de9549ba3e7ff781cdf0f0a5e986bb0e48d704aae7207125a2cf1cad44c0e0f8aced305f1664a0a58f5665cb7ddb777e3219d0483a10df3769a30b6ee6570a799b9e45a9ddd0b3abd86f810fdf3cb979efb00c3720439b87274e10864f50038c9e723c16340805ae0b0e0f1544658cc3e9a663f3fb4bb4190104c225ea8f68ad397879e8af1b06b551066c0b0878e3c5100b46d74bfc2e5c1b4e30f9fba49bef6c7a85436fc063e014ebcfcb08cbfd9928f4954c0605162d886267a4b6e114091b70c6cdd4e65e6091a14cc5ce0fd2b5159fb04fafbf6974d8264f4c9b22fcf1911748c74375391aaa32676f5b1bfa4a8bb68ced6c4b7278de363fb508f0e6bf42f86cb67ac008a312d9b29647c8438434147fe0276c637494a22c0d2890afc5c6496f8340ecb87bce920f559ecdc39e6e99f2d3c8ef25902aa53745c4d581eee1e73fc3d622cf8bc3c53ca085a205cbadb16baa2fe93aa5c77a99786d72c16eeaf517d821639ca23319b28c3b25bc350dac418814db7e089de266a2cf4df7773de22e6c6acf392c576152d6356cf0ec0e8cc48b8750546f218462ebb33feb4b8e62a2a1023d522e2a7df929f714c58eefda13af61ff5a9e6dc8906a36e907e96c572b0537d3272de776ab78df42a73e6e1b2dd9e53309444567701a6e0248632050ea619ff08b3f0efb0e739b3a1dca6a4002551d58a8ca96d6a217123eec27f59835b739a539ad53389a1e1273cae29e2980d1ae78dd85b200d66baaf5d5817f21a7c02e2d140ee83f82a09283ca8ba78c7c73571ca94362536eb04efc0517d9ebacde220676b05b06255e972c1b266bac9795454e538d7af0a6418755a7e360f66baa2a276b0796b72082fe29810946ef9ffff993893e7150c7f64d1c1d69223e0b57edb4810d5f03ade47d46cb29910e2a697c4a07a3d063d0382e3fe58b8a5336a25c3bfc2cdea39342286db9dafb9a99c3e49dc47a7d3b04487afaa063002cf148b767ad66ac7cded4d0c3adf18fd04a2651ebed2832a99b950847efe0b7e704ddf4ebe85a4bb172789252c8586f6728355dcd4ca78e3ef40917372a8944ef8471158139bdb666a1abe30fd8151b8be53bbd4fd3c210badc51ff277ce55364f754b80dd86f26ffc6a57b7daaeb202f71568097a2ed34378c1dc28f755ba2f053c0e990365375c9c2cacb484690cd65d9182a947f54e69bbc2d4f7deb5d1ed76212554df165672d87ed0acadadcf8dfd793178d9bffa9c3c44813aeee4753b573dfebb10e57d181a566c410bb8c021411d3461245abb2974972b9ff34ac11d1d1008b4bd5cb680c0456da330a933cf6fe668b96e0c3a6771b01b5e9dba4cf1273bb27803ff8942fc8406e3630ae1042b50624356f4b48131ead21c73bebd3be3cb5f68b18458a847fd101f834fd6d7c738b2e485a0adeae9d26b87d9d56ba12082a73b0fc77248768ec1edcc51a64589fe670701fa68547d1d894eaf9446c46911c0ee47dba38bb33bb93a766ea01813ddc88c1521ed6961935a7c3e0cb3b0b9110470bd6b0e842ab2758e059df9ca4457118925bcc2917e1d509b86f3c29021d12be6442d28c81b9cea119608a869ea8118a33d3a4663d9932e2e04c59fd9fa005c02b9c843f2b6357cbde3a96d3d029cafb94f570aa4031f462c9289477aff334dabdc3a1b2d7f5e09fd4259f59a966174fdfd950bb0f4e8bac82166b8aa8a0288df69e777bc6fa1a2a36f322946f126d4eb0bfb1485b26155c8c9f52ec1c99a2bba543cf4ef6f79cf3edf1ccf9fd27b9fffe2ee8a85bbdad10e784be51a41ecfc72a7438ad71f0c693715898f054d5edc7382a7ab228d0e2e7bf40c64655a1564d1ed7cc22631ba19b42db8915b76de308fb0db064d4513b0382881dd2065e31c7711b9ed0490fab876f1b50326440efde94b264efdc4cc35f826a9ecf20165af2524f1133cbc3c4e5e1ce8bc70f3eda629126528d68d2b9f61dffb3ee7ef3611f63a3f9a32ce314af8ccb6d896ef6209c6319d0bbcb4926e64039dc862790125a31e86a3a6d0bfd3ca95af6fa51c81ec85911aa3c6e05455e8a324377bbbbbc644145407e43fc5956865f0f4b613bb7b629f6473a400f0ec9197d46d8074efd1f5d079132eec1ea261818a267feefe0b50050f5669869b09b2899039ecbfeb305d5c996f5adb298e01a7ac0b44f0baa66a8ee1bb0c973a5af6f1628ab640ffc6d0730bfa97b693e19176d5109fc5cc58cbd6920df41113d69d62dae47516c636e20419734e3a553343780f69a45928c79217bf94c6e70c72925c6d6623b8eb49fda0bd7eb58c96a9f259ccef76e0686cb11f8d45804a357afde263ad2592c4dbee04c5f0ec12465605c0801342c5a7b2272827990bd628bd8905807781a7f3e2c7314011367f3a106401fd581cb98a9a4b6fe11821b4214b5ace583f8176486820b2c9d2bf53da65ebe15b9e11fcd46f037e5ab7d1876df39a3e05dafeb67fce352ad36739e97daec03af501601d14a9214cdb2d164e223b44ead90515a32ca9d78a103cd5c790885c0c7f3ac04e34d93de2585a644385e1bf7860469557899a1041f6ae2aae49edba292aa97bdd15dac2db8791ad091c6cab8695a6da39e176acf8cb816d7de042b5ba327ac6f0b6b619c09e9f3f291b63ab8f6d19bb81559b7ee5a296b3c34033982beb72a382856ecca54be00bb3ab029e0ece32498c553a5a2de1b3874a63f9a8a673bf1403c3449cb90b0345ffc28e8e97ada07925e21ed3e1053c29f68e9fbf3e08a6bb9095dd2ded703de5f2a522470deeff697268afbf3c732dd45e027f68338ac9337f2c718a95dba06feaf34c45e710437d481edaa933189d8612c256c051169cca50c0460fc226901bcc47e1b25e03678a6142c7c7b7e071fdc611ecc0e44a7e11979fb24af22de71d3a1d793b8033eae68c1488fd81ea3c8a29d8fe57a06d166a50c2ec2974c5aaaf1b9adb759e96ab1e6bbf0bab4beeb68dbbbb7dee35bd1595d835418bbc5f2507f88792dc55e42f3ab2210402b33fe96a58b72d1b579ab21a6637b01a5090bf2dee2e4734fab691b3934965d1c89fe3969fa54c79731f5df805e51100ec2bd5d49b20f16c739ae8d5da4aa558a63c594dab2306068df1420991fd84368375cc13367920fc1ca43c5fa6da938ddb5c35ba7caca77c03fd65dfc1ef29cf4c82037819d90061dbe0a05bf84b1a764096b7b2b631090cd5fa6309250a45f2d0cc2463aec05b5c40c89844be4387774fe35d0f55ecbbe3bfb61021050b8e27a8d012362f116cbb1923dbf46a0fb06514c4ed4af7aff96a871e55e7caeb17f74849cbb3f81d732c5d7b5bccda1ef8170cebff841cca5b167aaff6c83314e048866904f4afe6f068b73ad2b8b2721ccbabe934ec9870d3af4b80a46d6f9b6ee66b0d942cf04", 0x1000}], 0x2}, 0x0) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
shutdown(r0, 0x1)

0s ago: executing program 2 (id=3705):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x18, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0xb, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0x5}, 0x94) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0xb, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='`#?v', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYBLOB="80d2c6fffaf6cb1b6be6d814630535664d3371e70ccd78ac4038850f7dc178b4", @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c09000004004600cc005180900000800400050009000100fa06ba7b1100000008000700010000001100010052de00e117a7a8bb12d132118800000005000900000000000d000400147a3a26423bfae26500000020000880040002000400020004000200040001000400010004000100040001001100010021dc7a8c3b178f6374b4c0c9d6000000110001007884a30641869be29c535d13c3000000040000802000008011000100d7f78bf48e6d00033b3312d710000000050002000200000014000080050009000200000008000300037a0800"], 0x114}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x2a)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000900)=ANY=[@ANYBLOB="b0000000080011000001080211000000080211001245a5193b4c7e86f5132464c051235ff260eaf08caf7f9f7963a034ac3f7cced9b233232f6402dd37e54872b5e1a094f21105915eec6f41663f6dcf23cd213cb00bc0209ee1d590e56cc0f448189b6b140605737ad64d0ecab8e63e5dd3e65f9f575c13356972cfa10b46df7406b6aa5560120ab04ab5799b"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000780)) (async)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000780))

kernel console output (not intermixed with test programs):

x timeout
[  283.501801][ T5221] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  283.550166][T12220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1599'.
[  283.574945][T12220] veth0_to_bond: left allmulticast mode
[  283.578185][T12220] veth0_to_bond: left promiscuous mode
[  283.580898][T12220] bridge2: port 2(veth0_to_bond) entered disabled state
[  283.591696][T12220] veth9: left allmulticast mode
[  283.604493][T12220] veth9: left promiscuous mode
[  283.606705][T12220] bridge2: port 1(veth9) entered disabled state
[  283.994744][T12249] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  283.998777][T12249] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.198879][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1613'.
[  284.202202][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'.
[  284.853671][T12286] netlink: 'syz.1.1619': attribute type 83 has an invalid length.
[  285.144743][T12316] pimreg3: entered allmulticast mode
[  285.166426][T12318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1627'.
[  285.264744][T12326] tipc: Failed to remove unknown binding: 66,1,1/0:1695287096/1695287098
[  285.270138][T12326] tipc: Failed to remove unknown binding: 66,1,1/0:1695287096/1695287098
[  285.274339][T12326] tipc: Failed to remove unknown binding: 66,1,1/0:1695287096/1695287098
[  285.365283][T12329] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  285.371495][T12329] Bluetooth: MGMT ver 1.23
[  285.437272][T12331] pim6reg1: entered promiscuous mode
[  285.439768][T12331] pim6reg1: entered allmulticast mode
[  285.573840][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  285.578061][ T5221] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  287.642198][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  288.245412][T12371] net_ratelimit: 98 callbacks suppressed
[  288.245424][T12371] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  288.250775][ T5898] IPVS: starting estimator thread 0...
[  288.352098][T12373] IPVS: using max 79 ests per chain, 189600 per kthread
[  288.363799][T12375] netlink: 'syz.1.1642': attribute type 32 has an invalid length.
[  288.746012][T12395] __nla_validate_parse: 2 callbacks suppressed
[  288.746029][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'.
[  288.990983][T12403] netlink: 'syz.0.1650': attribute type 4 has an invalid length.
[  288.996067][T12403] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1650'.
[  290.314467][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'.
[  290.321274][T12481] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1662'.
[  290.639367][T12496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1667'.
[  290.685132][T12498] netlink: 'syz.2.1668': attribute type 32 has an invalid length.
[  290.747587][T12504] netlink: 'syz.0.1669': attribute type 10 has an invalid length.
[  291.005501][T12526] veth1: left promiscuous mode
[  291.025095][T12526] bond3: (slave vlan0): Releasing active interface
[  292.099661][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'.
[  292.103704][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1681'.
[  292.107587][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'.
[  292.111199][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1681'.
[  292.115960][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'.
[  295.359313][T12597] syzkaller1: entered promiscuous mode
[  295.361344][T12597] syzkaller1: entered allmulticast mode
[  295.445723][T12599] __nla_validate_parse: 1 callbacks suppressed
[  295.445739][T12599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'.
[  295.799984][T12610] netlink: 'syz.2.1697': attribute type 21 has an invalid length.
[  295.803434][T12610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1697'.
[  295.811756][T12610] Unknown status report in ack skb
[  295.841889][T12612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  295.897778][T12613] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1698'.
[  296.540896][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'.
[  296.544611][T12623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  296.550807][T12623] x_tables: duplicate underflow at hook 1
[  296.717170][T12629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1704'.
[  296.725401][T12629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'.
[  296.728786][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1704'.
[  296.789561][T12636] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.1707'.
[  296.936359][T12659] wg1 speed is unknown, defaulting to 1000
[  297.167663][T12672] netlink: 'syz.1.1714': attribute type 1 has an invalid length.
[  297.170822][T12672] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1714'.
[  297.180274][T12672] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  297.871806][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'.
[  298.933654][T12739] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  299.715489][T12768] netlink: 'syz.2.1739': attribute type 32 has an invalid length.
[  299.900005][T12784] syzkaller1: entered promiscuous mode
[  299.903113][T12784] syzkaller1: entered allmulticast mode
[  300.136186][T12799] ipvlan0: entered promiscuous mode
[  300.138488][T12799] ipvlan0: entered allmulticast mode
[  300.140706][T12799] batadv0: entered allmulticast mode
[  300.146606][T12799] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  300.841596][T12812] __nla_validate_parse: 4 callbacks suppressed
[  300.841607][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'.
[  300.985612][T12821] netlink: 'syz.2.1749': attribute type 4 has an invalid length.
[  302.235657][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'.
[  302.239541][T12856] netlink: 'syz.0.1759': attribute type 5 has an invalid length.
[  302.243746][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1759'.
[  302.250410][T12856] geneve3: entered promiscuous mode
[  302.254077][T12856] geneve3: entered allmulticast mode
[  302.257483][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  302.260588][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  302.264871][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  302.267536][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  302.907854][T12872] netlink: 'syz.2.1763': attribute type 1 has an invalid length.
[  303.033941][T12878] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.037240][T12878] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.041116][T12878] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  303.097787][T12878] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.101270][T12878] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.105675][T12878] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  303.157966][T12878] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.165500][T12878] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.168668][T12878] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  303.187588][T12884] wg1 speed is unknown, defaulting to 1000
[  303.216118][T12878] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.219266][T12878] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.224001][T12878] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  303.294189][T12889] xt_limit: Overflow, try lower: 0/0
[  303.299917][   T33] audit: type=1800 audit(1753364722.073:2): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1767" name="@" dev="tmpfs" ino=3120 res=0 errno=0
[  303.350338][ T5867] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  303.353497][ T5867] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  303.359690][ T5867] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  303.395668][ T5867] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  303.398567][ T5867] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  303.401195][ T5867] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  303.435602][ T5867] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  303.438330][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  303.441009][ T5867] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  303.452820][ T5867] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  303.456110][ T5867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  303.460817][ T5867] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  303.487135][T12897] syzkaller1: entered promiscuous mode
[  303.489506][T12897] syzkaller1: entered allmulticast mode
[  303.491068][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1771'.
[  303.705622][T12910] netlink: 'syz.0.1773': attribute type 13 has an invalid length.
[  303.709179][T12910] netlink: 'syz.0.1773': attribute type 17 has an invalid length.
[  303.761865][T12910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  304.678341][T12947] netlink: 'syz.0.1778': attribute type 32 has an invalid length.
[  304.818573][T12965] bridge0: failed insert local address into bridge forwarding table
[  305.168356][T12976] veth1_vlan: left allmulticast mode
[  305.227043][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.229779][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  305.238808][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  305.241573][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.247662][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  305.250304][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  305.253267][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.258349][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  305.262872][T13006] netlink: 'syz.2.1787': attribute type 32 has an invalid length.
[  305.272338][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  305.275112][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.277763][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  305.280364][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  305.301078][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1788'.
[  305.635040][T13031] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1793'.
[  305.639124][T13031] 0: renamed from hsr0 (while UP)
[  305.644002][T13031] 0: entered allmulticast mode
[  305.646219][T13031] hsr_slave_0: entered allmulticast mode
[  305.648646][T13031] hsr_slave_1: entered allmulticast mode
[  305.651557][T13031] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  306.004276][T13037] IPv6: sit2: Disabled Multicast RS
[  306.006650][T13037] sit2: entered allmulticast mode
[  306.352936][T13055] vlan2: entered promiscuous mode
[  306.354902][T13055] vlan2: entered allmulticast mode
[  306.356704][T13055] hsr_slave_1: entered allmulticast mode
[  306.414076][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'.
[  306.443564][ T1376] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  306.511336][T13059] netlink: 'syz.2.1799': attribute type 1 has an invalid length.
[  307.522155][T13087] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1805'.
[  307.691731][T13104] netlink: 410 bytes leftover after parsing attributes in process `syz.0.1809'.
[  307.825960][T13126] bridge0: port 1(syz_tun) entered blocking state
[  307.828861][T13126] bridge0: port 1(syz_tun) entered disabled state
[  307.834052][T13126] syz_tun: entered promiscuous mode
[  307.961279][T13142] wg1 speed is unknown, defaulting to 1000
[  307.997080][T13144] wg1 speed is unknown, defaulting to 1000
[  308.259558][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  308.757852][T13167] netlink: 'syz.1.1826': attribute type 9 has an invalid length.
[  308.760588][T13167] netlink: 'syz.1.1826': attribute type 7 has an invalid length.
[  308.763934][T13167] netlink: 'syz.1.1826': attribute type 8 has an invalid length.
[  308.770219][T13167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.773352][T13167] syzkaller0: entered promiscuous mode
[  308.775174][T13167] syzkaller0: entered allmulticast mode
[  308.785907][T13167] tipc: Resetting bearer <eth:syzkaller0>
[  308.796936][T13169] tipc: Resetting bearer <eth:syzkaller0>
[  308.804774][T13169] tipc: Disabling bearer <eth:syzkaller0>
[  310.442213][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  310.444918][ T5221] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  310.774697][T13228] bridge_slave_0: left allmulticast mode
[  310.776825][T13228] vlan0: left promiscuous mode
[  310.778777][T13228] gretap1: left promiscuous mode
[  310.780578][T13228] vxlan0: left promiscuous mode
[  310.783805][T13228] vxlan0: left allmulticast mode
[  310.785999][T13228] ip6tnl1: left promiscuous mode
[  310.788164][T13228] ip6tnl1: left allmulticast mode
[  310.790114][T13228] geneve2: left promiscuous mode
[  310.792215][T13228] macvlan3: left allmulticast mode
[  310.794123][T13228] ipvlan2: left promiscuous mode
[  310.796341][T13228] geneve3: left promiscuous mode
[  310.798567][T13228] geneve3: left allmulticast mode
[  310.800631][T13228] vlan2: left promiscuous mode
[  310.802780][T13228] vlan2: left allmulticast mode
[  310.804525][T13228] hsr_slave_1: left allmulticast mode
[  311.053935][T13234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1844'.
[  312.586440][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'.
[  312.618679][T13247] netlink: 'syz.2.1847': attribute type 1 has an invalid length.
[  312.648221][T13247] bond5: entered promiscuous mode
[  312.650281][T13247] 8021q: adding VLAN 0 to HW filter on device bond5
[  312.668441][T13247] 8021q: adding VLAN 0 to HW filter on device bond5
[  312.671538][T13247] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  312.675736][T13247] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  312.684636][T13247] bond5: (slave wireguard0): making interface the new active one
[  312.688245][T13247] wireguard0: entered promiscuous mode
[  312.690883][T13247] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[  312.699185][T13247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  312.702380][T13247] IPv6: NLM_F_CREATE should be set when creating new route
[  312.705356][T13247] IPv6: NLM_F_CREATE should be set when creating new route
[  312.711473][T13247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  312.721561][T13247] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address
[  312.729641][T13247] bond5: (slave wireguard1): Enslaving as a backup interface with an up link
[  312.958247][T13260] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1849'.
[  314.140996][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1854'.
[  314.439121][T13279] 8021q: adding VLAN 0 to HW filter on device bond9
[  314.726703][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'.
[  314.730028][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1860'.
[  314.891111][T13314] gre5: entered allmulticast mode
[  315.265961][T13348] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1870'.
[  315.269313][T13348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1870'.
[  315.275038][T13350] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1870'.
[  315.279183][T13350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1870'.
[  315.289357][T13348] rdma_rxe: rxe_newlink: failed to add lo
[  315.974273][T13377] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  315.978893][T13377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1877'.
[  315.994055][T13378] xt_bpf: check failed: parse error
[  316.011714][T13381] netlink: 'syz.1.1878': attribute type 1 has an invalid length.
[  316.126108][T13388] syzkaller1: entered promiscuous mode
[  316.128432][T13388] syzkaller1: entered allmulticast mode
[  316.311172][T13402] netlink: 'syz.0.1881': attribute type 20 has an invalid length.
[  316.326178][T13402] netlink: 'syz.0.1881': attribute type 20 has an invalid length.
[  316.327711][T13401] netlink: 'syz.1.1882': attribute type 3 has an invalid length.
[  316.333847][T13401] netlink: 'syz.1.1882': attribute type 3 has an invalid length.
[  316.337800][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.341384][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.347790][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.351222][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.686861][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.776135][T13414] mac80211_hwsim hwsim4 ": renamed from wlan0
[  317.508056][T13462] netlink: 'syz.2.1899': attribute type 1 has an invalid length.
[  317.577209][T13463] xt_CT: No such helper "snmp"
[  317.924434][T13475] __nla_validate_parse: 70 callbacks suppressed
[  317.924452][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  318.143754][T13495] x_tables: duplicate underflow at hook 3
[  318.381522][T13515] SET target dimension over the limit!
[  318.677999][T13535] syzkaller1: entered promiscuous mode
[  318.680159][T13535] syzkaller1: entered allmulticast mode
[  318.683295][T13535] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  319.026293][T13559] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1914'.
[  319.034891][T13559] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1914'.
[  319.039613][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'.
[  319.518494][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'.
[  319.521479][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'.
[  319.524951][T13570] netlink: 'syz.0.1918': attribute type 19 has an invalid length.
[  319.529932][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'.
[  319.535008][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'.
[  319.539065][T13576] netlink: 'syz.0.1918': attribute type 19 has an invalid length.
[  319.957166][T13600] sctp: [Deprecated]: syz.0.1924 (pid 13600) Use of int in max_burst socket option.
[  319.957166][T13600] Use struct sctp_assoc_value instead
[  320.501652][T13606] netlink: 'syz.1.1926': attribute type 4 has an invalid length.
[  320.508611][T13606] netlink: 'syz.1.1926': attribute type 4 has an invalid length.
[  320.553909][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'.
[  320.557726][T13608] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1927'.
[  320.629870][T13615] pim6reg: entered allmulticast mode
[  320.666832][T13617] netlink: 'syz.1.1930': attribute type 23 has an invalid length.
[  322.407992][T13704] syzkaller1: entered promiscuous mode
[  322.412150][T13704] syzkaller1: entered allmulticast mode
[  322.668659][T13733] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  322.897057][T13747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.538269][T13761] __nla_validate_parse: 9 callbacks suppressed
[  323.538281][T13761] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1969'.
[  324.236603][T13773] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  324.331398][T13776] netlink: 'syz.1.1972': attribute type 13 has an invalid length.
[  324.335736][T13776] netlink: 'syz.1.1972': attribute type 17 has an invalid length.
[  324.344681][T13776] erspan0: left allmulticast mode
[  324.357620][T13776] bridge0: port 1(syz_tun) entered blocking state
[  324.359826][T13776] bridge0: port 1(syz_tun) entered listening state
[  324.365829][T13776] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.370003][T13776] 8021q: adding VLAN 0 to HW filter on device team0
[  324.374222][T13776] tipc: Resetting bearer <eth:team0>
[  324.376027][T13776] tipc: Resetting bearer <eth:team0>
[  324.381403][T13776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  328.524784][T13820] netlink: 'syz.2.1983': attribute type 32 has an invalid length.
[  328.642699][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1984'.
[  328.643017][T13832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1984'.
[  328.896624][T13843] syzkaller0: entered promiscuous mode
[  328.898890][T13843] syzkaller0: entered allmulticast mode
[  329.061386][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'.
[  329.438006][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'.
[  330.827072][T13873] netlink: 'syz.2.1996': attribute type 10 has an invalid length.
[  330.829689][T13873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1996'.
[  330.840105][T13873] dummy0: entered promiscuous mode
[  330.842844][T13873] dummy0: entered allmulticast mode
[  330.845996][T13873] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  330.893897][T13882] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  330.908127][T13886] macsec3: entered allmulticast mode
[  330.910211][T13886] macsec0: entered allmulticast mode
[  331.089548][T13903] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2005'.
[  331.613590][T13924] syzkaller0: entered promiscuous mode
[  331.615660][T13924] syzkaller0: entered allmulticast mode
[  331.837860][T13932] netlink: 'syz.0.2013': attribute type 29 has an invalid length.
[  331.844003][T13932] netlink: 'syz.0.2013': attribute type 29 has an invalid length.
[  331.848197][T13932] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2013'.
[  331.852679][T13932] unsupported nla_type 58
[  331.857117][T13932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2013'.
[  332.580123][T13945] netlink: 'syz.2.2018': attribute type 33 has an invalid length.
[  332.585182][T13945] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2018'.
[  332.743382][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2021'.
[  332.893158][T13958] wg1 speed is unknown, defaulting to 1000
[  332.989029][   T33] audit: type=1800 audit(1753364751.763:3): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2023" name="memory.events" dev="tmpfs" ino=3655 res=0 errno=0
[  333.250685][T13978] netlink: 'syz.0.2027': attribute type 32 has an invalid length.
[  333.568611][T13991] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  333.986944][T14003] __nla_validate_parse: 6 callbacks suppressed
[  333.986962][T14003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2032'.
[  334.257922][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'.
[  334.440710][T14022] Cannot find del_set index 2 as target
[  335.179301][T14036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.185051][T14036] syzkaller0: entered promiscuous mode
[  335.186957][T14036] syzkaller0: entered allmulticast mode
[  335.205505][T14036] tipc: Resetting bearer <eth:syzkaller0>
[  335.210483][T14035] tipc: Resetting bearer <eth:syzkaller0>
[  335.221381][T14035] tipc: Disabling bearer <eth:syzkaller0>
[  335.334223][T14043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  335.442380][T14053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2048'.
[  335.478665][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2049'.
[  335.481687][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2049'.
[  335.497221][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2049'.
[  335.510434][T14058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2050'.
[  335.514291][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'.
[  335.572472][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2050'.
[  335.576162][T14059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2050'.
[  336.212900][T14061] xt_hashlimit: size too large, truncated to 1048576
[  336.539839][T14074] netlink: 'syz.2.2055': attribute type 32 has an invalid length.
[  336.809623][T14102] wireguard0: entered promiscuous mode
[  336.811607][T14102] wireguard0: entered allmulticast mode
[  337.397470][T14124] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  337.400057][T14124] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  337.421289][T14125] bridge0 (unregistering): left promiscuous mode
[  337.714564][T14140] veth0_to_team: entered promiscuous mode
[  337.717045][T14140] veth0_to_team: entered allmulticast mode
[  337.802206][ T6546] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  338.194260][T14172] wg1 speed is unknown, defaulting to 1000
[  338.540452][T14182] lo speed is unknown, defaulting to 1000
[  338.546088][T14182] lo speed is unknown, defaulting to 1000
[  338.549442][T14182] lo speed is unknown, defaulting to 1000
[  338.663306][T14182] infiniband syz0: set down
[  338.665558][ T5890] lo speed is unknown, defaulting to 1000
[  338.667555][T14182] infiniband syz0: added lo
[  338.670353][T14182] syz0: rxe_create_cq: returned err = -12
[  338.672774][T14182] infiniband syz0: Couldn't create ib_mad CQ
[  338.674824][T14182] infiniband syz0: Couldn't open port 1
[  338.686031][T14182] RDS/IB: syz0: added
[  338.687591][T14182] smc: adding ib device syz0 with port count 1
[  338.689617][T14182] smc:    ib device syz0 port 1 has pnetid 
[  338.693416][ T5890] lo speed is unknown, defaulting to 1000
[  338.695591][T14182] lo speed is unknown, defaulting to 1000
[  338.811481][T14182] lo speed is unknown, defaulting to 1000
[  338.907258][T14182] lo speed is unknown, defaulting to 1000
[  339.068064][T14187] __nla_validate_parse: 11 callbacks suppressed
[  339.068075][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'.
[  339.318353][T14196] wg1 speed is unknown, defaulting to 1000
[  339.324529][T14196] lo speed is unknown, defaulting to 1000
[  339.908656][T14213] wg1 speed is unknown, defaulting to 1000
[  339.912577][T14213] lo speed is unknown, defaulting to 1000
[  339.912632][T14212] wg1 speed is unknown, defaulting to 1000
[  340.004438][T14212] lo speed is unknown, defaulting to 1000
[  340.325730][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'.
[  340.568621][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2096'.
[  340.571559][T14224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2096'.
[  340.578463][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'.
[  340.688654][T14234] netlink: 'syz.2.2099': attribute type 10 has an invalid length.
[  340.691238][T14234] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2099'.
[  340.701195][T14234] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  340.710901][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2099'.
[  340.714028][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'.
[  340.722884][T14234] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  340.855818][T14246] netlink: 'syz.2.2102': attribute type 83 has an invalid length.
[  340.910093][T14253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.927249][T14253] tipc: Disabling bearer <eth:syzkaller0>
[  341.208925][T14264] netlink: 'syz.0.2106': attribute type 1 has an invalid length.
[  341.280678][T14265] wg1 speed is unknown, defaulting to 1000
[  341.283617][T14265] lo speed is unknown, defaulting to 1000
[  342.058688][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'.
[  343.123839][T14310] netlink: 'syz.2.2119': attribute type 32 has an invalid length.
[  343.334754][T14323] netlink: 'syz.2.2122': attribute type 7 has an invalid length.
[  343.675164][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2126'.
[  344.232603][T14349] netlink: 'syz.2.2129': attribute type 4 has an invalid length.
[  344.241374][T14349] netlink: 'syz.2.2129': attribute type 1 has an invalid length.
[  344.246473][T14349] netlink: 'syz.2.2129': attribute type 4 has an invalid length.
[  344.545956][T14357] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  344.549940][T14357] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  344.799392][T14360] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2132'.
[  345.026511][T14367] C: renamed from team_slave_0
[  345.031029][T14367] netlink: 'syz.1.2134': attribute type 1 has an invalid length.
[  345.034485][T14367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2134'.
[  345.038587][T14367] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  345.047731][T14367] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2134'.
[  345.054505][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2134'.
[  345.287385][T14378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.290708][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'.
[  345.294908][T14378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2137'.
[  345.515705][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'.
[  345.658824][   T33] audit: type=1804 audit(1753364764.433:4): pid=14400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2145" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=3360 res=1 errno=0
[  345.668392][   T33] audit: type=1800 audit(1753364764.433:5): pid=14400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2145" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=3360 res=0 errno=0
[  346.200387][T14411] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2148'.
[  346.247136][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'.
[  346.251113][T14411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.444014][    C1] bridge0: port 1(syz_tun) entered learning state
[  370.231827][T14428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2151'.
[  370.246248][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'.
[  370.307207][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'.
[  371.316350][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'.
[  371.316400][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'.
[  371.349554][T14478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.353494][T14479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.370944][T14479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2164'.
[  371.371029][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2164'.
[  371.426990][T14478] netlink: 'syz.1.2164': attribute type 1 has an invalid length.
[  371.430516][T14478] netlink: 'syz.1.2164': attribute type 2 has an invalid length.
[  371.435330][T14478] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2164'.
[  371.865601][T14521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.869279][T14521] syzkaller0: entered promiscuous mode
[  371.871675][T14521] syzkaller0: entered allmulticast mode
[  372.684705][T14520] tipc: Resetting bearer <eth:syzkaller0>
[  372.698489][T14520] tipc: Disabling bearer <eth:syzkaller0>
[  373.092536][T14551] ipt_ECN: cannot use operation on non-tcp rule
[  373.280853][T14555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.284645][T14555] syzkaller0: entered promiscuous mode
[  373.287070][T14555] syzkaller0: entered allmulticast mode
[  373.317685][T14555] tipc: Resetting bearer <eth:syzkaller0>
[  373.378060][T14556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'.
[  373.997919][T14563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2185'.
[  374.104634][T14554] tipc: Resetting bearer <eth:syzkaller0>
[  374.117475][T14554] tipc: Disabling bearer <eth:syzkaller0>
[  374.240231][T14574] wg1 speed is unknown, defaulting to 1000
[  374.244355][T14574] lo speed is unknown, defaulting to 1000
[  375.135240][T14608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.138310][T14608] syzkaller0: entered promiscuous mode
[  375.140745][T14608] syzkaller0: entered allmulticast mode
[  375.159893][T14608] tipc: Resetting bearer <eth:syzkaller0>
[  375.163644][T14606] tipc: Resetting bearer <eth:syzkaller0>
[  375.176874][T14606] tipc: Disabling bearer <eth:syzkaller0>
[  376.970495][T14616] ip6tnl1: entered promiscuous mode
[  378.161141][T14639] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  378.169284][T14639] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  378.281304][T14648] netlink: 'syz.1.2209': attribute type 32 has an invalid length.
[  378.935139][T14703] tipc: New replicast peer: 172.20.20.170
[  378.944398][T14703] tipc: Enabled bearer <udp:syz2>, priority 10
[  378.952654][T14703] __nla_validate_parse: 2 callbacks suppressed
[  378.952667][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2219'.
[  378.967224][T14703] tipc: Disabling bearer <udp:syz2>
[  379.716404][T14709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'.
[  379.750580][T14716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2222'.
[  379.756521][T14716] netlink: 'syz.1.2222': attribute type 1 has an invalid length.
[  379.761770][T14716] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.2222'.
[  379.803405][T14719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2223'.
[  379.806386][T14719] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2223'.
[  380.731456][T14735] 8021q: adding VLAN 0 to HW filter on device bond10
[  380.824854][T14735] bond10 (unregistering): Released all slaves
[  380.881311][T14749] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  381.193870][T14795] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2238'.
[  381.284139][T14802] netlink: 'syz.0.2241': attribute type 1 has an invalid length.
[  381.287546][T14802] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2241'.
[  381.436498][T14812] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.439716][T14812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  381.443571][T14812] batman_adv: batadv0: Removing interface: batadv_slave_1
[  381.469404][T14812] batadv0 (unregistering): left promiscuous mode
[  381.497282][T14816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  381.614450][T14823] vlan3: entered allmulticast mode
[  381.616754][T14823] hsr0: entered allmulticast mode
[  381.620755][T14823] hsr_slave_0: entered allmulticast mode
[  381.623447][T14823] hsr_slave_1: entered allmulticast mode
[  381.983754][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'.
[  382.016816][T14845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'.
[  384.523467][    C1] bridge0: port 1(syz_tun) entered forwarding state
[  384.525763][    C1] bridge0: topology change detected, propagating
[  404.650527][T14866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.654468][T14866] syzkaller0: entered promiscuous mode
[  404.656478][T14866] syzkaller0: entered allmulticast mode
[  404.660294][T14868] batadv_slave_1: entered promiscuous mode
[  404.664483][T14867] batadv_slave_1: left promiscuous mode
[  404.685662][T14866] tipc: Resetting bearer <eth:syzkaller0>
[  404.695147][T14864] tipc: Resetting bearer <eth:syzkaller0>
[  404.706121][T14864] tipc: Disabling bearer <eth:syzkaller0>
[  404.879683][T14887] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2264'.
[  404.921865][T14893] pim6reg1: entered promiscuous mode
[  404.924463][T14893] pim6reg1: entered allmulticast mode
[  405.766968][T14910] ip6tnl2: entered promiscuous mode
[  405.769459][T14910] ip6tnl2: entered allmulticast mode
[  406.019579][T14919] netlink: del zone limit has 4 unknown bytes
[  406.754726][T14925] netlink: 'syz.0.2274': attribute type 4 has an invalid length.
[  406.773951][T14925] netlink: 'syz.0.2274': attribute type 4 has an invalid length.
[  406.780059][    T9] lo speed is unknown, defaulting to 1000
[  406.782594][    T9] syz0: Port: 1 Link ACTIVE
[  406.785095][    T9] lo speed is unknown, defaulting to 1000
[  407.032293][T14933] lo: entered allmulticast mode
[  407.042198][T14933] lo: left allmulticast mode
[  407.046902][T14933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2276'.
[  407.214034][T14940] xt_l2tp: invalid flags combination: 4
[  407.433187][T14959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.511077][T14961] netlink: 'syz.0.2285': attribute type 1 has an invalid length.
[  408.644345][T15012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  408.799813][T15028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2302'.
[  408.943563][T15043] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2303'.
[  409.017804][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'.
[  409.470126][T12010] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.476932][T12010] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.480552][T12010] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.484911][T12010] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  409.569427][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2312'.
[  409.680334][T15085] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  409.693631][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.0.2317 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  409.693656][T15085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  409.693666][T15085] Call Trace:
[  409.693673][T15085]  <TASK>
[  409.693679][T15085]  dump_stack_lvl+0x189/0x250
[  409.693708][T15085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  409.693754][T15085]  ? __pfx__printk+0x10/0x10
[  409.693774][T15085]  ? kernfs_path_from_node+0x2c/0x260
[  409.693790][T15085]  ? kernfs_path_from_node+0x2c/0x260
[  409.693800][T15085]  ? kernfs_path_from_node+0x2c/0x260
[  409.693814][T15085]  ? kernfs_path_from_node+0x22c/0x260
[  409.693824][T15085]  ? kernfs_path_from_node+0x2c/0x260
[  409.693839][T15085]  sysfs_warn_dup+0x8e/0xa0
[  409.693856][T15085]  sysfs_do_create_link_sd+0xc0/0x110
[  409.693875][T15085]  device_add_class_symlinks+0x1cf/0x240
[  409.693897][T15085]  device_add+0x475/0xb50
[  409.693919][T15085]  wiphy_register+0x1ba6/0x28d0
[  409.693948][T15085]  ? __pfx_wiphy_register+0x10/0x10
[  409.693961][T15085]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  409.693986][T15085]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  409.694003][T15085]  ieee80211_register_hw+0x3443/0x40b0
[  409.694033][T15085]  ? ieee80211_register_hw+0x1481/0x40b0
[  409.694055][T15085]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  409.694074][T15085]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  409.694098][T15085]  ? __hrtimer_setup+0x187/0x210
[  409.694110][T15085]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  409.694130][T15085]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  409.694174][T15085]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  409.694186][T15085]  ? trace_kmalloc+0x1f/0xd0
[  409.694202][T15085]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  409.694219][T15085]  ? kstrndup+0xbf/0x160
[  409.694242][T15085]  hwsim_new_radio_nl+0xea4/0x1b10
[  409.694258][T15085]  ? __pfx___nla_validate_parse+0x10/0x10
[  409.694288][T15085]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  409.694310][T15085]  ? __nla_parse+0x40/0x60
[  409.694327][T15085]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  409.694351][T15085]  genl_family_rcv_msg_doit+0x215/0x300
[  409.694373][T15085]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  409.694397][T15085]  ? bpf_lsm_capable+0x9/0x20
[  409.694412][T15085]  ? security_capable+0x7e/0x2e0
[  409.694430][T15085]  genl_rcv_msg+0x60e/0x790
[  409.694452][T15085]  ? __pfx_genl_rcv_msg+0x10/0x10
[  409.694466][T15085]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  409.694491][T15085]  netlink_rcv_skb+0x208/0x470
[  409.694501][T15085]  ? __lock_acquire+0xab9/0xd20
[  409.694515][T15085]  ? __pfx_genl_rcv_msg+0x10/0x10
[  409.694531][T15085]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  409.694557][T15085]  ? down_read+0x1ad/0x2e0
[  409.694573][T15085]  genl_rcv+0x28/0x40
[  409.694587][T15085]  netlink_unicast+0x82f/0x9e0
[  409.694613][T15085]  ? __pfx_netlink_unicast+0x10/0x10
[  409.694632][T15085]  ? netlink_sendmsg+0x642/0xb30
[  409.694641][T15085]  ? skb_put+0x11b/0x210
[  409.694658][T15085]  netlink_sendmsg+0x805/0xb30
[  409.694678][T15085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.694693][T15085]  ? aa_sock_msg_perm+0x94/0x160
[  409.694708][T15085]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  409.694767][T15085]  ? __pfx_netlink_sendmsg+0x10/0x10
[  409.694784][T15085]  __sock_sendmsg+0x21c/0x270
[  409.694809][T15085]  ____sys_sendmsg+0x505/0x830
[  409.694830][T15085]  ? __pfx_____sys_sendmsg+0x10/0x10
[  409.694851][T15085]  ? import_iovec+0x74/0xa0
[  409.694871][T15085]  ___sys_sendmsg+0x21f/0x2a0
[  409.694889][T15085]  ? __pfx____sys_sendmsg+0x10/0x10
[  409.694931][T15085]  ? __fget_files+0x2a/0x420
[  409.694943][T15085]  ? __fget_files+0x3a0/0x420
[  409.694962][T15085]  __x64_sys_sendmsg+0x19b/0x260
[  409.694979][T15085]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  409.695002][T15085]  ? rcu_is_watching+0x15/0xb0
[  409.695021][T15085]  ? do_syscall_64+0xbe/0x3b0
[  409.695038][T15085]  do_syscall_64+0xfa/0x3b0
[  409.695050][T15085]  ? lockdep_hardirqs_on+0x9c/0x150
[  409.695062][T15085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.695073][T15085]  ? exc_page_fault+0x9f/0xf0
[  409.695087][T15085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.695098][T15085] RIP: 0033:0x7f8b8d18e9a9
[  409.695111][T15085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.695122][T15085] RSP: 002b:00007f8b8df83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.695137][T15085] RAX: ffffffffffffffda RBX: 00007f8b8d3b5fa0 RCX: 00007f8b8d18e9a9
[  409.695146][T15085] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  409.695153][T15085] RBP: 00007f8b8d210d69 R08: 0000000000000000 R09: 0000000000000000
[  409.695170][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  409.695177][T15085] R13: 0000000000000000 R14: 00007f8b8d3b5fa0 R15: 00007fff3db28cb8
[  409.695200][T15085]  </TASK>
[  410.017925][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'.
[  410.043849][T15103] bridge3: port 1(veth7) entered blocking state
[  410.046496][T15103] bridge3: port 1(veth7) entered disabled state
[  410.049196][T15103] veth7: entered allmulticast mode
[  410.052824][T15103] veth7: entered promiscuous mode
[  410.057392][T15103] bridge3: port 2(veth0_to_bond) entered blocking state
[  410.060225][T15103] bridge3: port 2(veth0_to_bond) entered disabled state
[  410.062787][T15103] veth0_to_bond: entered allmulticast mode
[  410.066620][T15103] veth0_to_bond: entered promiscuous mode
[  410.074620][T15103] vlan3: entered allmulticast mode
[  410.076771][T15103] veth1: entered allmulticast mode
[  410.079304][T15103] bridge3: port 3(vlan3) entered blocking state
[  410.082201][T15103] bridge3: port 3(vlan3) entered disabled state
[  410.086166][T15103] vlan3: entered promiscuous mode
[  410.088349][T15103] veth1: entered promiscuous mode
[  410.879779][T15126] netlink: 'syz.2.2329': attribute type 32 has an invalid length.
[  411.152853][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'.
[  411.339297][T15162] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2336'.
[  411.343603][T15162] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2336'.
[  411.411691][T15170] syz.1.2338: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  411.420942][T15170] CPU: 0 UID: 0 PID: 15170 Comm: syz.1.2338 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  411.420957][T15170] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  411.420963][T15170] Call Trace:
[  411.420967][T15170]  <TASK>
[  411.420971][T15170]  dump_stack_lvl+0x189/0x250
[  411.420988][T15170]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.420998][T15170]  ? __pfx__printk+0x10/0x10
[  411.421009][T15170]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  411.421022][T15170]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  411.421032][T15170]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  411.421045][T15170]  warn_alloc+0x214/0x310
[  411.421054][T15170]  ? stack_depot_save_flags+0x40/0x900
[  411.421065][T15170]  ? __pfx_warn_alloc+0x10/0x10
[  411.421073][T15170]  ? kasan_save_track+0x4f/0x80
[  411.421084][T15170]  ? xskq_create+0x56/0x170
[  411.421091][T15170]  ? xsk_init_queue+0xb0/0x110
[  411.421109][T15170]  ? xsk_setsockopt+0x4dc/0x8d0
[  411.421119][T15170]  ? do_sock_setsockopt+0x17c/0x1b0
[  411.421128][T15170]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  411.421135][T15170]  ? do_syscall_64+0xfa/0x3b0
[  411.421143][T15170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.421155][T15170]  __vmalloc_node_range_noprof+0x125/0x12f0
[  411.421180][T15170]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  411.421194][T15170]  ? __kasan_kmalloc+0x93/0xb0
[  411.421204][T15170]  vmalloc_user_noprof+0xad/0xf0
[  411.421219][T15170]  ? xskq_create+0xbf/0x170
[  411.421229][T15170]  xskq_create+0xbf/0x170
[  411.421241][T15170]  xsk_init_queue+0xb0/0x110
[  411.421258][T15170]  xsk_setsockopt+0x4dc/0x8d0
[  411.421279][T15170]  ? __pfx_xsk_setsockopt+0x10/0x10
[  411.421295][T15170]  ? __pfx_aa_sk_perm+0x10/0x10
[  411.421316][T15170]  ? aa_sock_opt_perm+0x74/0x110
[  411.421329][T15170]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  411.421342][T15170]  ? __pfx_xsk_setsockopt+0x10/0x10
[  411.421381][T15170]  do_sock_setsockopt+0x17c/0x1b0
[  411.421394][T15170]  __x64_sys_setsockopt+0x13f/0x1b0
[  411.421405][T15170]  do_syscall_64+0xfa/0x3b0
[  411.421413][T15170]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.421421][T15170]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.421429][T15170]  ? exc_page_fault+0x9f/0xf0
[  411.421438][T15170]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.421447][T15170] RIP: 0033:0x7ff03778e9a9
[  411.421456][T15170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.421464][T15170] RSP: 002b:00007ff038563038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  411.421474][T15170] RAX: ffffffffffffffda RBX: 00007ff0379b5fa0 RCX: 00007ff03778e9a9
[  411.421480][T15170] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  411.421484][T15170] RBP: 00007ff037810d69 R08: 0000000000000004 R09: 0000000000000000
[  411.421488][T15170] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  411.421493][T15170] R13: 0000000000000000 R14: 00007ff0379b5fa0 R15: 00007ffed2e20338
[  411.421504][T15170]  </TASK>
[  411.421630][T15170] Mem-Info:
[  411.439972][T15171] dvmrp0: entered allmulticast mode
[  411.526967][T15170] active_anon:4466 inactive_anon:0 isolated_anon:0
[  411.526967][T15170]  active_file:1153 inactive_file:38324 isolated_file:0
[  411.526967][T15170]  unevictable:1768 dirty:23 writeback:0
[  411.526967][T15170]  slab_reclaimable:10430 slab_unreclaimable:98011
[  411.526967][T15170]  mapped:18083 shmem:2439 pagetables:1002
[  411.526967][T15170]  sec_pagetables:0 bounce:0
[  411.526967][T15170]  kernel_misc_reclaimable:0
[  411.526967][T15170]  free:250254 free_pcp:18520 free_cma:0
[  411.541479][T15170] Node 0 active_anon:11928kB inactive_anon:0kB active_file:3440kB inactive_file:20924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43840kB dirty:72kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9880kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  411.552321][T15170] Node 1 active_anon:5868kB inactive_anon:0kB active_file:1172kB inactive_file:132372kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28492kB dirty:20kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2328kB pagetables:1412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  411.563151][T15170] Node 0 DMA free:14832kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:516kB local_pcp:496kB free_cma:0kB
[  411.572595][T15170] lowmem_reserve[]: 0 812 812 812 812
[  411.574389][T15170] Node 0 DMA32 free:259636kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11924kB inactive_anon:0kB active_file:3440kB inactive_file:20924kB unevictable:3536kB writepending:72kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:37016kB local_pcp:18512kB free_cma:0kB
[  411.588796][T15170] lowmem_reserve[]: 0 0 0 0 0
[  411.590401][T15170] Node 1 DMA32 free:454244kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:3988kB local_pcp:1248kB free_cma:0kB
[  411.600430][T15170] lowmem_reserve[]: 0 0 854 854 854
[  411.602457][T15170] Node 1 Normal free:272032kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5800kB inactive_anon:0kB active_file:1172kB inactive_file:132364kB unevictable:3536kB writepending:20kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:32612kB local_pcp:22456kB free_cma:0kB
[  411.613139][T15170] lowmem_reserve[]: 0 0 0 0 0
[  411.614705][T15170] Node 0 DMA: 2*4kB (U) 4*8kB (U) 3*16kB (U) 3*32kB (U) 1*64kB (U) 2*128kB (UM) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 3*4096kB (UM) = 14840kB
[  411.620061][T15170] Node 0 DMA32: 1147*4kB (UM) 673*8kB (UM) 522*16kB (UME) 315*32kB (UM) 251*64kB (UME) 81*128kB (UM) 30*256kB (UM) 21*512kB (UM) 12*1024kB (UME) 11*2048kB (UE) 37*4096kB (UM) = 259636kB
[  411.626259][T15170] Node 1 DMA32: 17*4kB (UM) 14*8kB (UM) 7*16kB (UM) 6*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 108*4096kB (M) = 454244kB
[  411.631591][T15170] Node 1 Normal: 611*4kB (M) 729*8kB (UME) 347*16kB (UME) 456*32kB (UME) 210*64kB (UME) 36*128kB (UM) 7*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 3*2048kB (UM) 51*4096kB (UM) = 272004kB
[  411.637859][T15170] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  411.641333][T15170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  411.644881][T15170] 41916 total pagecache pages
[  411.646743][T15170] 0 pages in swap cache
[  411.648523][T15170] Free swap  = 124996kB
[  411.650079][T15170] Total swap = 124996kB
[  411.651516][T15170] 786301 pages RAM
[  411.653689][T15170] 0 pages HighMem/MovableOnly
[  411.655699][T15170] 241104 pages reserved
[  411.657443][T15170] 0 pages cma reserved
[  411.690028][T15185] netlink: 'syz.1.2342': attribute type 6 has an invalid length.
[  411.699544][T15185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2342'.
[  411.706887][T15187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'.
[  411.740071][T15189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  411.989028][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2348'.
[  411.993982][T15208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2348'.
[  412.065636][T15216] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2350'.
[  412.623314][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'.
[  412.791096][T15230] vxcan5: entered allmulticast mode
[  412.814672][T15231] vxcan5: entered allmulticast mode
[  413.055547][T15245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.061819][T15245] tipc: Resetting bearer <eth:syzkaller0>
[  413.075622][T15244] tipc: Disabling bearer <eth:syzkaller0>
[  414.989712][T15337] macvlan4: entered allmulticast mode
[  414.991583][T15337] veth1_vlan: entered allmulticast mode
[  415.167632][T15349] __nla_validate_parse: 5 callbacks suppressed
[  415.167649][T15349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2390'.
[  415.305127][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'.
[  415.365574][T15360] netlink: 'syz.2.2394': attribute type 7 has an invalid length.
[  415.368395][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'.
[  415.626034][T15375] netlink: 'syz.2.2397': attribute type 1 has an invalid length.
[  417.464920][T15406] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744071897612290)
[  417.468435][T15406] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  417.590796][T15417] netlink: 'syz.1.2408': attribute type 1 has an invalid length.
[  417.624869][T15417] 8021q: adding VLAN 0 to HW filter on device bond10
[  417.897795][T15441] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2415'.
[  419.197500][    C0] vcan0: j1939_tp_rxtimer: 0xffff888124175400: rx timeout, send abort
[  419.357409][T15492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2428'.
[  419.488837][T15499] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.2430'.
[  419.677314][T15509] netlink: 'syz.2.2433': attribute type 13 has an invalid length.
[  419.680088][T15509] netlink: 'syz.2.2433': attribute type 17 has an invalid length.
[  419.699897][T15509] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.702243][    C0] vcan0: j1939_tp_rxtimer: 0xffff888124175400: abort rx timeout. Force session deactivation
[  419.713587][T15509] dummy0: left promiscuous mode
[  419.716996][T15509] dummy0: left allmulticast mode
[  419.728124][T15509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  419.773542][T15508] wg1 speed is unknown, defaulting to 1000
[  419.777396][T15508] lo speed is unknown, defaulting to 1000
[  420.092630][T15526] wg1 speed is unknown, defaulting to 1000
[  420.096461][T15526] lo speed is unknown, defaulting to 1000
[  421.125934][T15551] netlink: 'syz.1.2443': attribute type 32 has an invalid length.
[  421.437721][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'.
[  421.441720][T15568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2446'.
[  421.678200][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  422.281116][T15595] netlink: 'syz.0.2452': attribute type 11 has an invalid length.
[  423.584427][T15636] netlink: 'syz.0.2461': attribute type 20 has an invalid length.
[  423.643072][T15642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.679122][T15648] netlink: 'syz.1.2466': attribute type 6 has an invalid length.
[  423.880434][T15666] netlink: 'syz.2.2469': attribute type 9 has an invalid length.
[  423.885882][T15666] netlink: 'syz.2.2469': attribute type 6 has an invalid length.
[  424.529735][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2470'.
[  424.529772][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2470'.
[  424.591232][T15669] vlan4: entered allmulticast mode
[  424.594986][T15674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2471'.
[  424.596079][T15669] bond9: entered allmulticast mode
[  424.627002][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'.
[  424.638529][T15672] vlan4: entered allmulticast mode
[  424.657523][T15674] IPVS: Error joining to the multicast group
[  424.738049][T15678] bridge0: entered allmulticast mode
[  424.740531][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'.
[  424.756333][T15679] bridge0 (unregistering): left allmulticast mode
[  425.052796][T15697] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2476'.
[  425.091323][T15703] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2477'.
[  425.145856][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'.
[  425.568457][T15756] IPVS: stopping master sync thread 8449 ...
[  425.599431][T15756] wg1 speed is unknown, defaulting to 1000
[  425.604164][T15756] lo speed is unknown, defaulting to 1000
[  425.780511][T15767] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20002
[  426.377896][T15786] wg1 speed is unknown, defaulting to 1000
[  426.380820][T15786] lo speed is unknown, defaulting to 1000
[  426.843992][T15798] netlink: 'syz.1.2497': attribute type 1 has an invalid length.
[  426.900291][T15798] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  427.972870][T15839] __nla_validate_parse: 3 callbacks suppressed
[  427.972880][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'.
[  428.252793][ T5693] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  428.814776][T15855] veth1_vlan: left allmulticast mode
[  428.824078][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.827049][ T5898] lo speed is unknown, defaulting to 1000
[  428.829205][ T5898] syz0: Port: 1 Link DOWN
[  428.831239][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.835754][ T5898] lo speed is unknown, defaulting to 1000
[  428.837798][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.841160][T15855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2511'.
[  428.842101][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  428.868296][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2511'.
[  429.143526][T15878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2517'.
[  429.184039][T15883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2519'.
[  429.187114][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'.
[  429.190054][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'.
[  429.486860][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'.
[  429.679358][T15898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2522'.
[  431.454177][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'.
[  432.837737][T15936] netlink: 'syz.1.2534': attribute type 1 has an invalid length.
[  433.190381][T15960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2543'.
[  434.048775][T15983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2547'.
[  434.171794][T15992] syzkaller1: entered promiscuous mode
[  434.177206][T15992] syzkaller1: entered allmulticast mode
[  434.294136][T16002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2553'.
[  434.304762][T16002] netlink: 'syz.1.2553': attribute type 15 has an invalid length.
[  434.309305][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'.
[  434.309312][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'.
[  434.450114][T16013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'.
[  434.463738][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'.
[  434.467700][T16013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'.
[  434.514841][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'.
[  434.630680][T16020] dvmrp0: left allmulticast mode
[  435.752716][T16021] syz.0.2557: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  435.760713][T16021] CPU: 0 UID: 0 PID: 16021 Comm: syz.0.2557 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  435.760726][T16021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  435.760731][T16021] Call Trace:
[  435.760735][T16021]  <TASK>
[  435.760739][T16021]  dump_stack_lvl+0x189/0x250
[  435.760754][T16021]  ? __pfx_dump_stack_lvl+0x10/0x10
[  435.760762][T16021]  ? __pfx__printk+0x10/0x10
[  435.760772][T16021]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  435.760782][T16021]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  435.760791][T16021]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  435.760800][T16021]  warn_alloc+0x214/0x310
[  435.760810][T16021]  ? __pfx_warn_alloc+0x10/0x10
[  435.760820][T16021]  ? __get_vm_area_node+0x28f/0x300
[  435.760830][T16021]  ? hash_net4_resize+0x235/0x1b60
[  435.760839][T16021]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  435.760847][T16021]  ? __x64_sys_sendmsg+0x19b/0x260
[  435.760867][T16021]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  435.760879][T16021]  ? rcu_is_watching+0x15/0xb0
[  435.760888][T16021]  ? hash_net4_resize+0x235/0x1b60
[  435.760894][T16021]  ? hash_net4_resize+0x235/0x1b60
[  435.760900][T16021]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  435.760910][T16021]  ? hash_net4_resize+0x235/0x1b60
[  435.760920][T16021]  hash_net4_resize+0x235/0x1b60
[  435.760928][T16021]  ? hash_net4_uadt+0x7fd/0x980
[  435.760935][T16021]  ? __pfx_hash_net4_add+0x10/0x10
[  435.760942][T16021]  ? __pfx_hash_net4_uadt+0x10/0x10
[  435.760952][T16021]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  435.760965][T16021]  call_ad+0x44e/0xb00
[  435.760978][T16021]  ? __pfx_call_ad+0x10/0x10
[  435.760993][T16021]  ? __nla_parse+0x40/0x60
[  435.761003][T16021]  ip_set_ad+0x791/0x930
[  435.761016][T16021]  ? __pfx_ip_set_ad+0x10/0x10
[  435.761024][T16021]  ? __mutex_lock+0x330/0xe80
[  435.761047][T16021]  nfnetlink_rcv_msg+0xb4d/0x1130
[  435.761057][T16021]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  435.761073][T16021]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  435.761093][T16021]  ? __lock_acquire+0xab9/0xd20
[  435.761107][T16021]  netlink_rcv_skb+0x208/0x470
[  435.761120][T16021]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  435.761130][T16021]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  435.761141][T16021]  ? bpf_lsm_capable+0x9/0x20
[  435.761151][T16021]  ? security_capable+0x7e/0x2e0
[  435.761161][T16021]  nfnetlink_rcv+0x26a/0x2520
[  435.761170][T16021]  ? is_bpf_text_address+0x26/0x2b0
[  435.761179][T16021]  ? kernel_text_address+0xa5/0xe0
[  435.761185][T16021]  ? __kernel_text_address+0xd/0x40
[  435.761194][T16021]  ? unwind_get_return_address+0x4d/0x90
[  435.761202][T16021]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  435.761211][T16021]  ? arch_stack_walk+0xfc/0x150
[  435.761225][T16021]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  435.761234][T16021]  ? stack_depot_save_flags+0x40/0x900
[  435.761244][T16021]  ? __lock_acquire+0xab9/0xd20
[  435.761260][T16021]  ? __lock_acquire+0xab9/0xd20
[  435.761271][T16021]  ? netlink_deliver_tap+0x2e/0x1b0
[  435.761280][T16021]  ? netlink_deliver_tap+0x2e/0x1b0
[  435.761290][T16021]  netlink_unicast+0x82f/0x9e0
[  435.761303][T16021]  ? __pfx_netlink_unicast+0x10/0x10
[  435.761313][T16021]  ? netlink_sendmsg+0x642/0xb30
[  435.761319][T16021]  ? skb_put+0x11b/0x210
[  435.761328][T16021]  netlink_sendmsg+0x805/0xb30
[  435.761339][T16021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  435.761347][T16021]  ? aa_sock_msg_perm+0x94/0x160
[  435.761355][T16021]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  435.761362][T16021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  435.761369][T16021]  __sock_sendmsg+0x21c/0x270
[  435.761380][T16021]  ____sys_sendmsg+0x505/0x830
[  435.761390][T16021]  ? __pfx_____sys_sendmsg+0x10/0x10
[  435.761402][T16021]  ? import_iovec+0x74/0xa0
[  435.761413][T16021]  ___sys_sendmsg+0x21f/0x2a0
[  435.761421][T16021]  ? __pfx____sys_sendmsg+0x10/0x10
[  435.761443][T16021]  ? __fget_files+0x2a/0x420
[  435.761449][T16021]  ? __fget_files+0x3a0/0x420
[  435.761459][T16021]  __x64_sys_sendmsg+0x19b/0x260
[  435.761468][T16021]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  435.761480][T16021]  ? rcu_is_watching+0x15/0xb0
[  435.761490][T16021]  ? do_syscall_64+0xbe/0x3b0
[  435.761499][T16021]  do_syscall_64+0xfa/0x3b0
[  435.761506][T16021]  ? lockdep_hardirqs_on+0x9c/0x150
[  435.761512][T16021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.761519][T16021]  ? exc_page_fault+0x9f/0xf0
[  435.761527][T16021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.761533][T16021] RIP: 0033:0x7f8b8d18e9a9
[  435.761563][T16021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  435.761570][T16021] RSP: 002b:00007f8b8df41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  435.761579][T16021] RAX: ffffffffffffffda RBX: 00007f8b8d3b6160 RCX: 00007f8b8d18e9a9
[  435.761584][T16021] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000010
[  435.761589][T16021] RBP: 00007f8b8d210d69 R08: 0000000000000000 R09: 0000000000000000
[  435.761593][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  435.761597][T16021] R13: 0000000000000000 R14: 00007f8b8d3b6160 R15: 00007fff3db28cb8
[  435.761608][T16021]  </TASK>
[  435.761611][T16021] Mem-Info:
[  435.971488][T16021] active_anon:4475 inactive_anon:0 isolated_anon:0
[  435.971488][T16021]  active_file:1153 inactive_file:38332 isolated_file:0
[  435.971488][T16021]  unevictable:1768 dirty:64 writeback:0
[  435.971488][T16021]  slab_reclaimable:10405 slab_unreclaimable:99711
[  435.971488][T16021]  mapped:18064 shmem:2445 pagetables:928
[  435.971488][T16021]  sec_pagetables:0 bounce:0
[  435.971488][T16021]  kernel_misc_reclaimable:0
[  435.971488][T16021]  free:241903 free_pcp:18661 free_cma:0
[  435.987297][T16021] Node 0 active_anon:12056kB inactive_anon:0kB active_file:3440kB inactive_file:20924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43764kB dirty:196kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9832kB pagetables:2440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  435.998443][T16021] Node 1 active_anon:5844kB inactive_anon:0kB active_file:1172kB inactive_file:132404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28492kB dirty:60kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2400kB pagetables:1272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  436.009789][T16021] Node 0 DMA free:14936kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:420kB local_pcp:400kB free_cma:0kB
[  436.019962][T16021] lowmem_reserve[]: 0 812 812 812 812
[  436.021797][T16021] Node 0 DMA32 free:227152kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12052kB inactive_anon:0kB active_file:3440kB inactive_file:20924kB unevictable:3536kB writepending:196kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:32644kB local_pcp:17900kB free_cma:0kB
[  436.033221][T16021] lowmem_reserve[]: 0 0 0 0 0
[  436.034843][T16021] Node 1 DMA32 free:454244kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:4100kB local_pcp:1288kB free_cma:0kB
[  436.046477][T16021] lowmem_reserve[]: 0 0 854 854 854
[  436.048688][T16021] Node 1 Normal free:271280kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5844kB inactive_anon:0kB active_file:1172kB inactive_file:132396kB unevictable:3536kB writepending:60kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37524kB local_pcp:16008kB free_cma:0kB
[  436.061737][T16021] lowmem_reserve[]: 0 0 0 0 0
[  436.063931][T16021] Node 0 DMA: 2*4kB (U) 4*8kB (U) 3*16kB (U) 2*32kB (U) 1*64kB (U) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 0*2048kB 3*4096kB (UM) = 14936kB
[  436.070395][T16021] Node 0 DMA32: 464*4kB (UM) 265*8kB (U) 197*16kB (UME) 365*32kB (UME) 264*64kB (UME) 114*128kB (UME) 45*256kB (UM) 21*512kB (UM) 13*1024kB (UME) 1*2048kB (E) 34*4096kB (UM) = 227192kB
[  436.077531][T16021] Node 1 DMA32: 17*4kB (UM) 14*8kB (UM) 7*16kB (UM) 6*32kB (UM) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 108*4096kB (M) = 454244kB
[  436.083062][T16021] Node 1 Normal: 728*4kB (UM) 580*8kB (UME) 303*16kB (UME) 612*32kB (UME) 277*64kB (UME) 65*128kB (UM) 15*256kB (UME) 7*512kB (UM) 5*1024kB (UME) 2*2048kB (UM) 48*4096kB (UM) = 271280kB
[  436.088990][T16021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  436.092147][T16021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  436.095198][T16021] 41930 total pagecache pages
[  436.096753][T16021] 0 pages in swap cache
[  436.098127][T16021] Free swap  = 124996kB
[  436.099701][T16021] Total swap = 124996kB
[  436.101407][T16021] 786301 pages RAM
[  436.103107][T16021] 0 pages HighMem/MovableOnly
[  436.104727][T16021] 241104 pages reserved
[  436.106111][T16021] 0 pages cma reserved
[  436.188570][T16040] netlink: 'syz.1.2562': attribute type 32 has an invalid length.
[  436.237412][T16049] netlink: 410 bytes leftover after parsing attributes in process `syz.0.2564'.
[  436.547356][T16069] hsr_slave_1 (unregistering): left promiscuous mode
[  436.720469][T16085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.729265][T16085] syzkaller0: entered promiscuous mode
[  436.731862][T16085] syzkaller0: entered allmulticast mode
[  437.215479][T16100] netlink: 'syz.2.2577': attribute type 32 has an invalid length.
[  437.339814][T16108] wg1 speed is unknown, defaulting to 1000
[  437.345219][T16108] lo speed is unknown, defaulting to 1000
[  437.356037][T16112] netlink: 'syz.1.2578': attribute type 5 has an invalid length.
[  437.365781][T16112] geneve2: entered promiscuous mode
[  437.368054][T16112] geneve2: entered allmulticast mode
[  437.371435][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  437.376346][ T5693] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  437.379902][ T5693] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  437.408268][ T5693] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  437.600842][T16131] IPVS: ip_vs_add_dest(): server weight less than zero
[  437.644310][T16134] netlink: 'syz.2.2585': attribute type 32 has an invalid length.
[  437.712245][  T972] tipc: Node number set to 3260113833
[  438.038980][T16160] netlink: 'syz.2.2590': attribute type 142 has an invalid length.
[  438.356567][T16162] __nla_validate_parse: 5 callbacks suppressed
[  438.356580][T16162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2591'.
[  438.364295][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2591'.
[  438.367187][T16162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2591'.
[  438.370116][T16162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2591'.
[  438.458123][T16165] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  438.606750][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'.
[  438.646917][T16168] xt_hashlimit: max too large, truncated to 1048576
[  439.709160][T16199] xt_ecn: cannot match TCP bits for non-tcp packets
[  439.761369][T16199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  439.889339][T16204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2601'.
[  440.010546][T16207] netlink: 'syz.2.2602': attribute type 32 has an invalid length.
[  440.171441][T16219] netlink: 'syz.2.2604': attribute type 6 has an invalid length.
[  441.412605][T16263] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2616'.
[  442.316896][T16271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2618'.
[  442.320214][T16271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2618'.
[  442.554623][T16283] netlink: 'syz.0.2622': attribute type 1 has an invalid length.
[  442.592597][T16283] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  442.598281][T16283] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  443.113090][T16308] veth13: entered promiscuous mode
[  443.156687][T16312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2629'.
[  443.794232][T16338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2638'.
[  444.056062][T16355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  445.570069][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2653'.
[  445.784424][T16400] netlink: 'syz.0.2656': attribute type 41 has an invalid length.
[  445.805786][T16400] netlink: zone id is out of range
[  445.808531][T16400] netlink: zone id is out of range
[  445.810958][T16400] netlink: zone id is out of range
[  445.813856][T16400] netlink: zone id is out of range
[  445.816220][T16400] netlink: zone id is out of range
[  445.818583][T16400] netlink: zone id is out of range
[  445.821199][T16400] netlink: zone id is out of range
[  445.824074][T16400] netlink: zone id is out of range
[  445.826603][T16400] netlink: zone id is out of range
[  445.828890][T16400] netlink: zone id is out of range
[  445.882998][T14438] Bluetooth: hci2: command 0x0405 tx timeout
[  446.028758][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'.
[  446.801291][T16418] veth0_to_bond: left allmulticast mode
[  446.803496][T16418] veth0_to_bond: left promiscuous mode
[  446.805704][T16418] bridge3: port 2(veth0_to_bond) entered disabled state
[  446.809704][T16418] veth7: left allmulticast mode
[  446.811400][T16418] veth7: left promiscuous mode
[  446.813449][T16418] bridge3: port 1(veth7) entered disabled state
[  446.817580][T16418] vlan3: left promiscuous mode
[  446.819253][T16418] veth1: left promiscuous mode
[  446.820968][T16418] bridge3: port 3(vlan3) entered disabled state
[  446.856001][T16424] syzkaller1: entered promiscuous mode
[  446.862085][T16424] syzkaller1: entered allmulticast mode
[  446.967530][T16430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2663'.
[  447.054575][T16438] netlink: 'syz.0.2664': attribute type 32 has an invalid length.
[  447.361349][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2667'.
[  448.185656][T16470] netlink: 'syz.0.2672': attribute type 13 has an invalid length.
[  448.205322][T16471] netlink: 'syz.2.2671': attribute type 1 has an invalid length.
[  448.208059][T16471] netlink: 'syz.2.2671': attribute type 4 has an invalid length.
[  448.210686][T16471] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2671'.
[  448.286787][T16474] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2673'.
[  448.358610][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'.
[  448.366762][T16478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'.
[  448.430093][T16485] syzkaller1: entered promiscuous mode
[  448.432239][T16485] syzkaller1: entered allmulticast mode
[  448.644608][T16492] veth0_to_bond: entered allmulticast mode
[  448.930142][T16506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2685'.
[  449.171089][T16535] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2691'.
[  449.175569][T16535] netlink: 744 bytes leftover after parsing attributes in process `syz.0.2691'.
[  449.205839][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'.
[  449.346213][T16558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2699'.
[  449.349917][T16558] No such timeout policy "syz0"
[  449.371182][T16558] bridge5: the hash_elasticity option has been deprecated and is always 16
[  449.377376][T16558] bridge5: entered allmulticast mode
[  449.379956][T16558] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2699'.
[  449.383405][T16555] vxcan0: entered promiscuous mode
[  449.480626][T16569] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  449.485934][T16569] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  449.641099][T16575] bridge0: port 1(syz_tun) entered disabled state
[  449.658870][T16575] tipc: Resetting bearer <eth:team0>
[  449.674045][T16575] macsec0: left allmulticast mode
[  449.720613][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  449.724729][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  449.730328][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  449.734255][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  449.741373][T16594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2707'.
[  450.003390][T16605] bond0: (slave bond_slave_0): Releasing backup interface
[  450.008718][T16605] bond0: (slave bond_slave_1): Releasing backup interface
[  450.013494][T16605] bond3: (slave veth3): Releasing active interface
[  450.017109][T16605] bond5: (slave wireguard0): Releasing backup interface
[  450.019835][T16605] wireguard0: left promiscuous mode
[  450.021760][T16605] bond5: (slave wireguard1): making interface the new active one
[  450.024894][T16605] wireguard1: entered promiscuous mode
[  450.028074][T16605] bond5: (slave wireguard1): Releasing backup interface
[  450.030421][T16605] wireguard1: left promiscuous mode
[  450.360685][T16613] netlink: 'syz.1.2712': attribute type 4 has an invalid length.
[  450.366531][T16613] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2712'.
[  450.376294][T16613] syzkaller1: tun_chr_ioctl cmd 1074025672
[  450.378890][T16613] syzkaller1: ignored: set checksum disabled
[  450.460585][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2714'.
[  450.789274][T16633] netlink: 'syz.2.2718': attribute type 13 has an invalid length.
[  450.793194][T16633] netlink: 'syz.2.2718': attribute type 17 has an invalid length.
[  452.476553][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'.
[  452.480562][T16675] netlink: 'syz.1.2729': attribute type 1 has an invalid length.
[  453.046395][T16722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.826272][T16720] tipc: Resetting bearer <eth:syzkaller0>
[  454.105210][    T9] tipc: Node number set to 2443358887
[  454.654251][T16760] __nla_validate_parse: 2 callbacks suppressed
[  454.654268][T16760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2757'.
[  454.902471][T16720] tipc: Disabling bearer <eth:syzkaller0>
[  454.908136][T16747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2752'.
[  455.120944][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'.
[  455.122587][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'.
[  455.438598][T16788] netlink: 'syz.2.2764': attribute type 4 has an invalid length.
[  455.441217][T16788] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2764'.
[  455.449815][T16788] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2764'.
[  455.454935][T16788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2764'.
[  455.743821][T16802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.746481][T16802] IPv6: NLM_F_CREATE should be set when creating new route
[  455.749269][T16802] IPv6: NLM_F_CREATE should be set when creating new route
[  455.753503][T16802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.885295][T16806] netlink: 'syz.1.2769': attribute type 5 has an invalid length.
[  455.888620][T16807] netlink: 'syz.1.2769': attribute type 5 has an invalid length.
[  456.081233][T16815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2771'.
[  456.086476][T16815] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2771'.
[  456.605468][T16835] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.2774'.
[  457.068730][T16848] --map-set only usable from mangle table
[  458.793856][T16953] lo speed is unknown, defaulting to 1000
[  458.796436][T16953] lo speed is unknown, defaulting to 1000
[  458.799486][T16953] lo speed is unknown, defaulting to 1000
[  458.815174][T16953] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  458.838785][T16953] lo speed is unknown, defaulting to 1000
[  458.842817][T16953] lo speed is unknown, defaulting to 1000
[  458.847395][T16953] lo speed is unknown, defaulting to 1000
[  459.806914][T16969] __nla_validate_parse: 10 callbacks suppressed
[  459.806923][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'.
[  459.812764][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'.
[  459.846988][T16974] netlink: 'syz.1.2805': attribute type 1 has an invalid length.
[  459.849799][T16974] netlink: 'syz.1.2805': attribute type 1 has an invalid length.
[  459.929771][T16979] wg1 speed is unknown, defaulting to 1000
[  459.933080][T16979] lo speed is unknown, defaulting to 1000
[  460.031737][T16979] lo speed is unknown, defaulting to 1000
[  460.833677][T17001] wg1 speed is unknown, defaulting to 1000
[  460.836503][T17001] lo speed is unknown, defaulting to 1000
[  460.989344][T17001] lo speed is unknown, defaulting to 1000
[  460.990611][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'.
[  460.996554][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2813'.
[  461.000163][T17008] netlink: 'syz.0.2813': attribute type 19 has an invalid length.
[  461.555466][T17019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2816'.
[  461.925649][T17035] netlink: 'syz.0.2821': attribute type 1 has an invalid length.
[  461.928935][T17035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2821'.
[  462.226476][T17054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'.
[  462.602795][T17062] netlink: 'syz.1.2829': attribute type 32 has an invalid length.
[  462.763811][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2831'.
[  462.872769][T17075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2831'.
[  462.955738][T17077] netlink: 'syz.1.2832': attribute type 10 has an invalid length.
[  463.285694][T17105] netlink: 'syz.0.2840': attribute type 1 has an invalid length.
[  463.317400][T17105] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  463.329789][T17105] veth9: entered promiscuous mode
[  463.333559][T17105] bond14: (slave veth9): Enslaving as a backup interface with a down link
[  463.337686][T17105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2840'.
[  463.342007][   T13] net_ratelimit: 481 callbacks suppressed
[  463.342017][   T13] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  463.350053][T17105] 8021q: adding VLAN 0 to HW filter on device bond14
[  463.452657][   T12] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  463.512677][T17118] block nbd0: server does not support multiple connections per device.
[  463.516237][T17118] block nbd0: shutting down sockets
[  463.623477][T17131] netlink: 'syz.2.2847': attribute type 32 has an invalid length.
[  463.797801][T17151] netlink: 'syz.2.2851': attribute type 10 has an invalid length.
[  463.800926][T17151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  464.240828][T17173] netlink: 'syz.0.2857': attribute type 32 has an invalid length.
[  464.388407][T17184] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  464.951130][T17238] 8021q: adding VLAN 0 to HW filter on device bond6
[  464.954703][T17238] bond0: (slave bond6): Enslaving as an active interface with a down link
[  465.516385][T17243] netlink: 'syz.0.2874': attribute type 3 has an invalid length.
[  465.524250][T17243] netlink: 'syz.0.2874': attribute type 3 has an invalid length.
[  465.663003][T17250] __nla_validate_parse: 3 callbacks suppressed
[  465.663019][T17250] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2876'.
[  465.682458][T17250] 0: renamed from hsr0
[  465.687427][T17250] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  465.691699][T17250] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  465.696898][T17250] 0: entered allmulticast mode
[  465.698950][T17250] hsr_slave_0: entered allmulticast mode
[  465.701382][T17250] hsr_slave_1: entered allmulticast mode
[  465.705820][T17250] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  465.896700][T17269] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.2881'.
[  466.016817][T17275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2880'.
[  466.725550][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'.
[  467.009023][T17312] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2891'.
[  467.191013][T17325] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2894'.
[  467.703163][T17356] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  467.705877][T17357] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  467.895789][T17363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2903'.
[  468.955229][T17389] tap0: tun_chr_ioctl cmd 1074025677
[  468.957407][T17389] tap0: linktype set to 769
[  470.097476][T17416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2917'.
[  470.156147][T17423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.159442][T17423] syzkaller0: entered promiscuous mode
[  470.161208][T17423] syzkaller0: entered allmulticast mode
[  470.175637][T17423] tipc: Resetting bearer <eth:syzkaller0>
[  470.179260][T17422] tipc: Resetting bearer <eth:syzkaller0>
[  470.190051][T17422] tipc: Disabling bearer <eth:syzkaller0>
[  471.164692][T17442] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2924'.
[  471.167836][T17442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2924'.
[  471.177691][T17442] syz0: rxe_newlink: already configured on lo
[  471.240266][T17442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  471.467602][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2927'.
[  472.514033][T17472] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2933'.
[  472.860860][T17487] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2937'.
[  473.726020][T17490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  473.744047][T17489] tipc: Disabling bearer <eth:syzkaller0>
[  495.043314][T17502] validate_nla: 3 callbacks suppressed
[  495.043324][T17502] netlink: 'syz.2.2941': attribute type 16 has an invalid length.
[  495.048317][T17502] netlink: 'syz.2.2941': attribute type 17 has an invalid length.
[  495.088103][T17502] tipc: Resetting bearer <eth:syzkaller0>
[  496.014475][T17538] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  496.018782][T17538] syzkaller0: left promiscuous mode
[  496.021259][T17538] syzkaller0: left allmulticast mode
[  496.080661][T17545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2952'.
[  496.271909][T17563] pimreg3: entered allmulticast mode
[  496.429329][T17572] netlink: 'syz.0.2956': attribute type 3 has an invalid length.
[  496.433887][T17572] netlink: 'syz.0.2956': attribute type 1 has an invalid length.
[  496.436567][T17572] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2956'.
[  497.435887][T17596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'.
[  497.562545][T17599] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  498.203512][T14438] Bluetooth: hci2: command 0x0405 tx timeout
[  498.373565][T17601] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2966'.
[  498.377677][T17601] gretap0: entered promiscuous mode
[  498.380776][T17601] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2966'.
[  498.384760][T17601] 0{X: renamed from gretap0
[  498.389559][T17601] 0{X: left promiscuous mode
[  498.391865][T17601] 0{X: entered allmulticast mode
[  498.400073][T17601] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  499.976469][T17629] pimreg: entered allmulticast mode
[  499.985194][T17631] netlink: 'syz.2.2975': attribute type 32 has an invalid length.
[  500.035942][T17637] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  500.102649][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'.
[  500.113237][T17647] netlink: 'syz.1.2979': attribute type 1 has an invalid length.
[  500.128006][T17647] bond11 (unregistering): Released all slaves
[  500.206491][T17655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2981'.
[  500.234016][T17657] x_tables: duplicate underflow at hook 1
[  500.308481][T17668] netlink: 'syz.2.2986': attribute type 32 has an invalid length.
[  500.469875][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'.
[  500.480614][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2991'.
[  500.488605][T17686] netlink: 'syz.2.2991': attribute type 5 has an invalid length.
[  500.491460][T17686] netlink: 'syz.2.2991': attribute type 6 has an invalid length.
[  500.554930][T17702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2996'.
[  500.713941][T17721] bond0: (slave bond6): Error -95 calling ndo_bpf
[  500.750120][T17721] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.753206][T17721] bond0: (slave bond6): Error -95 calling ndo_bpf
[  500.755889][T17721] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  500.850465][T17729] wg1 speed is unknown, defaulting to 1000
[  500.853551][T17729] lo speed is unknown, defaulting to 1000
[  500.959257][T17729] lo speed is unknown, defaulting to 1000
[  501.541788][T17751] netlink: 'syz.2.3006': attribute type 7 has an invalid length.
[  501.545346][T17751] netlink: 'syz.2.3006': attribute type 8 has an invalid length.
[  501.835327][T17762] syzkaller0: entered promiscuous mode
[  501.837330][T17762] syzkaller0: entered allmulticast mode
[  502.949533][T17768] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  503.399266][T17797] __nla_validate_parse: 1 callbacks suppressed
[  503.399286][T17797] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3018'.
[  503.676177][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3020'.
[  503.681483][T17808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'.
[  503.733731][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'.
[  503.846998][T17820] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  504.120510][T17856] netlink: 'syz.1.3028': attribute type 4 has an invalid length.
[  504.129969][ T5890] lo speed is unknown, defaulting to 1000
[  504.132074][ T5890] syz2: Port: 1 Link ACTIVE
[  504.147663][T17858] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3027'.
[  504.716260][T17883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3035'.
[  504.795624][T17885] netlink: 'syz.1.3036': attribute type 1 has an invalid length.
[  504.809380][T17885] bond11: entered promiscuous mode
[  504.811851][T17885] 8021q: adding VLAN 0 to HW filter on device bond11
[  504.824730][T17885] 8021q: adding VLAN 0 to HW filter on device bond11
[  504.828157][T17885] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address
[  504.832266][T17885] bond11: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  504.838842][T17885] bond11: (slave wireguard1): making interface the new active one
[  504.841472][T17885] wireguard1: entered promiscuous mode
[  504.844466][T17885] bond11: (slave wireguard1): Enslaving as an active interface with an up link
[  504.849782][T17885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  504.852766][T17885] IPv6: NLM_F_CREATE should be set when creating new route
[  504.855682][T17885] IPv6: NLM_F_CREATE should be set when creating new route
[  504.859960][T17885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  504.879337][T17885] bond11: (slave wireguard2): The slave device specified does not support setting the MAC address
[  504.884602][T17885] bond11: (slave wireguard2): Enslaving as a backup interface with an up link
[  505.292748][T17901] nbd: socks must be embedded in a SOCK_ITEM attr
[  505.296714][T17901] block nbd0: shutting down sockets
[  506.125436][T17950] IPv6: sit5: Disabled Multicast RS
[  506.127808][T17950] sit5: entered allmulticast mode
[  507.311262][T17991] wg1 speed is unknown, defaulting to 1000
[  507.314299][T17991] lo speed is unknown, defaulting to 1000
[  507.408720][T17991] lo speed is unknown, defaulting to 1000
[  507.830395][T18023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3069'.
[  507.842101][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'.
[  507.847222][T18023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3069'.
[  507.864402][T18025] netlink: 'syz.0.3070': attribute type 2 has an invalid length.
[  507.959251][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3071'.
[  508.384641][T18063] netlink: 'syz.1.3078': attribute type 1 has an invalid length.
[  508.610855][T18069] __nla_validate_parse: 1 callbacks suppressed
[  508.610874][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'.
[  508.919287][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3087'.
[  508.965675][T18102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3088'.
[  508.975463][T18107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3090'.
[  509.057324][T18119] netlink: 'syz.1.3093': attribute type 1 has an invalid length.
[  509.101330][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'.
[  509.176888][T18135] netlink: 'syz.2.3096': attribute type 9 has an invalid length.
[  509.179677][T18135] netlink: 'syz.2.3096': attribute type 9 has an invalid length.
[  509.217002][T18140] 0{X: left allmulticast mode
[  509.225395][T18140] veth0_to_bond: left allmulticast mode
[  509.227694][T18140] veth0_to_team: left promiscuous mode
[  509.229914][T18140] veth0_to_team: left allmulticast mode
[  509.236621][T18140] vlan3: left allmulticast mode
[  509.238545][T18140] veth1: left allmulticast mode
[  509.243844][T18140] bridge5: left allmulticast mode
[  509.255817][T18140] veth9: left promiscuous mode
[  509.489295][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'.
[  509.492935][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3102'.
[  509.495899][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3102'.
[  511.441721][T18196] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  511.563615][T18205] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  511.715846][T18212] wg1 speed is unknown, defaulting to 1000
[  511.718766][T18212] lo speed is unknown, defaulting to 1000
[  511.823902][T18212] lo speed is unknown, defaulting to 1000
[  511.895968][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'.
[  512.415592][ T6562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.419164][ T6562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.581052][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3123'.
[  512.627367][T18245] netlink: 'syz.1.3125': attribute type 32 has an invalid length.
[  512.857383][T18266] netlink: 'syz.1.3129': attribute type 1 has an invalid length.
[  512.862103][T18266] netlink: 'syz.1.3129': attribute type 3 has an invalid length.
[  512.864730][T18266] NCSI netlink: No device for ifindex 246
[  513.152019][T18296] netlink: 'syz.1.3137': attribute type 1 has an invalid length.
[  513.181683][T18296] 8021q: adding VLAN 0 to HW filter on device bond12
[  513.201595][T18296] veth13: entered promiscuous mode
[  513.206194][T18296] bond12: (slave veth13): Enslaving as a backup interface with a down link
[  513.210581][T18296] syz_tun: left allmulticast mode
[  513.212655][T18296] syz_tun: left promiscuous mode
[  513.214779][T18296] bridge0: port 1(syz_tun) entered disabled state
[  513.225275][T18296] bond11: (slave wireguard1): Releasing backup interface
[  513.228297][T18296] wireguard1: left promiscuous mode
[  513.230743][T18296] bond11: (slave wireguard2): making interface the new active one
[  513.236187][T18296] wireguard2: entered promiscuous mode
[  513.249661][T18296] bond11: (slave wireguard2): Releasing backup interface
[  513.254754][T18296] wireguard2: left promiscuous mode
[  513.263168][T18296] bond12: (slave veth13): Releasing backup interface
[  513.290856][T18302] netlink: 'syz.2.3139': attribute type 10 has an invalid length.
[  513.617602][T18314] __nla_validate_parse: 7 callbacks suppressed
[  513.617616][T18314] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3143'.
[  513.627890][T18314] sctp: [Deprecated]: syz.1.3143 (pid 18314) Use of struct sctp_assoc_value in delayed_ack socket option.
[  513.627890][T18314] Use struct sctp_sack_info instead
[  514.098917][T18344] IPVS: Unknown mcast interface: pimreg0
[  514.332362][T18373] 8021q: adding VLAN 0 to HW filter on device bond15
[  514.410154][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'.
[  514.587580][T18395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3165'.
[  514.591533][T18395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3165'.
[  514.638049][T18397] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3166'.
[  514.999091][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'.
[  515.003102][T18411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'.
[  515.010867][T18411] rdma_rxe: rxe_newlink: failed to add bond0
[  516.115692][T18425] netlink: 'syz.0.3174': attribute type 62 has an invalid length.
[  517.025125][T18435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.323333][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3179'.
[  517.341361][T18458] wg1 speed is unknown, defaulting to 1000
[  517.347695][T18458] lo speed is unknown, defaulting to 1000
[  517.464069][T18458] lo speed is unknown, defaulting to 1000
[  517.485851][T18466] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3180'.
[  517.491048][T18466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3180'.
[  518.680588][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'.
[  518.696312][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3188'.
[  518.699339][T18503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3188'.
[  518.745809][T18508] netlink: 'syz.1.3189': attribute type 25 has an invalid length.
[  518.973656][T18530] netlink: 'syz.1.3195': attribute type 1 has an invalid length.
[  518.999751][T18530] 8021q: adding VLAN 0 to HW filter on device bond13
[  519.020007][T18530] bond13: (slave geneve3): making interface the new active one
[  519.025031][T18530] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  519.029017][T12010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.032696][T12010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.040638][T18530] bond13: entered promiscuous mode
[  519.043184][T18530] geneve3: entered promiscuous mode
[  519.049038][T12010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.054322][T12010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.318975][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'.
[  519.322919][T18538] netlink: 'syz.1.3197': attribute type 30 has an invalid length.
[  519.334019][T12010] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  519.334061][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'.
[  519.337486][T12010] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  519.337518][T12010] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  519.337537][T12010] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  519.350739][T18538] netlink: 'syz.1.3197': attribute type 30 has an invalid length.
[  519.359776][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'.
[  519.363530][T18538] netlink: 'syz.1.3197': attribute type 30 has an invalid length.
[  519.418188][T18541] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3198'.
[  519.747055][T18552] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3201'.
[  519.963433][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3209'.
[  520.055717][T18583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.059683][T18583] syzkaller0: entered promiscuous mode
[  520.061671][T18583] syzkaller0: entered allmulticast mode
[  520.078384][T18583] tipc: Resetting bearer <eth:syzkaller0>
[  520.084577][T18582] tipc: Resetting bearer <eth:syzkaller0>
[  520.097864][T18582] tipc: Disabling bearer <eth:syzkaller0>
[  520.464366][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'.
[  521.829464][T18667] bond0: (slave bond6): Error -95 calling ndo_bpf
[  523.112953][T18708] batadv_slave_0: left promiscuous mode
[  523.116766][T18708] 0: left allmulticast mode
[  523.118548][T18708] hsr_slave_0: left allmulticast mode
[  523.120572][T18708] hsr_slave_1: left allmulticast mode
[  523.127272][T18708] bond5: left promiscuous mode
[  523.129243][T18708] gre5: left allmulticast mode
[  523.131366][T18708] ip6tnl1: left promiscuous mode
[  523.133793][T18708] ip6tnl2: left promiscuous mode
[  523.135664][T18708] ip6tnl2: left allmulticast mode
[  523.137598][T18708] tipc: Resetting bearer <eth:syzkaller0>
[  523.356336][T18735] netlink: 'syz.0.3249': attribute type 23 has an invalid length.
[  523.700443][T18759] netlink: 'syz.2.3258': attribute type 13 has an invalid length.
[  523.704117][T18759] netlink: 'syz.2.3258': attribute type 17 has an invalid length.
[  523.740194][T18759] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.748071][T18759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  523.761228][T18761] __nla_validate_parse: 3 callbacks suppressed
[  523.761246][T18761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3259'.
[  523.800995][T18757] wg1 speed is unknown, defaulting to 1000
[  523.805027][T18757] lo speed is unknown, defaulting to 1000
[  523.833583][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'.
[  523.838017][T18764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3260'.
[  523.849054][T18764] netlink: 'syz.0.3260': attribute type 15 has an invalid length.
[  523.941732][T18757] lo speed is unknown, defaulting to 1000
[  526.445088][T18795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3269'.
[  526.477043][T18798] netlink: 'syz.1.3270': attribute type 32 has an invalid length.
[  527.262966][T18832] netlink: 'syz.2.3277': attribute type 32 has an invalid length.
[  527.287167][T18835] netlink: 'syz.0.3278': attribute type 4 has an invalid length.
[  527.558681][T18864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3286'.
[  527.588249][T18869] netlink: 'syz.2.3287': attribute type 32 has an invalid length.
[  527.755055][T18882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'.
[  527.758086][T18882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'.
[  527.764395][T18882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'.
[  528.137442][T18907] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3295'.
[  528.220419][T18910] netlink: 'syz.0.3296': attribute type 2 has an invalid length.
[  528.223228][T18910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3296'.
[  529.796771][T18973] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3314'.
[  529.801720][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'.
[  529.841051][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'.
[  529.880906][T18977] netlink: 'syz.1.3316': attribute type 32 has an invalid length.
[  532.156318][T19010] netlink: 'syz.1.3323': attribute type 4 has an invalid length.
[  532.163908][  T972] lo speed is unknown, defaulting to 1000
[  532.164398][T19010] netlink: 'syz.1.3323': attribute type 4 has an invalid length.
[  532.165816][  T972] syz2: Port: 1 Link DOWN
[  532.172136][    T9] lo speed is unknown, defaulting to 1000
[  532.174509][    T9] syz2: Port: 1 Link ACTIVE
[  532.954174][T19017] xt_CT: No such helper "snmp"
[  533.345554][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3329'.
[  533.390044][T19037] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3330'.
[  533.393965][T19037] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3330'.
[  533.397378][T19037] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3330'.
[  534.008878][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'.
[  534.011888][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3335'.
[  534.019387][T19054] delete_channel: no stack
[  534.243709][T19069] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3338'.
[  535.111800][T19080] netlink: 'syz.0.3341': attribute type 1 has an invalid length.
[  535.115989][T19080] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3341'.
[  535.965338][T19092] netlink: 'syz.0.3344': attribute type 11 has an invalid length.
[  536.018539][T19092] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3344'.
[  536.165067][T19099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3348'.
[  536.169118][T19099] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3348'.
[  536.421080][T19123] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3355'.
[  537.148388][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3365'.
[  537.198600][T19278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3365'.
[  537.593419][T19326] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3374'.
[  537.714745][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3376'.
[  538.404204][T19333] tipc: New replicast peer: 255.255.255.255
[  538.408184][T19333] tipc: Enabled bearer <udp:syz2>, priority 10
[  538.416447][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'.
[  539.921882][T19395] netlink: 'syz.1.3393': attribute type 2 has an invalid length.
[  539.959127][T19400] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  539.978560][T19400] wg1 speed is unknown, defaulting to 1000
[  539.981365][T19400] lo speed is unknown, defaulting to 1000
[  540.091195][T19400] lo speed is unknown, defaulting to 1000
[  540.264543][T19413] __nla_validate_parse: 1 callbacks suppressed
[  540.264560][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3398'.
[  540.326488][T19413] hsr_slave_1 (unregistering): left promiscuous mode
[  540.446761][T19423] netlink: 'syz.1.3400': attribute type 64 has an invalid length.
[  540.455691][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'.
[  540.463154][T19428] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  540.499127][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'.
[  541.034332][T19461] raw_sendmsg: syz.0.3411 forgot to set AF_INET. Fix it!
[  541.253663][T19474] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  544.091123][T19535] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3431'.
[  544.447121][T19553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3436'.
[  544.451342][T19553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'.
[  544.456393][T19553] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3436'.
[  544.460199][T19553] netlink: 'syz.2.3436': attribute type 3 has an invalid length.
[  544.465200][T19553] netlink: 'syz.2.3436': attribute type 2 has an invalid length.
[  544.468244][T19553] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3436'.
[  544.475131][T19557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3438'.
[  544.497000][T19553] wg1 speed is unknown, defaulting to 1000
[  544.500375][T19553] lo speed is unknown, defaulting to 1000
[  544.590629][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'.
[  544.606593][T19553] lo speed is unknown, defaulting to 1000
[  544.703143][T19566] No such timeout policy "syz1"
[  545.665453][T19597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3448'.
[  545.707721][T19602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.710577][T19602] syzkaller0: entered promiscuous mode
[  545.712559][T19602] syzkaller0: entered allmulticast mode
[  545.729227][T19601] tipc: Resetting bearer <eth:syzkaller0>
[  545.740985][T19601] tipc: Disabling bearer <eth:syzkaller0>
[  545.852337][T19605] netlink: 'syz.0.3450': attribute type 1 has an invalid length.
[  545.855168][T19605] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3450'.
[  545.977731][T19614] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3452'.
[  545.983893][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'.
[  545.987580][T19614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3452'.
[  547.178316][T19630] netlink: 'syz.2.3458': attribute type 32 has an invalid length.
[  547.830252][T19650] tun0: tun_chr_ioctl cmd 1074025675
[  547.832777][T19650] tun0: persist enabled
[  547.834912][T19650] tun0: tun_chr_ioctl cmd 1074025675
[  547.837161][T19650] tun0: persist enabled
[  547.926398][T19653] netlink: 'syz.1.3464': attribute type 5 has an invalid length.
[  547.935330][T19653] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  547.939468][T19653] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.006263][T19653] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.010541][T19653] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.065327][T19653] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.069494][T19653] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.128897][T19653] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  548.133468][T19653] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.196493][T12010] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  548.199893][T12010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.213942][T12010] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  548.216907][T12010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.226398][T12010] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  548.229229][T12010] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.238140][T12010] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  548.241530][T12010] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.281726][T19660] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3466'.
[  548.406441][T19665] xt_hashlimit: size too large, truncated to 1048576
[  548.526558][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'.
[  548.588913][T19673] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3471'.
[  549.170609][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3474'.
[  549.177465][T19683] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  549.181228][T19683] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  549.188558][T19683] netlink: 'syz.1.3474': attribute type 7 has an invalid length.
[  549.196186][T19683] : entered promiscuous mode
[  551.717376][T19689] delete_channel: no stack
[  552.117183][T19698] bridge6: entered allmulticast mode
[  552.325075][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'.
[  552.667243][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'.
[  552.851105][T19762] netlink: 'syz.0.3495': attribute type 42 has an invalid length.
[  552.858497][T19762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'.
[  552.875759][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3495'.
[  553.018118][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'.
[  553.949131][T19792] bond0: entered promiscuous mode
[  553.951330][T19792] bond0: left promiscuous mode
[  553.960790][T19793] bond0: entered promiscuous mode
[  553.965507][T19793] bond0: left promiscuous mode
[  553.995632][T19792] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3502'.
[  553.999592][T19794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3502'.
[  554.006026][T19792] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  554.055745][T19796] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  554.449874][T19810] netlink: 'syz.0.3506': attribute type 1 has an invalid length.
[  554.453432][T19810] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3506'.
[  554.828594][T19835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3515'.
[  554.831585][T19835] openvswitch: netlink: EtherType 0 is less than min 600
[  555.051433][T19848] wg1 speed is unknown, defaulting to 1000
[  555.055135][T19848] lo speed is unknown, defaulting to 1000
[  555.145369][T19848] lo speed is unknown, defaulting to 1000
[  556.046677][T19901] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  556.096433][T19906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3533'.
[  558.152611][T19947] __nla_validate_parse: 2 callbacks suppressed
[  558.152626][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3544'.
[  558.848975][T19962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3548'.
[  558.857800][T19962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3548'.
[  558.950331][T19965] netlink: 'syz.0.3549': attribute type 7 has an invalid length.
[  559.007650][T19965] netlink: 'syz.0.3549': attribute type 4 has an invalid length.
[  559.068776][T19965] netlink: 'syz.0.3549': attribute type 4 has an invalid length.
[  559.075460][ T5890] lo speed is unknown, defaulting to 1000
[  559.078042][ T5890] syz0: Port: 1 Link ACTIVE
[  559.080395][ T5890] lo speed is unknown, defaulting to 1000
[  559.337022][T19979] x9: renamed from bridge_slave_0
[  559.847976][T19987] syzkaller0: entered promiscuous mode
[  559.850824][T19987] syzkaller0: entered allmulticast mode
[  559.901118][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3556'.
[  559.919410][ T5898] lo speed is unknown, defaulting to 1000
[  559.923184][T19999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3559'.
[  559.926394][ T5898] syz0: Port: 1 Link DOWN
[  559.938410][ T5898] lo speed is unknown, defaulting to 1000
[  559.966359][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3560'.
[  560.013389][T20006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3561'.
[  560.159141][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3562'.
[  560.167236][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'.
[  560.369404][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'.
[  562.318914][T20075] netlink: 'syz.0.3574': attribute type 5 has an invalid length.
[  562.327312][T20075] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  563.175350][T20093] __nla_validate_parse: 4 callbacks suppressed
[  563.175361][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3580'.
[  563.176952][T20090] netlink: 'syz.2.3580': attribute type 11 has an invalid length.
[  563.183538][T20090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3580'.
[  563.210337][T20092] wg1 speed is unknown, defaulting to 1000
[  563.214705][T20092] lo speed is unknown, defaulting to 1000
[  563.314960][T20092] lo speed is unknown, defaulting to 1000
[  563.337247][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'.
[  563.456924][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'.
[  563.656179][T20120] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  563.660988][T20120] netlink: 'syz.1.3588': attribute type 2 has an invalid length.
[  563.668021][T20120] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3588'.
[  564.028452][T20147] netlink: 'syz.1.3594': attribute type 64 has an invalid length.
[  564.060965][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'.
[  564.069926][T20147] pimreg: left allmulticast mode
[  564.211260][T20169] xt_hashlimit: max too large, truncated to 1048576
[  565.235764][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'.
[  565.239884][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3605'.
[  566.745247][T20244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  566.751242][T20245] syzkaller0: entered promiscuous mode
[  566.754022][T20245] syzkaller0: entered allmulticast mode
[  566.767372][T20244] tipc: Resetting bearer <eth:syzkaller0>
[  566.773178][T20243] tipc: Resetting bearer <eth:syzkaller0>
[  566.782979][T20243] tipc: Disabling bearer <eth:syzkaller0>
[  566.874495][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'.
[  566.877716][T20254] openvswitch: netlink: Unknown nsh attribute 0
[  566.880040][T20254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.907062][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'.
[  567.898507][T20281] netlink: 'syz.2.3630': attribute type 15 has an invalid length.
[  569.150218][T20334] netlink: 'syz.2.3644': attribute type 4 has an invalid length.
[  569.161457][T20334] netlink: 'syz.2.3644': attribute type 4 has an invalid length.
[  569.558232][T20354] __nla_validate_parse: 1 callbacks suppressed
[  569.558244][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3650'.
[  569.600716][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3650'.
[  569.636109][T20357] netlink: 'syz.0.3651': attribute type 1 has an invalid length.
[  569.670886][T20357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3651'.
[  569.677388][T20357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3651'.
[  569.681401][T20357] 8021q: adding VLAN 0 to HW filter on device bond17
[  569.901706][T20375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3656'.
[  569.922218][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3656'.
[  592.217252][T20401] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  592.482196][T20432] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3670'.
[  593.298594][T20451] tap0: tun_chr_ioctl cmd 1074025680
[  593.301716][T20451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  593.305096][T20451] D: renamed from syzkaller0
[  593.308550][T20451] tipc: Disabling bearer <eth:syzkaller0>
[  593.362189][T20453] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3676'.
[  593.493532][T20461] netlink: 'syz.0.3680': attribute type 32 has an invalid length.
[  593.532162][T20463] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3682'.
[  593.730190][T20481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3684'.
[  594.354467][T20484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  594.358361][T20485] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  594.363902][T20483] syzkaller0: entered promiscuous mode
[  594.366485][T20483] syzkaller0: entered allmulticast mode
[  594.550386][T20512] netlink: 'syz.0.3691': attribute type 32 has an invalid length.
[  594.570740][T20521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3692'.
[  594.626155][T20525] netlink: 'syz.1.3693': attribute type 15 has an invalid length.
[  594.742606][T20539] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  594.763991][T20539] netlink: 'syz.2.3696': attribute type 4 has an invalid length.
[  594.794747][T20543] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3697'.
[  594.927686][T20558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'.
[  595.028953][T20574] netlink: 'syz.2.3705': attribute type 13 has an invalid length.
[  595.032198][T20574] netlink: 'syz.2.3705': attribute type 17 has an invalid length.
[  595.038050][T20574] ------------[ cut here ]------------
[  595.040164][T20574] WARNING: CPU: 0 PID: 20574 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0
[  595.043470][T20574] Modules linked in:
[  595.044929][T20574] CPU: 0 UID: 0 PID: 20574 Comm: syz.2.3705 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  595.049817][T20574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  595.053202][T20574] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  595.055290][T20574] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 dd 73 fc f7 e9 78 fe ff ff e8 43 65 9a f7 eb 05 e8 3c 65 9a f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  595.061648][T20574] RSP: 0018:ffffc900067a6620 EFLAGS: 00010293
[  595.063821][T20574] RAX: ffffffff8a25c50d RBX: ffff888037e21c00 RCX: ffff888106d28000
[  595.066432][T20574] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  595.069062][T20574] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  595.071649][T20574] R10: dffffc0000000000 R11: fffff52000cf4cbc R12: ffff888037e21cde
[  595.074256][T20574] R13: ffff888037e21c90 R14: 0000000000000000 R15: 1ffff11006fc4392
[  595.076831][T20574] FS:  00007f7e30e896c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  595.079764][T20574] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  595.081897][T20574] CR2: 00007f7e30e88fc8 CR3: 000000010e372000 CR4: 00000000000006f0
[  595.084544][T20574] Call Trace:
[  595.085663][T20574]  <TASK>
[  595.086647][T20574]  fib6_ifup+0x14a/0x180
[  595.088036][T20574]  ? __pfx_fib6_ifup+0x10/0x10
[  595.089674][T20574]  fib6_clean_node+0x24d/0x590
[  595.091348][T20574]  ? __pfx_fib6_clean_node+0x10/0x10
[  595.093122][T20574]  ? __lock_acquire+0xab9/0xd20
[  595.094698][T20574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  595.096474][T20574]  fib6_walk_continue+0x67b/0x910
[  595.098087][T20574]  fib6_walk+0x149/0x290
[  595.099453][T20574]  __fib6_clean_all+0x234/0x380
[  595.100987][T20574]  ? __fib6_clean_all+0x9b/0x380
[  595.102635][T20574]  ? __pfx_fib6_ifup+0x10/0x10
[  595.104166][T20574]  ? __pfx___fib6_clean_all+0x10/0x10
[  595.106003][T20574]  ? __pfx_fib6_clean_node+0x10/0x10
[  595.108233][T20574]  ? __pfx_fib6_ifup+0x10/0x10
[  595.110262][T20574]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  595.112642][T20574]  rt6_sync_up+0x128/0x160
[  595.114487][T20574]  ? __pfx_rt6_sync_up+0x10/0x10
[  595.116578][T20574]  ? ipv6_mc_up+0x3da/0x580
[  595.118512][T20574]  addrconf_notify+0xd55/0x1010
[  595.120574][T20574]  notifier_call_chain+0x1b6/0x3e0
[  595.122783][T20574]  netif_state_change+0x284/0x3a0
[  595.124903][T20574]  ? __pfx_console_unlock+0x10/0x10
[  595.127074][T20574]  ? __pfx_netif_state_change+0x10/0x10
[  595.129281][T20574]  ? netif_change_flags+0xe8/0x1a0
[  595.131320][T20574]  do_setlink+0x35de/0x41c0
[  595.133289][T20574]  ? __pfx_do_setlink+0x10/0x10
[  595.135339][T20574]  ? _printk+0xcf/0x120
[  595.137099][T20574]  ? __pfx____ratelimit+0x10/0x10
[  595.139231][T20574]  ? __lock_acquire+0xab9/0xd20
[  595.141277][T20574]  ? __mutex_trylock_common+0x153/0x260
[  595.143672][T20574]  ? __pfx___mutex_trylock_common+0x10/0x10
[  595.146094][T20574]  ? rcu_is_watching+0x15/0xb0
[  595.148059][T20574]  ? trace_contention_end+0x39/0x120
[  595.150230][T20574]  ? __mutex_lock+0x330/0xe80
[  595.152237][T20574]  ? __pfx_aa_get_newest_label+0x10/0x10
[  595.154537][T20574]  ? rtnl_newlink+0x8db/0x1c70
[  595.156505][T20574]  ? rcu_is_watching+0x15/0xb0
[  595.158520][T20574]  ? __pfx___mutex_lock+0x10/0x10
[  595.160629][T20574]  ? ns_capable+0x8a/0xf0
[  595.162536][T20574]  ? rtnl_link_get_net_capable+0x16a/0x350
[  595.164966][T20574]  rtnl_newlink+0x149f/0x1c70
[  595.166930][T20574]  ? netlink_sendmsg+0x805/0xb30
[  595.168912][T20574]  ? __pfx_rtnl_newlink+0x10/0x10
[  595.170589][T20574]  ? kasan_quarantine_put+0xdd/0x220
[  595.172324][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[  595.173984][T20574]  ? nlmon_xmit+0xb0/0x100
[  595.175506][T20574]  ? kmem_cache_free+0x18f/0x400
[  595.177141][T20574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  595.179148][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[  595.181325][T20574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  595.183674][T20574]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  595.186057][T20574]  ? __dev_queue_xmit+0x27b/0x3b50
[  595.188184][T20574]  ? __lock_acquire+0xab9/0xd20
[  595.190320][T20574]  ? __pfx_rtnl_newlink+0x10/0x10
[  595.192570][T20574]  rtnetlink_rcv_msg+0x7cf/0xb70
[  595.194685][T20574]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  595.196842][T20574]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  595.199144][T20574]  ? ref_tracker_free+0x63a/0x7d0
[  595.201295][T20574]  ? __asan_memcpy+0x40/0x70
[  595.203353][T20574]  ? __pfx_ref_tracker_free+0x10/0x10
[  595.205682][T20574]  netlink_rcv_skb+0x208/0x470
[  595.207690][T20574]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  595.209998][T20574]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  595.212305][T20574]  ? netlink_deliver_tap+0x2e/0x1b0
[  595.214526][T20574]  netlink_unicast+0x82f/0x9e0
[  595.216553][T20574]  ? __pfx_netlink_unicast+0x10/0x10
[  595.218774][T20574]  ? netlink_sendmsg+0x642/0xb30
[  595.220848][T20574]  ? skb_put+0x11b/0x210
[  595.222724][T20574]  netlink_sendmsg+0x805/0xb30
[  595.224765][T20574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.226983][T20574]  ? aa_sock_msg_perm+0x94/0x160
[  595.229151][T20574]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  595.231394][T20574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.233715][T20574]  __sock_sendmsg+0x21c/0x270
[  595.235714][T20574]  ____sys_sendmsg+0x505/0x830
[  595.237779][T20574]  ? __pfx_____sys_sendmsg+0x10/0x10
[  595.240050][T20574]  ? import_iovec+0x74/0xa0
[  595.242090][T20574]  ___sys_sendmsg+0x21f/0x2a0
[  595.244088][T20574]  ? __pfx____sys_sendmsg+0x10/0x10
[  595.246337][T20574]  ? __fget_files+0x2a/0x420
[  595.248327][T20574]  ? __fget_files+0x3a0/0x420
[  595.250293][T20574]  __x64_sys_sendmsg+0x19b/0x260
[  595.251992][T20574]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  595.253783][T20574]  ? do_syscall_64+0xbe/0x3b0
[  595.255332][T20574]  do_syscall_64+0xfa/0x3b0
[  595.256873][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[  595.258591][T20574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.260587][T20574]  ? exc_page_fault+0x9f/0xf0
[  595.262169][T20574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.264050][T20574] RIP: 0033:0x7f7e2ff8e9a9
[  595.265499][T20574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  595.271870][T20574] RSP: 002b:00007f7e30e89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  595.274684][T20574] RAX: ffffffffffffffda RBX: 00007f7e301b6160 RCX: 00007f7e2ff8e9a9
[  595.277251][T20574] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[  595.279799][T20574] RBP: 00007f7e30010d69 R08: 0000000000000000 R09: 0000000000000000
[  595.282349][T20574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.284936][T20574] R13: 0000000000000000 R14: 00007f7e301b6160 R15: 00007ffd5507c538
[  595.288049][T20574]  </TASK>
[  595.289429][T20574] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  595.292468][T20574] CPU: 0 UID: 0 PID: 20574 Comm: syz.2.3705 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  595.297582][T20574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  595.301716][T20574] Call Trace:
[  595.303076][T20574]  <TASK>
[  595.304297][T20574]  dump_stack_lvl+0x99/0x250
[  595.305935][T20574]  ? __asan_memcpy+0x40/0x70
[  595.307471][T20574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  595.309188][T20574]  ? __pfx__printk+0x10/0x10
[  595.310725][T20574]  panic+0x2db/0x790
[  595.312022][T20574]  ? __pfx_panic+0x10/0x10
[  595.313510][T20574]  ? show_trace_log_lvl+0x4fb/0x550
[  595.315189][T20574]  __warn+0x31b/0x4b0
[  595.316728][T20574]  ? rt6_multipath_rebalance+0x455/0x8b0
[  595.318568][T20574]  ? rt6_multipath_rebalance+0x455/0x8b0
[  595.320386][T20574]  report_bug+0x2be/0x4f0
[  595.321829][T20574]  ? rt6_multipath_rebalance+0x455/0x8b0
[  595.323673][T20574]  ? rt6_multipath_rebalance+0x455/0x8b0
[  595.325537][T20574]  ? rt6_multipath_rebalance+0x457/0x8b0
[  595.327374][T20574]  handle_bug+0x84/0x160
[  595.328776][T20574]  exc_invalid_op+0x1a/0x50
[  595.330299][T20574]  asm_exc_invalid_op+0x1a/0x20
[  595.331896][T20574] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[  595.333938][T20574] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 dd 73 fc f7 e9 78 fe ff ff e8 43 65 9a f7 eb 05 e8 3c 65 9a f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  595.340140][T20574] RSP: 0018:ffffc900067a6620 EFLAGS: 00010293
[  595.342098][T20574] RAX: ffffffff8a25c50d RBX: ffff888037e21c00 RCX: ffff888106d28000
[  595.344656][T20574] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  595.347514][T20574] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  595.350652][T20574] R10: dffffc0000000000 R11: fffff52000cf4cbc R12: ffff888037e21cde
[  595.353840][T20574] R13: ffff888037e21c90 R14: 0000000000000000 R15: 1ffff11006fc4392
[  595.357108][T20574]  ? rt6_multipath_rebalance+0x44d/0x8b0
[  595.359073][T20574]  fib6_ifup+0x14a/0x180
[  595.360487][T20574]  ? __pfx_fib6_ifup+0x10/0x10
[  595.362067][T20574]  fib6_clean_node+0x24d/0x590
[  595.363645][T20574]  ? __pfx_fib6_clean_node+0x10/0x10
[  595.365374][T20574]  ? __lock_acquire+0xab9/0xd20
[  595.367079][T20574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  595.368853][T20574]  fib6_walk_continue+0x67b/0x910
[  595.370523][T20574]  fib6_walk+0x149/0x290
[  595.371923][T20574]  __fib6_clean_all+0x234/0x380
[  595.373529][T20574]  ? __fib6_clean_all+0x9b/0x380
[  595.375138][T20574]  ? __pfx_fib6_ifup+0x10/0x10
[  595.376742][T20574]  ? __pfx___fib6_clean_all+0x10/0x10
[  595.378492][T20574]  ? __pfx_fib6_clean_node+0x10/0x10
[  595.380213][T20574]  ? __pfx_fib6_ifup+0x10/0x10
[  595.381787][T20574]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  595.383621][T20574]  rt6_sync_up+0x128/0x160
[  595.385076][T20574]  ? __pfx_rt6_sync_up+0x10/0x10
[  595.386736][T20574]  ? ipv6_mc_up+0x3da/0x580
[  595.388221][T20574]  addrconf_notify+0xd55/0x1010
[  595.389863][T20574]  notifier_call_chain+0x1b6/0x3e0
[  595.391520][T20574]  netif_state_change+0x284/0x3a0
[  595.393168][T20574]  ? __pfx_console_unlock+0x10/0x10
[  595.394889][T20574]  ? __pfx_netif_state_change+0x10/0x10
[  595.397065][T20574]  ? netif_change_flags+0xe8/0x1a0
[  595.399281][T20574]  do_setlink+0x35de/0x41c0
[  595.401257][T20574]  ? __pfx_do_setlink+0x10/0x10
[  595.403350][T20574]  ? _printk+0xcf/0x120
[  595.405167][T20574]  ? __pfx____ratelimit+0x10/0x10
[  595.407364][T20574]  ? __lock_acquire+0xab9/0xd20
[  595.409466][T20574]  ? __mutex_trylock_common+0x153/0x260
[  595.411809][T20574]  ? __pfx___mutex_trylock_common+0x10/0x10
[  595.414322][T20574]  ? rcu_is_watching+0x15/0xb0
[  595.416348][T20574]  ? trace_contention_end+0x39/0x120
[  595.418578][T20574]  ? __mutex_lock+0x330/0xe80
[  595.420213][T20574]  ? __pfx_aa_get_newest_label+0x10/0x10
[  595.422047][T20574]  ? rtnl_newlink+0x8db/0x1c70
[  595.423632][T20574]  ? rcu_is_watching+0x15/0xb0
[  595.425200][T20574]  ? __pfx___mutex_lock+0x10/0x10
[  595.426891][T20574]  ? ns_capable+0x8a/0xf0
[  595.428316][T20574]  ? rtnl_link_get_net_capable+0x16a/0x350
[  595.430221][T20574]  rtnl_newlink+0x149f/0x1c70
[  595.431767][T20574]  ? netlink_sendmsg+0x805/0xb30
[  595.433419][T20574]  ? __pfx_rtnl_newlink+0x10/0x10
[  595.435069][T20574]  ? kasan_quarantine_put+0xdd/0x220
[  595.436857][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[  595.438574][T20574]  ? nlmon_xmit+0xb0/0x100
[  595.440043][T20574]  ? kmem_cache_free+0x18f/0x400
[  595.441684][T20574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  595.443478][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[  595.445181][T20574]  ? __local_bh_enable_ip+0x12d/0x1c0
[  595.447115][T20574]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  595.448941][T20574]  ? __dev_queue_xmit+0x27b/0x3b50
[  595.450640][T20574]  ? __lock_acquire+0xab9/0xd20
[  595.452252][T20574]  ? __pfx_rtnl_newlink+0x10/0x10
[  595.453925][T20574]  rtnetlink_rcv_msg+0x7cf/0xb70
[  595.455589][T20574]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  595.457223][T20574]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  595.458998][T20574]  ? ref_tracker_free+0x63a/0x7d0
[  595.460662][T20574]  ? __asan_memcpy+0x40/0x70
[  595.462191][T20574]  ? __pfx_ref_tracker_free+0x10/0x10
[  595.463892][T20574]  netlink_rcv_skb+0x208/0x470
[  595.465464][T20574]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  595.467278][T20574]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  595.468995][T20574]  ? netlink_deliver_tap+0x2e/0x1b0
[  595.470661][T20574]  netlink_unicast+0x82f/0x9e0
[  595.472235][T20574]  ? __pfx_netlink_unicast+0x10/0x10
[  595.474040][T20574]  ? netlink_sendmsg+0x642/0xb30
[  595.475750][T20574]  ? skb_put+0x11b/0x210
[  595.477098][T20574]  netlink_sendmsg+0x805/0xb30
[  595.478620][T20574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.480345][T20574]  ? aa_sock_msg_perm+0x94/0x160
[  595.481990][T20574]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  595.483724][T20574]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.485464][T20574]  __sock_sendmsg+0x21c/0x270
[  595.487059][T20574]  ____sys_sendmsg+0x505/0x830
[  595.488639][T20574]  ? __pfx_____sys_sendmsg+0x10/0x10
[  595.490367][T20574]  ? import_iovec+0x74/0xa0
[  595.491867][T20574]  ___sys_sendmsg+0x21f/0x2a0
[  595.493421][T20574]  ? __pfx____sys_sendmsg+0x10/0x10
[  595.495131][T20574]  ? __fget_files+0x2a/0x420
[  595.496660][T20574]  ? __fget_files+0x3a0/0x420
[  595.498190][T20574]  __x64_sys_sendmsg+0x19b/0x260
[  595.499774][T20574]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  595.501526][T20574]  ? do_syscall_64+0xbe/0x3b0
[  595.503072][T20574]  do_syscall_64+0xfa/0x3b0
[  595.504514][T20574]  ? lockdep_hardirqs_on+0x9c/0x150
[  595.506250][T20574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.508215][T20574]  ? exc_page_fault+0x9f/0xf0
[  595.509790][T20574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.511716][T20574] RIP: 0033:0x7f7e2ff8e9a9
[  595.513189][T20574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  595.519806][T20574] RSP: 002b:00007f7e30e89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  595.522464][T20574] RAX: ffffffffffffffda RBX: 00007f7e301b6160 RCX: 00007f7e2ff8e9a9
[  595.525003][T20574] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007
[  595.527805][T20574] RBP: 00007f7e30010d69 R08: 0000000000000000 R09: 0000000000000000
[  595.530879][T20574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.534070][T20574] R13: 0000000000000000 R14: 00007f7e301b6160 R15: 00007ffd5507c538
[  595.537302][T20574]  </TASK>
[  595.539332][T20574] Kernel Offset: disabled
[  595.540796][T20574] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:50:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900067a5dd0
R8 =ffff888021848237 R9 =1ffff11004309046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8ae R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7e30e896c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7e30e88fc8 CR3=000000010e372000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7e30186478 00007f7e30186450 XMM03=00007f7e30186488 00007f7e30186480
XMM04=00007f7e30ced100 00007f7e30186440 XMM05=00007f7e30186458 00007f7e301864a0
XMM06=00007f7e30186498 00007f7e30186490 XMM07=00007f7e30186488 00007f7e30186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7e30011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900074a0000 RBX=1ffff11020f4525a RCX=000000000000009d RDX=ffff888107a292d0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900001e0b88 RSP=ffffc900001e09e0
R8 =ffff888107a296bf R9 =1ffff11020f452d7 R10=dffffc0000000000 R11=ffffed1020f452d8
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff868db66b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557e2e4500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c382a8d CR3=0000000029b00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=005c030002005a03 0002005803020800
XMM02=0200620300020060 030002005e030002 XMM03=5c02006803000200 6603000200640300
XMM04=0fffffffffffff04 0290030002006a03 XMM05=0150100002800424 1000060101fe0008
XMM06=0002c8031c800800 02c00300080002b8 XMM07=030c080002b00300 080002a8036c0800
XMM08=02a0030fffffffff ffff040290030002 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
