last executing test programs:

600.036945ms ago: executing program 0 (id=2897):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x4008af03, &(0x7f0000000c40)={{}, 0x0, 0x810, @inherit={0x60, &(0x7f0000000180)={0x0, 0x3, 0xff, 0x5, {0x20, 0x1ff, 0x5, 0x2, 0x7}, [0x80, 0x8, 0xb]}}, @subvolid=0x3})

540.252501ms ago: executing program 0 (id=2898):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x1402, 0x1, 0x70bd29, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x2000e801}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c00), r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000080)={'syztnl1\x00', <r3=>0x0, 0x8000, 0x7807, 0x6, 0x8, {{0x19, 0x4, 0x3, 0x8, 0x64, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0xc, 0x3, 0xe, [{@multicast1, 0x5eb}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x2}, {@private=0xa010100, 0x2}, {@multicast2, 0x5}, {@broadcast, 0x3}, {@broadcast, 0x8d8}, {@broadcast, 0x4}]}, @noop, @generic={0x83, 0x12, "13fb0e6f80f0ff3b9c5c7b06b3af1cd8"}, @noop]}}}}})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r7)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x11a, 0x11, 0x0, 0x0)
r10 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000080)='\'', 0x1}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x2000c0c4)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f0000001bc0))
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x14, r11, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x240008c4)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0x40d01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x50)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r13, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000)
sendmsg$sock(r13, &(0x7f0000001940)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x92, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)="f97ba9aeb02bfeedfc8eea2181bd1051f1127267a8e617a7221f4220ed5ded6290e6812adbcc63bb5c07490bb0a021a5e7a9943b958f8f52d65e75c5f9544b3be3ec929c326fbaae109aee39be3db01bfae3dfb0de64603976b478aa41", 0x5d}, {&(0x7f0000000540)="f1af79b899ea403f6a6c2e85a944ce6218b8591799b5261c9485c8922a3723d3147486d799997f8cf0533c8e8bb2e4f4bffe17e9487c1e42142183a75b0b093a0eedfbb58862801048e5358168ca8ce1547264cc1ca9eef8880c30938065bbbb255ed0bbc5bfb4cbed25f2415506939a2b2679bdd938d1a72e46426424fe75c21da43cf74de64c83d83a12951fc3b4990e91f3a34828921dddde2da17c949ad9520a2ae15e58fc8caac56550f43a6ada603ceb3b4f4803", 0xb7}, {&(0x7f0000000680)="9f85ff3ff1940c8ea3f2669651fe90b07edd8b9eab7ec16e995dcf39ed4b58d3447b40f4e517d778dedd42cb012a6745dbb7acdee1dfdaeafd55ed65f409c8effa86956732aa8c33d325a15cc50ccbcd2a7214252b8ee22325d3d3c588cd47a331da5017cef0951280a322c7d1e31b11b1ec88e92999d20806c2324d1385926b2bb59ac5f2543f2ad5ca0b7f", 0x8c}, {&(0x7f0000000280)="bae8f836", 0x4}, {&(0x7f0000000400)="ca7db6a8da0731e4c504852c945d873417e001d640c4591aec1857a34286222b3cf7e51f7f95f554692c6cbf5d2bbf9ad43615c93ff6a28fe7aae25a24514472abdc3301f87ef86ecd8e559b7968f78fcb342533959a30feea2cb498", 0x5c}, {&(0x7f0000000740)="4d968bc151196e724e43285689106efd76f1747ab4bd9f235d8404766d1874be4363b71f8a409ed8bbd3e7c25f1f82049e1975a86e56af2ec438f879ff894c956e80a72ca18376732aa80c44b5d8a13bda5a8499ae81eb53f197b2107c43a5b924bcfe9b7b0bb904e82c0eee18cf0188bb75644e01a03780e4d490aee27a71bcb69a2a4e1633b21aa84291d6ab41d3250c8664a43931ecfb242081a5eaf24ae0ec371fdab4", 0xa5}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="8b52990f8c8cc08f6c0f212b07bcf769a5ceee8ab7773ec69762c589164244973d216403", 0x24}], 0x8, &(0x7f00000018c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x951c}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}, 0x800)

501.5381ms ago: executing program 0 (id=2902):
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@default, @netrom, @netrom, @null, @bcast, @remote, @netrom, @default]}, &(0x7f00000000c0)=0x48, 0x80800)
recvmsg(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@caif=@util, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000003340)=""/4123, 0x101b}, {&(0x7f00000007c0)=""/106, 0x6a}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000000740)=""/92, 0x5c}], 0x9, &(0x7f0000000840)=""/161, 0xa1}, 0x40010021)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4000)
ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x4000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f00000023c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={<r6=>r1, 0xd1, 0x4, 0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000ac0)}, 0x20)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000e80)=[0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0, 0x69, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@bloom_filter={0x1e, 0x8, 0x5, 0x1ff, 0x1a20, r3, 0xfffffff7, '\x00', 0x0, r3, 0x2, 0x4, 0x5, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001200)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x19, 0x19, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x1ff, 0xe1, &(0x7f0000000c80)=""/225, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r8, 0x8, &(0x7f0000000dc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x7, 0xe7df, 0x7}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000001240)=[r10, 0x1, r4, r11, r12], &(0x7f0000001280)=[{0x3, 0x3, 0x4, 0x5}]}, 0x94)
r13 = socket(0x400000000010, 0x3, 0x100)
r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8, r0}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r14, 0x4)
r15 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r16, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

451.073909ms ago: executing program 1 (id=2903):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000180))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="800002000a00020011"], 0x28}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9b9)

449.927756ms ago: executing program 1 (id=2905):
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40882}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r3 = socket(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r3}, 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r7, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r7, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="8ae91834b509f865917cb233e9d2f03eb6a5661ddf1b3e7e2db876ac4712c52f327ee646cb3e8cc0a4fc4b09bd6ab754e474", 0x32}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f00000002c0)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001080)="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", 0x155}, {&(0x7f0000000c80)='a', 0x1}, {0x0}, {0x0}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000cc0)}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000480)="7cb4ed8d75b2bf3112799fd6df65ec2e59789849019ba02cf53691cc6a3861c12a7561473f42faa934fbade4b821748f020274d96c341c767249d5c73a686846b2277104adaec1988872649bfc0b166d57f560d39595", 0x56}, {&(0x7f0000001040)="96", 0x1}], 0x2}}], 0x4, 0x4048841)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x4008af13, &(0x7f0000000000))

370.627544ms ago: executing program 1 (id=2907):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x8008af26, &(0x7f0000000300)=0xfffffe)
r2 = epoll_create1(0x0)
epoll_create1(0x0)
close(r2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x0, 0xe883)
accept4(r4, 0x0, 0x0, 0x80000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000140), 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0xfffffffffffffeb7)
sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1, &(0x7f0000000140)=""/21, 0x15}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0)
socket(0x10, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000020626594f956b830300000000000000004000000000e520ec1a2f96b67c3a6e65742c6e"], 0x28}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYBLOB="d852ca11d20ba8178a6fbdbab2228ea246a8d466e9fdcd4070855bc884bfa3bc47464375c4cc03ab2040627ec9c6309b2442ff052ca096f398f17c10d08343476bcd8a3a9e5c320513faa35241783f34e22742f7ce17b6f71fec9e96632b384225ad8a2ea48f034c4d1093ab", @ANYRESHEX=r1, @ANYBLOB='&'], 0x32600)

366.999889ms ago: executing program 0 (id=2908):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x7fff8, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
select(0xfc61, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000001000), &(0x7f0000001080))
bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

320.954157ms ago: executing program 2 (id=2909):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x7c}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd004000", 0x24)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x2, 0xee6bef48d40c30ff, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6d3e0e1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

270.741706ms ago: executing program 1 (id=2910):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x3}, 0x8)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], &(0x7f0000000580)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0xf)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

270.384451ms ago: executing program 2 (id=2911):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket(0x400000000010, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x11, 0xa, 0x300)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9dc317095013d37e34438e811b000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRESHEX=0x0, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xffff, 0x8}, {0xffff, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffd93, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x107fff, 0x7d, 0x240}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="010040008b371cb777dd4e9a1ec2c415b0327a7e91c72f385b", @ANYRES16=r1, @ANYBLOB="000229bd7000fbdbdf2501000000080003000200000008000200050000004800018008000300ac14143b0500020010000000060005004e230000060005004e21000008000300e000000114000400fe88000000000000000000000000000108000700", @ANYRES32=r6, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4)

200.574412ms ago: executing program 0 (id=2912):
syz_init_net_socket$netrom(0xffffffffffffffff, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000073114300000000008510000002000000960000007600000095000200000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4008af21, &(0x7f0000000000))

140.095858ms ago: executing program 0 (id=2913):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x44090)
sendto$rxrpc(r0, &(0x7f0000000000)="362c549c414ccd2132c470bab056bd0d47e4ab76e1262e08216776c562aa075a58e7a6eaa6eb58eab102284ed185674d3cc6c58d2c706937dc1fae8c1812015388801a0f7541709e843561eb65e4600af04445bb0434bed5c80b73cdc939df174af7a97cba83f5e112ce9506f1a542496336bee116909b0c10028e4bc7ac00e8b9154ac3c84201b2e9de4f3be3125a048872d469f9aa7235ecee026692b4651246b0e350f2ae7b257921a3b8a8b9a4a66607e23f718a753fd5117ac0f57640a0af21b274bac0a3108d396833bce23521335f0f811f7e0c977dce3a7438c85e04b5bec3c261c27afe8bee3a516ddb4638872eb342675990", 0xf7, 0x4, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x24)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
read$alg(r4, &(0x7f00000012c0)=""/4109, 0x100d)
sendmmsg$alg(r4, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001b1401"], 0x10}}, 0x44090) (async)
sendto$rxrpc(r0, &(0x7f0000000000)="362c549c414ccd2132c470bab056bd0d47e4ab76e1262e08216776c562aa075a58e7a6eaa6eb58eab102284ed185674d3cc6c58d2c706937dc1fae8c1812015388801a0f7541709e843561eb65e4600af04445bb0434bed5c80b73cdc939df174af7a97cba83f5e112ce9506f1a542496336bee116909b0c10028e4bc7ac00e8b9154ac3c84201b2e9de4f3be3125a048872d469f9aa7235ecee026692b4651246b0e350f2ae7b257921a3b8a8b9a4a66607e23f718a753fd5117ac0f57640a0af21b274bac0a3108d396833bce23521335f0f811f7e0c977dce3a7438c85e04b5bec3c261c27afe8bee3a516ddb4638872eb342675990", 0xf7, 0x4, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x24) (async)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async)
accept4$alg(r3, 0x0, 0x0, 0x0) (async)
read$alg(r4, &(0x7f00000012c0)=""/4109, 0x100d) (async)
sendmmsg$alg(r4, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)) (async)

139.541065ms ago: executing program 2 (id=2914):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x4004af07, &(0x7f0000000c40)={{}, 0x0, 0x10000000, @inherit={0x60, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000300000000000000ff0000000000000005000000000000002000000000000000ff01000000000000050000000000000002000000000000000700000000000000000008000000000000000b00000000000000000000000000f0ea4982a88228bfa5e8548ba96d39fde6c99548c3052a34e63530e168c6ef87d23f7c96f744824b38d26ac1a0cb1951c79569c9fd432d857f0c88d00862258d21d8cf46dd74f16bf3f4c951066ae3cfddb197d185eda2b876a8e3692a16f320aa5048ef96b5adbda645d588612f8890410afa89e5741b685c5003f540f10e53bbf1561c60f9ec0307108c"]}, @subvolid=0x3})

60.433448ms ago: executing program 1 (id=2915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x8008af26, &(0x7f0000000300)=0xfffffe)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
close(r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000140), 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1, &(0x7f0000000140)=""/21, 0x15}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x397)
epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))

60.150443ms ago: executing program 2 (id=2916):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e800800060052000000080005"], 0x38}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
writev(r1, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000340)={<r5=>0x0, 0x0, 0x40, 0x1})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x4004af07, &(0x7f0000000c40)={{r0}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000840)=ANY=[]}, @devid=r5})

59.833286ms ago: executing program 1 (id=2917):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xca4, 0x400, 0x4b, 0x5c75, 0x800, 0xc, 0x1, 0xffffffff, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x0, 0xc}, {0xd, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4031}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

623.839µs ago: executing program 2 (id=2918):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680100008800c"], 0x38}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)

0s ago: executing program 2 (id=2919):
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)="0004")
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000)

kernel console output (not intermixed with test programs):

over after parsing attributes in process `syz.1.312'.
[   77.963118][ T6886] netlink: 'syz.0.339': attribute type 4 has an invalid length.
[   78.260623][ T6900] bridge_slave_0: left allmulticast mode
[   78.262885][ T6900] bridge_slave_0: left promiscuous mode
[   78.269813][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.283502][ T6900] bridge_slave_1: left allmulticast mode
[   78.285549][ T6900] bridge_slave_1: left promiscuous mode
[   78.287398][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.298968][ T6900] bond0: (slave bond_slave_0): Releasing backup interface
[   78.306533][ T6900] bond0: (slave bond_slave_1): Releasing backup interface
[   78.313295][ T6900] team0: Port device team_slave_0 removed
[   78.320083][ T6900] team0: Port device team_slave_1 removed
[   78.322472][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.327232][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.330386][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.332715][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.651776][ T6938] erspan0: entered promiscuous mode
[   78.663091][ T6938] batman_adv: batadv0: Adding interface: macvlan2
[   78.666010][ T6938] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.676440][ T6938] batman_adv: batadv0: Interface activated: macvlan2
[   78.731830][ T6955] netlink: 'syz.1.360': attribute type 2 has an invalid length.
[   78.760072][ T6957] netlink: 'syz.2.361': attribute type 11 has an invalid length.
[   79.092517][ T6965] bridge1: entered promiscuous mode
[   79.122223][ T6965] bridge2: entered promiscuous mode
[   79.308188][ T6985] syzkaller0: entered promiscuous mode
[   79.310234][ T6985] syzkaller0: entered allmulticast mode
[   79.825769][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[   80.439887][ T7018] __nla_validate_parse: 11 callbacks suppressed
[   80.439904][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[   80.492441][ T7022] netlink: 64 bytes leftover after parsing attributes in process `syz.1.383'.
[   80.700614][ T7032] netlink: 'syz.0.387': attribute type 12 has an invalid length.
[   80.822793][ T7042] netlink: 64 bytes leftover after parsing attributes in process `syz.1.391'.
[   80.900133][ T7046] netlink: 'syz.1.393': attribute type 41 has an invalid length.
[   81.103668][ T7061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.124492][ T7061] tipc: Disabling bearer <eth:syzkaller0>
[   81.362566][ T1272] cfg80211: failed to load regulatory.db
[   81.511809][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'.
[   81.533066][ T7078] nbd: nbd0 already in use
[   81.637274][ T7080] netlink: 'syz.0.403': attribute type 1 has an invalid length.
[   81.660983][ T7080] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.667152][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.682771][ T7080] syzkaller1: entered allmulticast mode
[   81.687596][ T7080] syzkaller1: left allmulticast mode
[   81.694163][ T7080] netlink: 'syz.0.403': attribute type 3 has an invalid length.
[   81.697059][ T7080] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.403'.
[   81.707017][ T7080] vlan1: entered allmulticast mode
[   81.708881][ T7080] macvtap0: entered allmulticast mode
[   81.710984][ T7080] veth0_macvtap: entered allmulticast mode
[   81.721442][ T7080] bond1: (slave vlan1): making interface the new active one
[   81.728027][ T7080] bond1: (slave vlan1): Enslaving as an active interface with an up link
[   81.977354][ T7090] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.040154][ T7090] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.087642][ T7090] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.129373][ T7090] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.203235][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.216659][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.227647][ T5876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.239057][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.565489][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'.
[   82.569173][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'.
[   82.572731][ T7107] netlink: 'syz.0.414': attribute type 4 has an invalid length.
[   82.581020][ T7107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.414'.
[   82.862907][ T7133] team0: No ports can be present during mode change
[   83.922341][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'.
[   83.966232][ T7161] nbd: nbd1 already in use
[   84.096752][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'.
[   84.827826][ T7184] bridge0: entered allmulticast mode
[   84.853467][ T7184] sctp: [Deprecated]: syz.2.438 (pid 7184) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.853467][ T7184] Use struct sctp_sack_info instead
[   84.860791][ T7188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.900737][ T7191] netlink: 'syz.1.442': attribute type 1 has an invalid length.
[   85.304239][ T7218] netlink: 'syz.1.452': attribute type 1 has an invalid length.
[   85.309103][ T7218] NCSI netlink: No device for ifindex 0
[   85.509963][ T7230] __nla_validate_parse: 2 callbacks suppressed
[   85.509978][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'.
[   85.753870][ T7249] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[   85.757854][ T7249] netlink: 'syz.1.463': attribute type 3 has an invalid length.
[   85.761049][ T7249] netlink: 224 bytes leftover after parsing attributes in process `syz.1.463'.
[   85.819098][ T7256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.466'.
[   85.823847][ T7256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.466'.
[   85.847847][ T7258] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   85.860910][ T7256] bridge_slave_0: left allmulticast mode
[   85.863193][ T7256] bridge_slave_0: left promiscuous mode
[   85.876223][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.894382][ T7256] bridge_slave_1: left allmulticast mode
[   85.896642][ T7256] bridge_slave_1: left promiscuous mode
[   85.900966][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.921290][ T7256] bond0: (slave bond_slave_0): Releasing backup interface
[   85.930841][ T7256] bond0: (slave bond_slave_1): Releasing backup interface
[   85.948556][ T7252] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[   85.948832][ T7256] team0: Port device C removed
[   85.958834][ T7256] team0: Port device team_slave_1 removed
[   85.961691][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.964909][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.969287][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.971822][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.988352][ T7256] batman_adv: batadv0: Interface deactivated: macvlan2
[   85.990662][ T7256] batman_adv: batadv0: Removing interface: macvlan2
[   86.063688][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'.
[   86.229171][ T7281] netlink: 'syz.1.475': attribute type 2 has an invalid length.
[   86.232248][ T7281] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.475'.
[   86.466815][ T7290] veth0: entered promiscuous mode
[   86.512657][ T7285] veth0: left promiscuous mode
[  115.115526][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.482'.
[  115.133341][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'.
[  115.142225][ T7303] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  115.170744][ T7303] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  115.180131][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'.
[  115.729801][ T7317] netlink: 64 bytes leftover after parsing attributes in process `syz.0.486'.
[  117.195616][ T7347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.496'.
[  117.455603][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'.
[  117.458460][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'.
[  118.559794][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[  119.338291][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'.
[  119.341107][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'.
[  119.945567][ T7454] sctp: [Deprecated]: syz.2.527 (pid 7454) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.945567][ T7454] Use struct sctp_sack_info instead
[  119.962737][ T7454] sctp: [Deprecated]: syz.2.527 (pid 7454) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.962737][ T7454] Use struct sctp_sack_info instead
[  119.993318][ T7454] syz_tun: entered allmulticast mode
[  120.477332][ T7473] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[  120.490353][ T7473] __nla_validate_parse: 1 callbacks suppressed
[  120.490363][ T7473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.532'.
[  120.509362][ T7473] sctp: [Deprecated]: syz.2.532 (pid 7473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.509362][ T7473] Use struct sctp_sack_info instead
[  121.040584][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[  121.043595][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[  121.096653][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[  121.106156][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[  121.183829][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[  121.189175][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[  122.124215][ T7524] nbd2: detected capacity change from 0 to 127
[  122.152378][   T57] block nbd2: Receive control failed (result -32)
[  122.155131][ T7522] block nbd2: Send control failed (result -32)
[  122.163358][ T7522] block nbd2: Request send failed, requeueing
[  122.184748][ T7522] block nbd2: Dead connection, failed to find a fallback
[  122.187495][ T7522] block nbd2: shutting down sockets
[  122.189815][ T1114] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.193601][ T1114] Buffer I/O error on dev nbd2, logical block 0, async page read
[  122.213108][ T7522] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.223120][ T7522] Buffer I/O error on dev nbd2, logical block 1, async page read
[  122.233201][ T7522] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.236567][ T7522] Buffer I/O error on dev nbd2, logical block 2, async page read
[  122.240094][ T7522] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.242937][ T7522] Buffer I/O error on dev nbd2, logical block 3, async page read
[  122.246367][ T7522] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.249651][ T7522] Buffer I/O error on dev nbd2, logical block 0, async page read
[  122.252623][ T7522] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.256157][ T7522] Buffer I/O error on dev nbd2, logical block 1, async page read
[  122.259486][ T7522] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.262663][ T7522] Buffer I/O error on dev nbd2, logical block 2, async page read
[  122.266075][ T7522] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.269710][ T7522] Buffer I/O error on dev nbd2, logical block 3, async page read
[  122.272552][ T7522] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.275690][ T7522] Buffer I/O error on dev nbd2, logical block 0, async page read
[  122.278729][ T7522] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  122.281660][ T7522] Buffer I/O error on dev nbd2, logical block 1, async page read
[  122.289010][ T7522] ldm_validate_partition_table(): Disk read failed.
[  122.293371][ T7522] Dev nbd2: unable to read RDB block 0
[  122.297462][ T7522]  nbd2: unable to read partition table
[  122.428736][ T7533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.553'.
[  122.513349][ T7522] ldm_validate_partition_table(): Disk read failed.
[  122.536039][ T7522] Dev nbd2: unable to read RDB block 0
[  122.539585][ T7522]  nbd2: unable to read partition table
[  122.612712][ T7540] netlink: 'syz.2.556': attribute type 1 has an invalid length.
[  122.618241][ T7540] netlink: 224 bytes leftover after parsing attributes in process `syz.2.556'.
[  122.978827][ T7559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.561'.
[  123.958810][ T7573] tipc: Can't bind to reserved service type 2
[  124.089383][ T7579] netlink: 'syz.2.567': attribute type 1 has an invalid length.
[  124.338276][ T7592] !: renamed from dummy0 (while UP)
[  124.970730][ T7615] netlink: 'syz.0.578': attribute type 5 has an invalid length.
[  125.363396][ T7640] netlink: 'syz.0.588': attribute type 1 has an invalid length.
[  125.379886][ T7640] 8021q: adding VLAN 0 to HW filter on device bond2
[  125.391053][ T7640] ipvlan0: entered allmulticast mode
[  125.392763][ T7640] bond2: entered allmulticast mode
[  125.403695][ T7640] bond2: (slave gretap1): making interface the new active one
[  125.406447][ T7640] gretap1: entered allmulticast mode
[  125.409388][ T7640] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  125.475760][ T7640] syz.0.588 (7640) used greatest stack depth: 18736 bytes left
[  125.533677][ T7645] __nla_validate_parse: 5 callbacks suppressed
[  125.533694][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.590'.
[  125.670876][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'.
[  125.681270][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'.
[  125.687993][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'.
[  125.742097][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[  125.748562][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  125.758325][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[  125.758416][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.761652][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  125.767796][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.770942][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.774768][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.117511][ T7689] netlink: 44 bytes leftover after parsing attributes in process `syz.2.607'.
[  126.387324][ T7692] netlink: 'syz.0.608': attribute type 13 has an invalid length.
[  126.518478][ T7697] nbd: couldn't find device at index 0
[  126.682225][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'.
[  126.885562][ T7717] bridge1: entered promiscuous mode
[  127.039960][ T7736] netlink: 'syz.0.624': attribute type 11 has an invalid length.
[  127.040978][ T7737] netlink: 'syz.0.624': attribute type 11 has an invalid length.
[  127.055561][ T7735] syzkaller1: entered promiscuous mode
[  127.057546][ T7735] syzkaller1: entered allmulticast mode
[  127.224353][ T7748] Illegal XDP return value 4294967274 on prog  (id 165) dev N/A, expect packet loss!
[  127.255089][ T7752] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  127.259581][ T7752] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  127.366711][ T5896] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  127.373143][ T5896] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  127.388655][ T7760] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  127.391123][ T7760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.856750][ T7777] 8021q: VLANs not supported on xfrm0
[  128.196744][ T7804] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  128.215768][ T7807] netlink: 'syz.0.645': attribute type 1 has an invalid length.
[  128.580209][ T7820] netlink: 'syz.1.653': attribute type 1 has an invalid length.
[  128.626114][ T7820] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.644732][ T7820] ipvlan2: entered allmulticast mode
[  128.646941][ T7820] bond1: entered allmulticast mode
[  128.668667][ T7820] bond1: (slave gretap1): making interface the new active one
[  128.673330][ T7820] gretap1: entered allmulticast mode
[  128.676801][ T7820] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  128.808216][ T7840] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  128.935848][ T7847] netlink: 'syz.1.662': attribute type 16 has an invalid length.
[  128.939730][ T7847] netlink: 'syz.1.662': attribute type 17 has an invalid length.
[  129.056009][ T7844] netlink: 'syz.1.662': attribute type 32 has an invalid length.
[  129.058815][ T7853] netlink: 'syz.0.665': attribute type 1 has an invalid length.
[  129.064608][ T7854] netlink: 'syz.0.665': attribute type 1 has an invalid length.
[  129.300658][ T7874] netlink: 'syz.1.670': attribute type 29 has an invalid length.
[  129.306783][ T7874] netlink: 'syz.1.670': attribute type 29 has an invalid length.
[  129.515815][ T7886] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  129.520068][ T7886] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  129.946407][ T7910] sock: sock_timestamping_bind_phc: sock not bind to device
[  130.041954][ T7930] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  130.046135][ T7930] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  131.424969][ T8015] __nla_validate_parse: 16 callbacks suppressed
[  131.424985][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[  131.431086][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[  131.591998][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'.
[  131.598416][ T8019] validate_nla: 5 callbacks suppressed
[  131.598428][ T8019] netlink: 'syz.1.708': attribute type 30 has an invalid length.
[  131.871606][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'.
[  132.129829][ T8045] netlink: 'syz.1.718': attribute type 16 has an invalid length.
[  132.132588][ T8045] netlink: 'syz.1.718': attribute type 17 has an invalid length.
[  132.269122][ T8060] 8021q: VLANs not supported on xfrm0
[  132.333863][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'.
[  132.410053][ T8072] netlink: 'syz.0.726': attribute type 16 has an invalid length.
[  132.412670][ T8072] netlink: 'syz.0.726': attribute type 17 has an invalid length.
[  132.421890][ T8070] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  132.459988][ T8076] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  132.463070][ T8076] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  132.547652][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.557934][ T8085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.731'.
[  132.587396][ T8087] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  132.631547][ T8092] netlink: 'syz.0.729': attribute type 13 has an invalid length.
[  132.643940][ T8092] netlink: 'syz.0.729': attribute type 17 has an invalid length.
[  132.670815][ T8092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.712029][ T8098] netlink: 'syz.1.736': attribute type 16 has an invalid length.
[  132.719683][ T8098] netlink: 'syz.1.736': attribute type 17 has an invalid length.
[  132.841499][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'.
[  132.880092][ T8106] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.740'.
[  132.937393][ T8115] netlink: 516 bytes leftover after parsing attributes in process `syz.2.744'.
[  133.061983][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.744'.
[  133.297661][ T8144] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[  133.638303][ T8156] 8021q: VLANs not supported on xfrm0
[  133.724301][ T8161] C: renamed from lo (while UP)
[  133.728598][ T8161] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  135.319546][ T8223] 8021q: VLANs not supported on xfrm0
[  135.449635][ T8229] syzkaller1: entered promiscuous mode
[  135.451264][ T8229] syzkaller1: entered allmulticast mode
[  136.771833][ T8291] tc_dump_action: action bad kind
[  136.778836][ T8291] validate_nla: 2 callbacks suppressed
[  136.778846][ T8291] netlink: 'syz.0.797': attribute type 4 has an invalid length.
[  136.788173][ T8289] __nla_validate_parse: 9 callbacks suppressed
[  136.788189][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  136.882780][ T8299] netlink: 104 bytes leftover after parsing attributes in process `syz.0.798'.
[  137.774563][ T8306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.801'.
[  138.658972][ T8392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.827'.
[  138.701599][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.830'.
[  138.746895][ T8398] netlink: 'syz.1.829': attribute type 11 has an invalid length.
[  139.272437][ T8420] netlink: 'syz.2.838': attribute type 16 has an invalid length.
[  139.277403][ T8420] netlink: 'syz.2.838': attribute type 17 has an invalid length.
[  139.354229][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'.
[  139.471838][ T8434] netlink: 'syz.2.844': attribute type 11 has an invalid length.
[  139.474528][ T8434] netlink: 'syz.2.844': attribute type 4 has an invalid length.
[  139.477018][ T8434] netlink: 224 bytes leftover after parsing attributes in process `syz.2.844'.
[  139.647065][ T8444] syzkaller1: entered promiscuous mode
[  139.649051][ T8444] syzkaller1: entered allmulticast mode
[  139.941824][ T8466] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  139.949720][ T8466] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  140.416438][ T8484] geneve2: entered promiscuous mode
[  141.796703][ T8520] netlink: 'syz.1.875': attribute type 2 has an invalid length.
[  141.799388][ T8520] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.875'.
[  141.835694][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'.
[  141.951989][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'.
[  142.503818][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'.
[  142.538360][ T8562] bridge_slave_0: default FDB implementation only supports local addresses
[  142.646075][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.893'.
[  142.873192][ T8597] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  142.879642][ T8597] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  142.896801][ T8596] !: renamed from dummy0 (while UP)
[  142.926399][ T8599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.962558][ T8604] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  143.005382][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'.
[  143.015335][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'.
[  143.057873][ T8611] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.907'.
[  143.146888][ T8622] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[  143.150299][ T8622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.911'.
[  143.202500][ T8629] netlink: 'syz.2.910': attribute type 16 has an invalid length.
[  143.214636][ T8629] netlink: 'syz.2.910': attribute type 17 has an invalid length.
[  143.291719][ T8631] netlink: 'syz.0.913': attribute type 23 has an invalid length.
[  143.331130][ T8635] netlink: 'syz.1.914': attribute type 9 has an invalid length.
[  143.353085][ T8635] netlink: 'syz.1.914': attribute type 6 has an invalid length.
[  143.450017][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.918'.
[  143.459517][ T8643] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  143.463518][ T8643] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  143.533948][ T8656] batadv_slave_0: entered promiscuous mode
[  143.540234][ T8655] batadv_slave_0: left promiscuous mode
[  143.596854][ T8660] C: renamed from team_slave_0
[  143.625377][ T8660] netlink: 'syz.0.925': attribute type 8 has an invalid length.
[  143.627832][ T8660] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.820621][ T8663] veth0_macvtap: left allmulticast mode
[  143.856301][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.859736][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.874138][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.881364][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.293473][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.299406][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.302826][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.309253][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.043467][ T8727] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  145.183173][ T8741] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.190350][ T8741] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.262281][ T8741] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.271502][ T8741] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.321142][ T8741] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.328186][ T8741] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.380092][ T8741] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.385072][ T8741] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.508629][ T5876] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.511992][ T5876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.553525][ T8761] bond1: (slave vlan1): Releasing active interface
[  145.605736][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.608590][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.623581][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.626645][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.641085][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.643938][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.509517][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  146.827564][ T8829] netlink: 'syz.1.983': attribute type 10 has an invalid length.
[  146.831655][ T8829] bond0: (slave wlan1): Opening slave failed
[  146.836619][ T8829] __nla_validate_parse: 16 callbacks suppressed
[  146.836631][ T8829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.983'.
[  147.339982][ T8834] netlink: 'syz.2.985': attribute type 10 has an invalid length.
[  147.343127][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.985'.
[  147.350740][ T8834] dummy0: entered promiscuous mode
[  147.353387][ T8834] dummy0: entered allmulticast mode
[  147.357114][ T8834] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  147.367046][ T8837] bridge_slave_0: invalid flags given to default FDB implementation
[  147.408051][ T8837] netlink: 72 bytes leftover after parsing attributes in process `syz.0.986'.
[  147.622149][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.994'.
[  147.780231][ T8875] netlink: 'syz.0.997': attribute type 11 has an invalid length.
[  147.862983][ T8881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.877481][ T8877] netlink: 'syz.2.999': attribute type 1 has an invalid length.
[  147.880447][ T8877] netlink: 220 bytes leftover after parsing attributes in process `syz.2.999'.
[  147.883407][ T8877] netlink: 'syz.2.999': attribute type 1 has an invalid length.
[  148.066077][ T8896] gre2: entered promiscuous mode
[  148.067749][ T8896] gre2: entered allmulticast mode
[  148.192714][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1009'.
[  148.820981][ T8927] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[  148.824957][ T8927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1017'.
[  148.906751][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'.
[  149.000039][ T8942] netlink: 'syz.0.1024': attribute type 1 has an invalid length.
[  149.029049][ T8942] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  149.036657][ T8942] 8021q: adding VLAN 0 to HW filter on device bond4
[  149.038826][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  149.079967][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1026'.
[  149.122729][ T8942] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  149.127420][ T8942] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  149.132736][ T8942] bond4 (unregistering): Released all slaves
[  149.247177][ T8964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'.
[  149.313820][ T8975] openvswitch: netlink: Tunnel attr 13 has unexpected len 2 expected 16
[  149.613253][ T9007] netlink: 'syz.2.1045': attribute type 21 has an invalid length.
[  149.618200][ T9007] netlink: 'syz.2.1045': attribute type 4 has an invalid length.
[  149.621999][ T9007] netlink: 'syz.2.1045': attribute type 3 has an invalid length.
[  149.732843][ T9015] bond0: (slave bond_slave_0): Releasing backup interface
[  149.740444][ T9015] bond0: (slave bond_slave_1): Releasing backup interface
[  149.752693][ T9015] team0: Port device team_slave_0 removed
[  149.763881][ T9015] team0: Port device team_slave_1 removed
[  149.767473][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.770379][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.775810][ T9015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.778937][ T9015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.784399][ T9016] netlink: 'syz.2.1047': attribute type 10 has an invalid length.
[  149.794958][ T9016] bond0: (slave wlan1): Opening slave failed
[  149.805904][ T9015] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.808909][ T9015] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.518777][ T9056] team1: entered promiscuous mode
[  150.520409][ T9056] team1: entered allmulticast mode
[  150.680485][ T9071] : entered promiscuous mode
[  151.002540][ T9116] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  151.084685][ T9121] veth0_to_team: entered promiscuous mode
[  151.087003][ T9121] veth0_to_team: entered allmulticast mode
[  151.339768][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.342791][ T9132] 8021q: adding VLAN 0 to HW filter on device team0
[  151.352332][ T9132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.360239][ T9131] lo speed is unknown, defaulting to 1000
[  151.363878][ T9131] lo speed is unknown, defaulting to 1000
[  151.368832][ T9131] lo speed is unknown, defaulting to 1000
[  151.472648][ T9131] infiniband syz0: set active
[  151.475452][ T5846] lo speed is unknown, defaulting to 1000
[  151.477165][ T9131] infiniband syz0: added lo
[  151.503207][ T9131] RDS/IB: syz0: added
[  151.506408][ T9131] smc: adding ib device syz0 with port count 1
[  151.508743][ T9131] smc:    ib device syz0 port 1 has pnetid 
[  151.514205][  T971] lo speed is unknown, defaulting to 1000
[  151.517635][ T9131] lo speed is unknown, defaulting to 1000
[  151.625752][ T9131] lo speed is unknown, defaulting to 1000
[  151.728570][ T9131] lo speed is unknown, defaulting to 1000
[  151.863502][ T9140] __nla_validate_parse: 19 callbacks suppressed
[  151.863513][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'.
[  151.996352][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'.
[  152.038537][ T9149] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  152.043126][ T9149] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  152.116482][ T9158] validate_nla: 4 callbacks suppressed
[  152.116498][ T9158] netlink: 'syz.2.1094': attribute type 1 has an invalid length.
[  152.122769][ T9158] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1094'.
[  152.289100][ T9171] nftables ruleset with unbound set
[  152.306830][ T9169] netlink: 'syz.1.1099': attribute type 8 has an invalid length.
[  152.328676][ T9177] netlink: 'syz.2.1102': attribute type 1 has an invalid length.
[  152.368455][ T9177] 8021q: adding VLAN 0 to HW filter on device bond2
[  152.398518][ T9177] veth5: entered promiscuous mode
[  152.405636][ T9177] bond2: (slave veth5): Enslaving as an active interface with a down link
[  152.419480][ T9177] erspan0: entered allmulticast mode
[  152.430956][ T9177] bond2: (slave erspan0): making interface the new active one
[  152.435963][ T9177] erspan0: entered promiscuous mode
[  152.439781][ T9177] bond2: (slave erspan0): Enslaving as an active interface with an up link
[  152.588893][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1111'.
[  152.592366][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'.
[  153.575231][ T9226] lo speed is unknown, defaulting to 1000
[  153.703422][ T9241] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  153.707249][ T9241] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  153.861422][ T9247] bond2: (slave erspan0): Releasing active interface
[  153.863688][ T9247] erspan0: left promiscuous mode
[  153.883422][ T9247] bond2: (slave veth5): Releasing active interface
[  154.480209][ T9260] syzkaller1: entered promiscuous mode
[  154.484157][ T9260] syzkaller1: entered allmulticast mode
[  154.645539][ T9264] netlink: 'syz.2.1129': attribute type 16 has an invalid length.
[  154.652565][ T9264] netlink: 'syz.2.1129': attribute type 17 has an invalid length.
[  155.716466][ T9295] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.734095][ T9295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.800308][ T9295] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.803402][ T9295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.892570][ T9295] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.896558][ T9295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.956293][ T9295] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.959619][ T9295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.113889][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.117225][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.126372][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.134110][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.148047][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.151769][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.177386][ T5876] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.180402][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.247654][ T9311] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  156.261920][ T9308] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.268375][ T9308] netlink: 'syz.0.1144': attribute type 2 has an invalid length.
[  156.270845][ T9308] netlink: 'syz.0.1144': attribute type 1 has an invalid length.
[  156.407563][ T9322] batadv_slave_0: entered promiscuous mode
[  156.412298][ T9322] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1149'.
[  156.417792][ T9320] batadv_slave_0: left promiscuous mode
[  156.434596][ T9325] syzkaller1: entered promiscuous mode
[  156.444149][ T9325] syzkaller1: entered allmulticast mode
[  156.469840][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'.
[  157.941075][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  157.945459][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'.
[  158.059622][ T9365] netlink: 'syz.2.1164': attribute type 6 has an invalid length.
[  158.063895][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'.
[  158.069971][ T9365] netlink: 'syz.2.1164': attribute type 7 has an invalid length.
[  158.250236][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  158.263686][ T9389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1171'.
[  158.268128][ T9389] netlink: 'syz.0.1171': attribute type 7 has an invalid length.
[  158.271879][ T9389] netlink: 'syz.0.1171': attribute type 8 has an invalid length.
[  158.277779][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'.
[  158.308816][ T9391] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1172'.
[  158.514919][ T9399] lo speed is unknown, defaulting to 1000
[  158.595677][ T9407] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1178'.
[  158.599570][ T9407] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1178'.
[  158.603045][ T9407] netlink: 'syz.0.1178': attribute type 6 has an invalid length.
[  158.608108][ T9407] netlink: 'syz.0.1178': attribute type 5 has an invalid length.
[  158.611288][ T9407] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1178'.
[  158.621555][ T9407] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  158.678874][ T9410] netlink: 'syz.0.1179': attribute type 62 has an invalid length.
[  158.760097][ T9413] Bluetooth: MGMT ver 1.23
[  159.140750][ T9428] IPVS: set_ctl: invalid protocol: 140 172.20.20.187:20003
[  159.191797][ T9432] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  159.352018][ T9435] ieee802154 phy0 wpan0: encryption failed: -22
[  159.359416][ T9435] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  159.428087][   T47] lo speed is unknown, defaulting to 1000
[  159.431508][ T9443] netlink: 'syz.0.1190': attribute type 16 has an invalid length.
[  159.435879][ T9443] netlink: 'syz.0.1190': attribute type 17 has an invalid length.
[  160.209032][ T9479] syz.2.1203 uses old SIOCAX25GETINFO
[  160.725094][ T9519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.727694][ T9519] IPv6: NLM_F_CREATE should be set when creating new route
[  160.730029][ T9519] IPv6: NLM_F_CREATE should be set when creating new route
[  160.917218][ T9537] tipc: Enabled bearer <eth:team0>, priority 10
[  160.919823][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.923015][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.927048][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.929850][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.932946][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.936021][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.938838][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.941650][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.945228][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.948788][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.951763][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.956065][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.958957][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.961799][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.964651][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.967681][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.970445][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.973056][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.975897][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.978671][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.981468][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.984724][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.987513][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.990127][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.992832][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.995664][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.998392][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.001015][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.003655][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.006389][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.009101][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.011796][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.014596][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.017281][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.019953][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.022623][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.025287][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.027983][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.030584][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.033158][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.035913][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.038603][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.041260][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.043923][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.046659][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.049343][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.052048][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.054707][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.057470][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.060054][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.062617][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.065507][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.068260][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.070848][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.073488][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.076195][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.078932][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.081465][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.084111][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.086711][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.089332][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.091910][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.094601][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.097175][ T9537] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  161.122768][ T9540] bridge_slave_1: default FDB implementation only supports local addresses
[  161.159455][ T9543] veth1_to_bond: entered allmulticast mode
[  161.196609][ T9543] veth1_to_bond (unregistering): left allmulticast mode
[  161.262496][ T9545] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  161.702930][ T9567] team0: Mode changed to "broadcast"
[  161.711034][ T9567] team0: Port device vlan0 added
[  161.714492][ T9567] tipc: Enabling of bearer <eth:0> rejected, failed to enable media
[  161.812137][ T9577] wlan1: mtu less than device minimum
[  161.813946][ T9577] wlan1: mtu less than device minimum
[  161.815659][ T9580] wg0 speed is unknown, defaulting to 1000
[  161.818113][ T9580] wg0 speed is unknown, defaulting to 1000
[  161.820606][ T9580] wg0 speed is unknown, defaulting to 1000
[  161.947614][ T9580] infiniband syz2: set active
[  161.949180][ T5896] wg0 speed is unknown, defaulting to 1000
[  161.951152][ T9580] infiniband syz2: added wg0
[  162.001494][ T9580] RDS/IB: syz2: added
[  162.010813][ T9580] smc: adding ib device syz2 with port count 1
[  162.013416][ T9580] smc:    ib device syz2 port 1 has pnetid 
[  162.019948][ T1272] wg0 speed is unknown, defaulting to 1000
[  162.029176][ T9580] wg0 speed is unknown, defaulting to 1000
[  162.035104][ T5896] tipc: Node number set to 2581190303
[  162.140172][ T9597] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  162.240880][ T9580] wg0 speed is unknown, defaulting to 1000
[  162.392447][ T9580] wg0 speed is unknown, defaulting to 1000
[  162.997588][ T9658] __nla_validate_parse: 18 callbacks suppressed
[  162.997601][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'.
[  163.006496][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.010038][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.012912][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.017335][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.020507][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.023834][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.028025][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.030889][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.033920][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'.
[  163.280726][ T9681] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  163.283958][ T9680] IPVS: stopping backup sync thread 9681 ...
[  163.337690][ T9683] validate_nla: 69 callbacks suppressed
[  163.337701][ T9683] netlink: 'syz.2.1264': attribute type 1 has an invalid length.
[  163.341783][ T9683] netlink: 'syz.2.1264': attribute type 2 has an invalid length.
[  163.351073][ T9683] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  163.353561][ T9683] team0: Device macvtap1 is already an upper device of the team interface
[  163.467697][ T9692] netlink: 'syz.2.1266': attribute type 1 has an invalid length.
[  163.470641][ T9692] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  163.779265][ T9724] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  163.784889][ T9724] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  163.820623][ T9726] tipc: Started in network mode
[  163.823285][ T9726] tipc: Node identity 72625db6a6dc, cluster identity 4711
[  163.826328][ T9726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.855710][ T9726] tipc: Disabling bearer <eth:syzkaller0>
[  163.876877][ T9735] tipc: Started in network mode
[  163.878599][ T9735] tipc: Node identity 7, cluster identity 4711
[  163.880607][ T9735] tipc: Node number set to 7
[  163.955963][ T9742] netlink: 'syz.2.1283': attribute type 4 has an invalid length.
[  164.071333][ T9747] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  164.076298][ T9747] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  164.129594][ T9755] netlink: 'syz.1.1289': attribute type 1 has an invalid length.
[  164.185725][ T9758] netlink: zone id is out of range
[  164.187585][ T9758] netlink: zone id is out of range
[  164.189303][ T9758] netlink: zone id is out of range
[  164.190963][ T9758] netlink: get zone limit has 8 unknown bytes
[  164.712295][ T9774] netlink: 'syz.0.1295': attribute type 21 has an invalid length.
[  164.715724][ T9774] pim6reg1: entered promiscuous mode
[  164.717490][ T9774] pim6reg1: entered allmulticast mode
[  164.919643][ T9787] openvswitch: netlink: IP tunnel dst address not specified
[  165.092014][ T9806] netlink: 'syz.1.1304': attribute type 1 has an invalid length.
[  165.099638][ T9806] netlink: 'syz.1.1304': attribute type 2 has an invalid length.
[  165.193453][ T9812] netlink: 'syz.2.1306': attribute type 7 has an invalid length.
[  165.196435][ T9812] netlink: 'syz.2.1306': attribute type 8 has an invalid length.
[  165.503641][ T9844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.507114][ T9844] syzkaller0: entered promiscuous mode
[  165.508761][ T9844] syzkaller0: entered allmulticast mode
[  165.513410][ T9844] tipc: Resetting bearer <eth:syzkaller0>
[  165.544205][ T9844] tipc: Resetting bearer <eth:syzkaller0>
[  165.557727][ T9844] tipc: Disabling bearer <eth:syzkaller0>
[  166.165448][ T9903] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  166.168488][ T9903] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  166.199375][ T9906] sctp: [Deprecated]: syz.2.1338 (pid 9906) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.199375][ T9906] Use struct sctp_sack_info instead
[  166.265436][   T47] wg0 speed is unknown, defaulting to 1000
[  166.418691][ T9921] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  166.422335][ T9921] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  166.548465][ T9934] bond0: (slave wg0): Error: Device can not be enslaved while up
[  166.551423][ T9935] bond0: (slave wg0): Error: Device can not be enslaved while up
[  166.990609][ T9964] syz_tun: entered allmulticast mode
[  167.091931][ T9963] syz_tun: left allmulticast mode
[  167.199752][ T9988] can: request_module (can-proto-0) failed.
[  167.389297][ T9996] tipc: MTU too low for tipc bearer
[  167.797093][T10022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.379475][T10057] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.566583][T10082] __nla_validate_parse: 62 callbacks suppressed
[  168.566695][T10082] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1399'.
[  168.630397][T10084] validate_nla: 10 callbacks suppressed
[  168.630407][T10084] netlink: 'syz.1.1400': attribute type 4 has an invalid length.
[  168.635233][T10084] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1400'.
[  168.702673][T10090] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1401'.
[  168.789805][T10095] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  168.792833][T10095] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  168.901905][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1405'.
[  168.905031][T10100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1405'.
[  169.222808][T10106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1408'.
[  169.226133][T10106] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1408'.
[  169.228803][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  169.846340][T10123] vlan3: entered allmulticast mode
[  169.848274][T10123] veth1: entered allmulticast mode
[  170.301826][T10134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  170.309181][ T1272] IPVS: starting estimator thread 0...
[  170.328197][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'.
[  170.404159][T10140] IPVS: using max 61 ests per chain, 146400 per kthread
[  170.523388][T10155] 8021q: VLANs not supported on ip6_vti0
[  170.527169][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'.
[  171.289345][T10146] Bluetooth: hci1: Opcode 0x080f failed: -4
[  171.347348][T10174] syz_tun: left allmulticast mode
[  171.499884][ T7450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.502270][ T7450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.567969][T10193] lo speed is unknown, defaulting to 1000
[  171.738288][T10193] wg0 speed is unknown, defaulting to 1000
[  172.056605][T10215] syzkaller0: entered promiscuous mode
[  172.058885][T10215] syzkaller0: entered allmulticast mode
[  172.227309][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  172.388334][ T5851] Bluetooth: hci1: command 0x080f tx timeout
[  173.371485][T10232] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave
[  173.374719][T10232] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0)
[  173.455932][T10235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.496349][T10235] syzkaller0: entered promiscuous mode
[  173.498464][T10235] syzkaller0: entered allmulticast mode
[  173.501235][T10235] tipc: Resetting bearer <eth:syzkaller0>
[  173.877714][T10233] tipc: Resetting bearer <eth:syzkaller0>
[  174.968772][T10233] tipc: Disabling bearer <eth:syzkaller0>
[  174.973555][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.977505][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.980152][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  174.982766][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.057492][T10258] __nla_validate_parse: 2 callbacks suppressed
[  175.057504][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1464'.
[  175.062485][T10258] netlink: 'syz.2.1464': attribute type 7 has an invalid length.
[  175.069382][T10258] netlink: 'syz.2.1464': attribute type 8 has an invalid length.
[  175.072100][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'.
[  175.145765][T10269] netlink: 'syz.0.1461': attribute type 1 has an invalid length.
[  175.162142][T10269] bond4: entered promiscuous mode
[  175.167554][T10269] 8021q: adding VLAN 0 to HW filter on device bond4
[  175.180742][T10269] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1461'.
[  175.190057][T10269] batadv1: entered promiscuous mode
[  175.191942][T10269] batadv1: entered allmulticast mode
[  175.196134][T10269] 8021q: adding VLAN 0 to HW filter on device batadv1
[  175.202417][T10269] bond4: (slave batadv1): making interface the new active one
[  175.212260][T10269] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  175.241604][T10275] team0: Port device vlan0 removed
[  175.412767][T10293] dvmrp0: entered allmulticast mode
[  175.600199][T10313] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1477'.
[  175.603343][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'.
[  175.608021][T10313] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  175.885426][T10332] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1486'.
[  175.933053][T10332] lo speed is unknown, defaulting to 1000
[  176.034559][T10332] wg0 speed is unknown, defaulting to 1000
[  176.466171][T10350] team0: Port device sit1 added
[  176.699167][T10352] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1492'.
[  177.131548][T10378] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1500'.
[  177.135833][T10378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  177.266830][T10391] veth6: entered allmulticast mode
[  177.362243][T10394] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  177.375764][T10394] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  177.541317][T10402] trusted_key: syz.2.1506 sent an empty control message without MSG_MORE.
[  177.708091][T10424] lo speed is unknown, defaulting to 1000
[  177.740504][ T7450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.748404][ T7450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.782033][ T5851] Bluetooth: hci2: link tx timeout
[  177.787945][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.793409][ T5851] Bluetooth: hci2: link tx timeout
[  177.795726][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.800238][ T5851] Bluetooth: hci2: link tx timeout
[  177.802424][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.806477][ T5851] Bluetooth: hci2: link tx timeout
[  177.808296][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.814081][ T5851] Bluetooth: hci2: link tx timeout
[  177.815688][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.818765][ T5851] Bluetooth: hci2: link tx timeout
[  177.820440][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.823296][ T5851] Bluetooth: hci2: link tx timeout
[  177.825761][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.829390][ T5851] Bluetooth: hci2: link tx timeout
[  177.831179][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.833493][ T5851] Bluetooth: hci2: link tx timeout
[  177.835408][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.853438][T10424] wg0 speed is unknown, defaulting to 1000
[  177.869280][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1515'.
[  177.872397][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1515'.
[  178.002828][T10434] syzkaller0: entered promiscuous mode
[  178.005134][T10434] syzkaller0: entered allmulticast mode
[  178.947475][T10496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.950144][T10496] syzkaller0: entered promiscuous mode
[  178.952049][T10496] syzkaller0: entered allmulticast mode
[  178.979793][T10496] tipc: Resetting bearer <eth:syzkaller0>
[  178.983037][T10495] tipc: Resetting bearer <eth:syzkaller0>
[  179.002476][T10495] tipc: Disabling bearer <eth:syzkaller0>
[  179.067465][T10509] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  179.081844][T10511] netlink: 'syz.1.1542': attribute type 9 has an invalid length.
[  179.128569][T10513] gre1: entered promiscuous mode
[  179.197949][T10519] vlan0: entered promiscuous mode
[  179.199624][T10519] macvtap0: entered promiscuous mode
[  179.266960][T10521] openvswitch: netlink: Message has 24 unknown bytes.
[  179.269628][T10521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.311757][T10524] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  179.316874][T10524] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  179.321466][T10525] netlink: 'syz.1.1546': attribute type 8 has an invalid length.
[  179.419761][T10529] openvswitch: netlink: Flow key attr not present in new flow.
[  179.824197][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  180.173895][T10539] ksmbd: Unknown IPC event: 3, ignore.
[  180.211145][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a44dc00: rx timeout, send abort
[  180.215690][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a44dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  180.261915][T10547] smc: net device bond0 applied user defined pnetid SYZ2
[  180.704188][ T5847] Bluetooth: hci1: command 0x080f tx timeout
[  181.051498][T10601] __nla_validate_parse: 3 callbacks suppressed
[  181.051510][T10601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1561'.
[  181.073777][T10601] syzkaller1: entered promiscuous mode
[  181.077553][T10601] syzkaller1: entered allmulticast mode
[  181.332195][T10611] netlink: 'syz.2.1565': attribute type 16 has an invalid length.
[  181.335986][T10611] netlink: 'syz.2.1565': attribute type 17 has an invalid length.
[  181.378636][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'.
[  181.381765][T10615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1567'.
[  181.420470][T10618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1568'.
[  181.471356][T10622] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  181.706001][T10647] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1578'.
[  181.804342][T10658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1583'.
[  181.825641][T10658] syzkaller1: entered promiscuous mode
[  181.828037][T10658] syzkaller1: entered allmulticast mode
[  182.007133][T10667] netlink: 'syz.1.1587': attribute type 10 has an invalid length.
[  182.013865][T10667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1587'.
[  182.017074][T10667] !: entered promiscuous mode
[  182.018579][T10667] !: entered allmulticast mode
[  182.020906][T10667] bridge0: port 1(0!) entered blocking state
[  182.023186][T10667] bridge0: port 1(0!) entered disabled state
[  182.028807][T10667] bridge0: port 1(0!) entered blocking state
[  182.030896][T10667] bridge0: port 1(0!) entered forwarding state
[  182.046732][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'.
[  182.153840][T10675] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  182.195960][T10676] netlink: 'syz.1.1589': attribute type 9 has an invalid length.
[  182.199103][T10676] netlink: 'syz.1.1589': attribute type 6 has an invalid length.
[  182.581420][T10682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1592'.
[  182.612555][T10682] syzkaller1: entered promiscuous mode
[  182.620092][T10682] syzkaller1: entered allmulticast mode
[  183.093136][T10698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1597'.
[  183.234729][T10703] openvswitch: netlink: Flow key attr not present in new flow.
[  183.409830][ T5706] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.412394][ T5706] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.415009][ T5706] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.419878][ T5706] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.531092][T10723] sctp: [Deprecated]: syz.2.1608 (pid 10723) Use of int in max_burst socket option.
[  183.531092][T10723] Use struct sctp_assoc_value instead
[  183.663575][T10737] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  183.676470][T10737] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  183.753180][T10743] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  183.762067][T10743] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  183.768443][T10740] nbd: socks must be embedded in a SOCK_ITEM attr
[  183.787080][T10740] block nbd4: shutting down sockets
[  183.867160][T10745] geneve3: entered promiscuous mode
[  183.885397][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.890523][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.898262][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.902153][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.126761][T10765] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  184.150661][T10765] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  184.511079][T10798] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  184.530583][T10798] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  184.622239][T10805] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  184.646988][T10803] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  184.655144][T10803] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  185.443523][T10881] bridge0: port 1(0!) entered disabled state
[  185.468240][T10881] netlink: 'syz.1.1661': attribute type 16 has an invalid length.
[  185.471273][T10881] netlink: 'syz.1.1661': attribute type 17 has an invalid length.
[  185.483388][T10881] bridge0: port 1(0!) entered blocking state
[  185.486021][T10881] bridge0: port 1(0!) entered forwarding state
[  185.837518][T10891] tipc: Resetting bearer <eth:team0>
[  185.853832][  T971] lo speed is unknown, defaulting to 1000
[  185.853892][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.856153][  T971] syz0: Port: 1 Link DOWN
[  185.864064][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.868798][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.871567][  T971] lo speed is unknown, defaulting to 1000
[  185.872255][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  185.913353][T10893] vxlan1: entered promiscuous mode
[  185.916947][T10893] vxlan1: entered allmulticast mode
[  185.919524][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.922225][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.924959][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.927601][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.197012][T10902] __nla_validate_parse: 9 callbacks suppressed
[  186.197028][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1670'.
[  186.242970][T10902] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  186.248554][T10902] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  186.545421][T10912] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1673'.
[  186.549820][T10912] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1673'.
[  186.553342][T10912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1673'.
[  186.719080][T10926] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  186.764462][T10928] bridge0: port 1(0!) entered disabled state
[  186.777525][T10928] bond1: (slave gretap1): Releasing active interface
[  186.779754][T10928] gretap1: left allmulticast mode
[  186.926801][T10934] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.1682'.
[  187.086740][T10944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.170556][T10947] bond2: (slave gretap1): Releasing active interface
[  187.172799][T10947] gretap1: left allmulticast mode
[  187.178952][T10947] bond4: (slave batadv1): Releasing active interface
[  187.456066][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'.
[  187.827214][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'.
[  187.920381][T10991] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  187.923487][T10991] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  188.153909][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1710'.
[  188.173359][T11018] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  188.178175][T11018] netlink: 'syz.2.1707': attribute type 2 has an invalid length.
[  188.180610][T11018] netlink: 'syz.2.1707': attribute type 1 has an invalid length.
[  188.219619][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'.
[  188.222586][T11015] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1710'.
[  188.318753][T11030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.323037][T11030] syzkaller0: entered promiscuous mode
[  188.326369][T11032] netlink: 'syz.2.1715': attribute type 5 has an invalid length.
[  188.329362][T11030] syzkaller0: entered allmulticast mode
[  188.346025][T11032] geneve4: entered promiscuous mode
[  188.347786][T11032] geneve4: entered allmulticast mode
[  188.350402][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  188.356586][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  188.359334][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  188.361878][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  188.439839][T11038] wg1: entered promiscuous mode
[  188.441382][T11038] wg1: entered allmulticast mode
[  188.698800][T11075] netlink: 'syz.2.1730': attribute type 16 has an invalid length.
[  188.701330][T11075] netlink: 'syz.2.1730': attribute type 17 has an invalid length.
[  188.907811][T11090] IPv6: NLM_F_CREATE should be specified when creating new route
[  189.270340][T11122] netlink: 'syz.2.1747': attribute type 16 has an invalid length.
[  189.273978][T11122] netlink: 'syz.2.1747': attribute type 17 has an invalid length.
[  189.449963][T11126] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  189.568801][T11146] IPVS: set_ctl: invalid protocol: 136 172.20.20.49:20000
[  189.616115][T11150] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  189.649224][T11152] netlink: 'syz.1.1756': attribute type 4 has an invalid length.
[  190.047019][T11198] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.050514][T11198] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  191.285933][T11287] syzkaller0: entered promiscuous mode
[  191.288052][T11287] syzkaller0: entered allmulticast mode
[  192.806631][T11303] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  193.014176][T11310] nbd0: detected capacity change from 0 to 63
[  193.017873][T11312] block nbd0: NBD_DISCONNECT
[  193.021978][T11312] block nbd0: Disconnected due to user request.
[  193.025504][T11312] block nbd0: shutting down sockets
[  193.034653][    C0] blk_print_req_error: 138 callbacks suppressed
[  193.034665][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.039309][    C0] buffer_io_error: 138 callbacks suppressed
[  193.039317][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  193.041253][T11318] block nbd0: NBD_DISCONNECT
[  193.043573][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.045649][T11318] block nbd0: Send disconnect failed -32
[  193.048070][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  193.048119][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.048130][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  193.048162][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.060606][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  193.064809][ T1114] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0
[  193.068741][ T1114] Buffer I/O error on dev nbd0, logical block 0, async page read
[  193.071929][ T1114] Buffer I/O error on dev nbd0, logical block 1, async page read
[  193.075324][ T1114] Buffer I/O error on dev nbd0, logical block 2, async page read
[  193.078464][ T1114] Buffer I/O error on dev nbd0, logical block 3, async page read
[  193.082720][T11188] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.088016][T11188] Buffer I/O error on dev nbd0, logical block 0, async page read
[  193.091346][T11188] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.096213][T11188] Buffer I/O error on dev nbd0, logical block 1, async page read
[  193.100412][T11188] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.108833][T11188] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.111764][T11188] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  193.116466][T11188] ldm_validate_partition_table(): Disk read failed.
[  193.119872][T11188] Dev nbd0: unable to read RDB block 0
[  193.122598][T11188]  nbd0: unable to read partition table
[  193.137819][T11188] ldm_validate_partition_table(): Disk read failed.
[  193.141552][T11188] Dev nbd0: unable to read RDB block 0
[  193.151803][T11323] __nla_validate_parse: 15 callbacks suppressed
[  193.151813][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1811'.
[  193.157274][T11188]  nbd0: unable to read partition table
[  193.386267][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1819'.
[  193.414968][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1819'.
[  193.465991][T11354] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1821'.
[  193.469703][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'.
[  193.515761][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'.
[  194.371507][T11367] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  194.720333][T11405] lo speed is unknown, defaulting to 1000
[  194.883852][T11405] wg0 speed is unknown, defaulting to 1000
[  194.909800][T11414] netlink: 'syz.1.1844': attribute type 1 has an invalid length.
[  194.949097][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'.
[  194.952068][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1846'.
[  195.061216][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'.
[  195.098096][T11430] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1850'.
[  195.101706][T11430] batadv_slave_1: entered promiscuous mode
[  195.551190][T11453] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  195.679133][T11462] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  195.725943][T11466] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  195.731073][T11466] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  195.760434][T11470] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  196.166323][T11504] tipc: Resetting bearer <eth:syzkaller0>
[  196.166362][T11508] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  196.168345][T11504] tipc: Resetting bearer <eth:syzkaller0>
[  196.171329][T11508] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  196.192519][T11504] netlink: 'syz.1.1878': attribute type 16 has an invalid length.
[  196.203412][T11504] netlink: 'syz.1.1878': attribute type 17 has an invalid length.
[  196.239926][T11515] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  196.376244][T11530] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  196.410233][T11527] netlink: 'syz.0.1885': attribute type 1 has an invalid length.
[  196.623425][T11550] lo speed is unknown, defaulting to 1000
[  196.759952][T11550] wg0 speed is unknown, defaulting to 1000
[  197.803974][T11601] syz_tun: entered allmulticast mode
[  197.849266][T11594] syz_tun: left allmulticast mode
[  197.929620][T11608] net_ratelimit: 3 callbacks suppressed
[  197.929641][T11608] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  197.941321][T11610] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  197.979996][T11613] netlink: 'syz.0.1909': attribute type 16 has an invalid length.
[  197.982842][T11616] netlink: 'syz.2.1912': attribute type 1 has an invalid length.
[  197.986851][T11613] netlink: 'syz.0.1909': attribute type 17 has an invalid length.
[  198.003468][T11616] 8021q: adding VLAN 0 to HW filter on device bond4
[  198.032408][T11616] veth9: entered promiscuous mode
[  198.039989][T11616] bond4: (slave veth9): Enslaving as an active interface with a down link
[  198.049888][T11616] bond4: (slave erspan0): making interface the new active one
[  198.055743][T11616] erspan0: entered promiscuous mode
[  198.058729][T11616] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  198.138926][T11629] netlink: 'syz.0.1916': attribute type 1 has an invalid length.
[  198.178490][T11629] 8021q: adding VLAN 0 to HW filter on device bond6
[  198.188720][T11630] vlan1: entered promiscuous mode
[  198.192675][T11630] bond6: entered promiscuous mode
[  198.194891][T11630] vlan1: entered allmulticast mode
[  198.196816][T11630] bond6: entered allmulticast mode
[  198.286757][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.289372][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.343516][T11647] __nla_validate_parse: 12 callbacks suppressed
[  198.343531][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  198.385066][T11653] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1927'.
[  198.457380][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1931'.
[  198.466026][T11660] netlink: 'syz.2.1931': attribute type 11 has an invalid length.
[  198.485473][T11664] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001
[  198.807984][T11686] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  199.075207][T11710] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  199.092909][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'.
[  199.160486][T11718] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.164190][T11718] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.167076][T11718] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  199.210704][T11718] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.217712][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'.
[  199.220611][T11727] netlink: 'syz.2.1951': attribute type 5 has an invalid length.
[  199.223323][T11727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1951'.
[  199.226346][T11718] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.229508][T11718] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  199.243671][T11727] geneve5: entered promiscuous mode
[  199.247796][T11727] geneve5: entered allmulticast mode
[  199.252601][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'.
[  199.281697][T11718] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.287978][T11718] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.291084][T11718] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  199.328950][T11718] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.332160][T11718] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.335577][T11718] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  199.369396][T11739] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  199.412916][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.416791][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  199.419449][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  199.427512][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.430659][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  199.433212][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  199.446009][ T5706] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.448543][ T5706] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  199.451200][ T5706] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  199.454671][T11744] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  199.466404][ T5706] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.469940][ T5706] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  199.472691][ T5706] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  199.540008][T11751] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  199.543962][T11751] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  199.639183][T11762] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  199.720154][T11774] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  199.723618][T11774] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  199.868043][T11785] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  199.946259][T11792] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1975'.
[  200.047185][T11795] IPv6: sit2: Disabled Multicast RS
[  200.050089][T11795] sit2: entered allmulticast mode
[  200.280730][T11820] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1988'.
[  200.285990][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'.
[  201.621632][T11904] netlink: 'syz.1.2014': attribute type 9 has an invalid length.
[  202.086454][T11934] ipvlan3: entered promiscuous mode
[  202.088979][T11934] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  202.428848][T11971] netlink: 'syz.2.2041': attribute type 13 has an invalid length.
[  202.431431][T11971] netlink: 'syz.2.2041': attribute type 17 has an invalid length.
[  202.453473][T11971] erspan0: left allmulticast mode
[  202.493906][T11971] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.584869][T11971] 8021q: adding VLAN 0 to HW filter on device team0
[  202.588144][T11971] dummy0: left promiscuous mode
[  202.589804][T11971] dummy0: left allmulticast mode
[  202.985737][T12007] net_ratelimit: 5 callbacks suppressed
[  202.985747][T12007] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  203.170716][T12025] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  203.176080][T12025] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  203.296598][T12039] delete_channel: no stack
[  203.428769][T12037] delete_channel: no stack
[  203.499231][T12054] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  203.610404][T12064] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  203.613734][T12064] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  203.755999][T12069] lo speed is unknown, defaulting to 1000
[  203.838991][T12083] __nla_validate_parse: 4 callbacks suppressed
[  203.839000][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'.
[  203.914757][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'.
[  203.955940][T12069] wg0 speed is unknown, defaulting to 1000
[  204.081481][T12103] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  204.102650][T12103] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  204.791436][T12126] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  205.073055][T12133] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  205.173676][T12141] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2087'.
[  205.635243][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2100'.
[  205.666283][T12177] netlink: 'syz.1.2100': attribute type 4 has an invalid length.
[  205.669040][T12178] netlink: 'syz.1.2100': attribute type 4 has an invalid length.
[  205.987084][T12205] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  205.990289][T12205] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  206.324872][T12240] netlink: 'syz.1.2121': attribute type 1 has an invalid length.
[  207.006605][T12267] : entered promiscuous mode
[  207.054913][T12273] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2130'.
[  207.058010][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'.
[  207.072986][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'.
[  207.076466][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'.
[  207.080519][T12273] netlink: 'syz.0.2130': attribute type 3 has an invalid length.
[  207.227260][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'.
[  207.296332][T12282] pim6reg: entered allmulticast mode
[  207.303043][T12282] pim6reg: left allmulticast mode
[  207.355188][T12283] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2132'.
[  208.165962][T12290] net_ratelimit: 5 callbacks suppressed
[  208.165978][T12290] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  208.172276][T12290] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  208.591297][T12342] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  208.869238][T12359] __nla_validate_parse: 1 callbacks suppressed
[  208.869249][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2153'.
[  208.920476][T12359] bond5: entered promiscuous mode
[  208.923242][T12359] 8021q: adding VLAN 0 to HW filter on device bond5
[  208.964613][T12368] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  209.034334][T12359] bond5 (unregistering): Released all slaves
[  209.165626][   T12] erspan0: left promiscuous mode
[  209.366974][T12397] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  209.371146][T12397] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  209.413962][T12398] netlink: 'syz.1.2165': attribute type 10 has an invalid length.
[  209.421889][T12398] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  209.430194][T12398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  209.433946][T12398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  209.682246][T12419] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  209.695147][T12419] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  210.895185][T12446] lo speed is unknown, defaulting to 1000
[  210.938098][T12448] netlink: 'syz.2.2182': attribute type 21 has an invalid length.
[  210.943934][T12448] netlink: 'syz.2.2182': attribute type 6 has an invalid length.
[  210.949715][T12448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2182'.
[  210.967884][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  210.990056][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  211.052174][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2184'.
[  211.055937][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'.
[  211.110813][T12446] wg0 speed is unknown, defaulting to 1000
[  211.295969][T12462] syz_tun: entered promiscuous mode
[  211.299356][T12462] syz_tun: left promiscuous mode
[  211.555315][T12473] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  211.712214][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'.
[  211.716063][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'.
[  211.777363][T12486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2193'.
[  211.925405][T12497] netlink: 'syz.2.2198': attribute type 1 has an invalid length.
[  211.961608][T12497] vlan0: entered allmulticast mode
[  211.965879][T12497] macvtap0: entered allmulticast mode
[  212.023396][T12500] lo speed is unknown, defaulting to 1000
[  212.065707][T12504] netlink: 'syz.0.2199': attribute type 21 has an invalid length.
[  212.068473][T12504] netlink: 'syz.0.2199': attribute type 6 has an invalid length.
[  212.071295][T12504] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2199'.
[  212.180022][T12500] wg0 speed is unknown, defaulting to 1000
[  212.314681][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  212.366445][T12507] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  212.679017][T12529] lo speed is unknown, defaulting to 1000
[  212.703744][T12533] netlink: 'syz.1.2208': attribute type 21 has an invalid length.
[  212.714537][T12533] netlink: 'syz.1.2208': attribute type 6 has an invalid length.
[  212.875398][T12529] wg0 speed is unknown, defaulting to 1000
[  213.413494][T12553] netlink: 'syz.0.2215': attribute type 10 has an invalid length.
[  213.470621][T12553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  213.479935][T12553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  213.495365][T12565] net_ratelimit: 1 callbacks suppressed
[  213.495376][T12565] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  213.500196][T12565] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  213.550612][T12570] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  213.727402][T12582] bond4: (slave erspan0): Releasing active interface
[  213.742641][T12582] team0: Port device sit1 removed
[  213.749587][T12582] bond4: (slave veth9): Releasing active interface
[  213.790764][T12582] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  213.813794][T12577] netlink: 'syz.1.2223': attribute type 1 has an invalid length.
[  213.817512][T12577] netlink: 'syz.1.2223': attribute type 4 has an invalid length.
[  213.980259][T12593] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  214.040785][T12599] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  214.049805][T12599] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  214.079754][T12601] IPv4: Oversized IP packet from 127.202.26.0
[  214.116445][T12604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.119980][T12604] syzkaller0: entered promiscuous mode
[  214.122311][T12604] syzkaller0: entered allmulticast mode
[  214.145499][T12604] tipc: Resetting bearer <eth:syzkaller0>
[  214.148888][T12606] lo speed is unknown, defaulting to 1000
[  214.153438][T12603] tipc: Resetting bearer <eth:syzkaller0>
[  214.168949][T12603] tipc: Disabling bearer <eth:syzkaller0>
[  214.293947][T12609] __nla_validate_parse: 7 callbacks suppressed
[  214.293963][T12609] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2234'.
[  214.361325][T12606] wg0 speed is unknown, defaulting to 1000
[  214.544506][T12623] netlink: 'syz.0.2239': attribute type 1 has an invalid length.
[  214.580657][T12623] 8021q: adding VLAN 0 to HW filter on device bond7
[  214.589732][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'.
[  214.592772][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'.
[  214.603471][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'.
[  214.612956][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'.
[  214.629575][T12623] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2239'.
[  214.699591][T12634] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  214.833262][T12640] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2243'.
[  215.097471][T12657] veth8: entered allmulticast mode
[  215.172421][T12661] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  215.223040][T12664] bond0: (slave wlan1): Releasing backup interface
[  215.265055][T12666] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2253'.
[  215.581457][T12694] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2262'.
[  215.651591][T12701] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2265'.
[  216.258647][T12739] netlink: 'syz.1.2274': attribute type 10 has an invalid length.
[  216.596795][T12758] netlink: 'syz.2.2282': attribute type 1 has an invalid length.
[  216.754559][T12771] IPVS: persistence engine module ip_vs_pe_ not found
[  216.861531][T12785] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  216.899470][T12782] tipc: Resetting bearer <eth:syzkaller0>
[  216.901441][T12782] tipc: Resetting bearer <eth:syzkaller0>
[  216.913019][T12782] netlink: 'syz.1.2289': attribute type 16 has an invalid length.
[  216.924599][T12782] netlink: 'syz.1.2289': attribute type 17 has an invalid length.
[  216.949073][T12787] syzkaller0: entered promiscuous mode
[  216.951133][T12787] syzkaller0: entered allmulticast mode
[  218.419158][T12804] netlink: 'syz.1.2297': attribute type 11 has an invalid length.
[  218.618388][T12835] net_ratelimit: 14 callbacks suppressed
[  218.618402][T12835] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.638772][T12835] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.719326][T12840] syzkaller0: entered promiscuous mode
[  218.721333][T12840] syzkaller0: entered allmulticast mode
[  219.195225][T12876] bpq0: entered promiscuous mode
[  219.197175][T12876] bpq0: entered allmulticast mode
[  219.261948][T12880] veth9: entered promiscuous mode
[  219.352168][T12887] __nla_validate_parse: 13 callbacks suppressed
[  219.352183][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  219.359722][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  219.363109][T12887] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2324'.
[  219.622598][T12907] lo speed is unknown, defaulting to 1000
[  219.873862][T12907] wg0 speed is unknown, defaulting to 1000
[  220.433064][T12933] netlink: 'syz.0.2337': attribute type 3 has an invalid length.
[  220.442542][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2337'.
[  220.449387][T12935] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.462078][T12935] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.513674][T12939] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  220.518651][T12939] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  220.563648][T12943] atomic_op ffff88811a6b3998 conn xmit_atomic 0000000000000000
[  220.569526][T12943] atomic_op ffff888119bf5998 conn xmit_atomic 0000000000000000
[  220.572524][T12943] atomic_op ffff888119bf1998 conn xmit_atomic 0000000000000000
[  220.576296][T12943] atomic_op ffff88811a207198 conn xmit_atomic 0000000000000000
[  220.579440][T12943] atomic_op ffff88811a203198 conn xmit_atomic 0000000000000000
[  220.582682][T12943] atomic_op ffff88811a89e198 conn xmit_atomic 0000000000000000
[  220.589685][T12943] atomic_op ffff88811a89c998 conn xmit_atomic 0000000000000000
[  220.592949][T12943] atomic_op ffff88811a898998 conn xmit_atomic 0000000000000000
[  220.596811][T12943] atomic_op ffff88811a89b998 conn xmit_atomic 0000000000000000
[  220.600075][T12943] atomic_op ffff88811a89f998 conn xmit_atomic 0000000000000000
[  220.680122][T12954] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.685397][T12954] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.743158][T12956] lo speed is unknown, defaulting to 1000
[  221.080097][T12961] netlink: 'syz.2.2347': attribute type 1 has an invalid length.
[  221.082434][T12961] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2347'.
[  221.093876][T12956] wg0 speed is unknown, defaulting to 1000
[  221.786537][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'.
[  221.790030][T12987] netlink: 'syz.1.2351': attribute type 20 has an invalid length.
[  221.866019][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2351'.
[  221.870839][T12987] netlink: 'syz.1.2351': attribute type 20 has an invalid length.
[  222.265307][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'.
[  222.270888][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2365'.
[  222.275115][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2365'.
[  222.332666][T13027] syz_tun: entered promiscuous mode
[  222.459983][T13035] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  222.466208][T13035] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  222.517232][T13041] openvswitch: netlink: IPv4 tun info is not correct
[  222.517361][T13038] bridge0: the hash_elasticity option has been deprecated and is always 16
[  222.743037][T13058] netlink: 'syz.2.2378': attribute type 12 has an invalid length.
[  222.776639][T13061] netlink: 'syz.0.2379': attribute type 16 has an invalid length.
[  222.779782][T13061] netlink: 'syz.0.2379': attribute type 17 has an invalid length.
[  223.259857][T13080] netlink: 'syz.0.2385': attribute type 10 has an invalid length.
[  223.262949][T13080] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  223.321482][T13080] syzkaller0: entered promiscuous mode
[  223.323600][T13080] syzkaller0: entered allmulticast mode
[  224.818830][T13109] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.822656][T13109] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.897171][T13116] __nla_validate_parse: 6 callbacks suppressed
[  224.897195][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'.
[  225.120731][T13132] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.128396][T13132] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.246935][T13141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2404'.
[  225.252485][T13141] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  225.518995][T13161] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.523074][T13161] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  225.631235][T13164] netlink: 'syz.2.2412': attribute type 16 has an invalid length.
[  225.684200][T13164] netlink: 'syz.2.2412': attribute type 17 has an invalid length.
[  225.858355][T13173] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2415'.
[  225.873272][T13176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2416'.
[  226.142901][T13192] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.160855][T13192] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.475253][T13221] netlink: 'syz.1.2432': attribute type 1 has an invalid length.
[  226.478381][T13221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2432'.
[  226.833348][T13247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2437'.
[  226.842513][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'.
[  226.847557][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2440'.
[  226.851453][T13249] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2440'.
[  226.858526][T13245] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2440'.
[  227.212340][T13272] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.229478][T13272] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.515889][T13291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  227.701876][T13301] netlink: 'syz.2.2456': attribute type 1 has an invalid length.
[  227.744512][T13301] 8021q: adding VLAN 0 to HW filter on device bond5
[  227.771038][T13301] 8021q: adding VLAN 0 to HW filter on device bond5
[  227.773886][T13301] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  227.779197][T13301] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  227.803103][T13308] netlink: 'syz.1.2458': attribute type 4 has an invalid length.
[  227.890487][T13315] xt_limit: Overflow, try lower: 271964/0
[  227.923306][T13319] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  227.927313][T13319] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  228.082310][T13329] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  228.127437][T13334] lo speed is unknown, defaulting to 1000
[  228.266254][T13334] wg0 speed is unknown, defaulting to 1000
[  228.761276][T13368] sctp: [Deprecated]: syz.1.2478 (pid 13368) Use of int in max_burst socket option.
[  228.761276][T13368] Use struct sctp_assoc_value instead
[  229.462458][T13431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.465497][T13431] syzkaller0: entered promiscuous mode
[  229.467788][T13431] syzkaller0: entered allmulticast mode
[  229.482754][T13431] tipc: Resetting bearer <eth:syzkaller0>
[  229.491718][T13430] tipc: Resetting bearer <eth:syzkaller0>
[  229.504784][T13430] tipc: Disabling bearer <eth:syzkaller0>
[  229.682804][T13443] netlink: 'syz.1.2501': attribute type 11 has an invalid length.
[  232.825119][T13470] __nla_validate_parse: 8 callbacks suppressed
[  232.825131][T13470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2510'.
[  232.858299][T13471] syzkaller1: entered promiscuous mode
[  232.861472][T13471] syzkaller1: entered allmulticast mode
[  232.926188][T13475] net_ratelimit: 3 callbacks suppressed
[  232.926199][T13475] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.932253][T13475] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  233.766775][T13497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.770815][T13499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.772752][T13497] syzkaller0: entered promiscuous mode
[  233.776876][T13497] syzkaller0: entered allmulticast mode
[  233.791546][T13499] team0: Device gtp0 is up. Set it down before adding it as a team port
[  233.827407][T13497] tipc: Resetting bearer <eth:syzkaller0>
[  233.832591][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2521'.
[  233.832872][T13494] tipc: Resetting bearer <eth:syzkaller0>
[  233.853603][T13494] tipc: Disabling bearer <eth:syzkaller0>
[  233.855450][T13504] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2523'.
[  233.863676][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2523'.
[  234.027031][T13512] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  234.096403][T13519] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.097550][T13514] syzkaller1: entered promiscuous mode
[  234.100372][T13519] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.101188][T13514] syzkaller1: entered allmulticast mode
[  234.182512][T13526] netlink: 'syz.2.2531': attribute type 6 has an invalid length.
[  234.218653][T13529] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2529'.
[  234.229060][T13529] sctp: [Deprecated]: syz.0.2529 (pid 13529) Use of struct sctp_assoc_value in delayed_ack socket option.
[  234.229060][T13529] Use struct sctp_sack_info instead
[  235.016915][T13534] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  235.030283][T13534] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  235.068868][T13538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.071613][T13538] syzkaller0: entered promiscuous mode
[  235.073362][T13538] syzkaller0: entered allmulticast mode
[  235.080376][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2534'.
[  235.098004][T13542] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.102145][T13542] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.113648][T13545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2538'.
[  235.158009][T13551] tipc: Resetting bearer <eth:syzkaller0>
[  235.182208][T13536] tipc: Resetting bearer <eth:syzkaller0>
[  235.196138][T13552] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  235.200615][T13536] tipc: Disabling bearer <eth:syzkaller0>
[  235.242606][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2541'.
[  235.377975][T13570] syzkaller1: entered promiscuous mode
[  235.389820][T13570] syzkaller1: entered allmulticast mode
[  235.571191][T13595] openvswitch: netlink: Missing valid actions attribute.
[  235.575091][T13595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.689329][T13605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2550'.
[  235.808405][T13616] netlink: 'syz.0.2553': attribute type 7 has an invalid length.
[  235.811257][T13616] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2553'.
[  236.170610][T13651] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  236.205824][T13652] syz.0.2561: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  236.218682][T13652] CPU: 0 UID: 0 PID: 13652 Comm: syz.0.2561 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  236.218709][T13652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.218720][T13652] Call Trace:
[  236.218727][T13652]  <TASK>
[  236.218735][T13652]  dump_stack_lvl+0x189/0x250
[  236.218765][T13652]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.218785][T13652]  ? __pfx__printk+0x10/0x10
[  236.218824][T13652]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  236.218845][T13652]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  236.218865][T13652]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  236.218887][T13652]  warn_alloc+0x214/0x310
[  236.218910][T13652]  ? stack_depot_save_flags+0x40/0x860
[  236.218930][T13652]  ? __pfx_warn_alloc+0x10/0x10
[  236.218955][T13652]  ? kasan_save_track+0x4f/0x80
[  236.218974][T13652]  ? xskq_create+0x56/0x170
[  236.218990][T13652]  ? xsk_init_queue+0xb0/0x110
[  236.219004][T13652]  ? xsk_setsockopt+0x4dc/0x8d0
[  236.219018][T13652]  ? do_sock_setsockopt+0x17c/0x1b0
[  236.219037][T13652]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  236.219057][T13652]  ? do_syscall_64+0xfa/0x3b0
[  236.219074][T13652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.219096][T13652]  __vmalloc_node_range_noprof+0x125/0x12f0
[  236.219144][T13652]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  236.219166][T13652]  ? xskq_create+0x56/0x170
[  236.219186][T13652]  ? __kasan_kmalloc+0x93/0xb0
[  236.219208][T13652]  vmalloc_user_noprof+0xad/0xf0
[  236.219230][T13652]  ? xskq_create+0xbf/0x170
[  236.219248][T13652]  xskq_create+0xbf/0x170
[  236.219268][T13652]  xsk_init_queue+0xb0/0x110
[  236.219287][T13652]  xsk_setsockopt+0x4dc/0x8d0
[  236.219335][T13652]  ? __pfx_xsk_setsockopt+0x10/0x10
[  236.219352][T13652]  ? __pfx_aa_sk_perm+0x10/0x10
[  236.219376][T13652]  ? aa_sock_opt_perm+0xff/0x1b0
[  236.219400][T13652]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  236.219422][T13652]  ? __pfx_xsk_setsockopt+0x10/0x10
[  236.219441][T13652]  do_sock_setsockopt+0x17c/0x1b0
[  236.219467][T13652]  __x64_sys_setsockopt+0x13f/0x1b0
[  236.219494][T13652]  do_syscall_64+0xfa/0x3b0
[  236.219512][T13652]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.219530][T13652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.219544][T13652]  ? exc_page_fault+0x9f/0xf0
[  236.219563][T13652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.219578][T13652] RIP: 0033:0x7f22d558ebe9
[  236.219603][T13652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  236.219617][T13652] RSP: 002b:00007f22d63a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  236.219633][T13652] RAX: ffffffffffffffda RBX: 00007f22d57b6090 RCX: 00007f22d558ebe9
[  236.219645][T13652] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  236.219654][T13652] RBP: 00007f22d5611e19 R08: 0000000000000004 R09: 0000000000000000
[  236.219663][T13652] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.219672][T13652] R13: 00007f22d57b6128 R14: 00007f22d57b6090 R15: 00007ffe7ec47ec8
[  236.219716][T13652]  </TASK>
[  236.221001][T13652] Mem-Info:
[  236.340488][T13652] active_anon:4063 inactive_anon:0 isolated_anon:0
[  236.340488][T13652]  active_file:1417 inactive_file:38278 isolated_file:0
[  236.340488][T13652]  unevictable:1768 dirty:346 writeback:0
[  236.340488][T13652]  slab_reclaimable:10230 slab_unreclaimable:135781
[  236.340488][T13652]  mapped:18297 shmem:2454 pagetables:1379
[  236.340488][T13652]  sec_pagetables:0 bounce:0
[  236.340488][T13652]  kernel_misc_reclaimable:0
[  236.340488][T13652]  free:214383 free_pcp:18675 free_cma:0
[  236.356984][T13652] Node 0 active_anon:8412kB inactive_anon:0kB active_file:3684kB inactive_file:150156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30632kB dirty:824kB writeback:0kB shmem:4808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7224kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  236.368594][T13652] Node 1 active_anon:7636kB inactive_anon:0kB active_file:1984kB inactive_file:2956kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42556kB dirty:560kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4804kB pagetables:3316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  236.383835][T13652] Node 0 DMA free:14920kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:416kB local_pcp:384kB free_cma:0kB
[  236.397222][T13660] netlink: 'syz.2.2564': attribute type 15 has an invalid length.
[  236.414969][T13652] lowmem_reserve[]: 0 811 811 811 811
[  236.416800][T13652] Node 0 DMA32 free:206612kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8548kB inactive_anon:0kB active_file:3684kB inactive_file:150156kB unevictable:3536kB writepending:824kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:26968kB local_pcp:9408kB free_cma:0kB
[  236.427112][T13652] lowmem_reserve[]: 0 0 0 0 0
[  236.431803][T13652] Node 1 DMA32 free:211184kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:13716kB local_pcp:5948kB free_cma:0kB
[  236.443656][T13652] lowmem_reserve[]: 0 0 854 854 854
[  236.447611][T13652] Node 1 Normal free:424720kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7704kB inactive_anon:0kB active_file:1984kB inactive_file:2956kB unevictable:3536kB writepending:560kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34628kB local_pcp:19916kB free_cma:0kB
[  236.458521][T13652] lowmem_reserve[]: 0 0 0 0 0
[  236.460701][T13652] Node 0 DMA: 6*4kB (U) 6*8kB (U) 6*16kB (U) 5*32kB (U) 8*64kB (U) 4*128kB (U) 5*256kB (U) 6*512kB (U) 5*1024kB (U) 2*2048kB (UM) 0*4096kB = 14920kB
[  236.465941][T13652] Node 0 DMA32: 743*4kB (UM) 667*8kB (UME) 442*16kB (UME) 295*32kB (UME) 397*64kB (UM) 232*128kB (UME) 75*256kB (UM) 54*512kB (UM) 60*1024kB (UME) 7*2048kB (ME) 1*4096kB (M) = 206644kB
[  236.472218][T13652] Node 1 DMA32: 40*4kB (U) 44*8kB (UM) 41*16kB (UM) 41*32kB (UM) 43*64kB (UM) 43*128kB (UM) 41*256kB (UM) 41*512kB (UM) 39*1024kB (UM) 5*2048kB (UM) 29*4096kB (M) = 211184kB
[  236.478311][T13652] Node 1 Normal: 1382*4kB (UME) 898*8kB (UME) 311*16kB (UME) 209*32kB (UM) 435*64kB (UME) 378*128kB (UME) 272*256kB (UME) 173*512kB (UME) 150*1024kB (UM) 0*2048kB 3*4096kB (U) = 424696kB
[  236.484471][T13652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  236.490009][T13652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  236.495160][T13652] 42149 total pagecache pages
[  236.496912][T13652] 0 pages in swap cache
[  236.498395][T13652] Free swap  = 124996kB
[  236.499812][T13652] Total swap = 124996kB
[  236.501215][T13652] 786301 pages RAM
[  236.502624][T13652] 0 pages HighMem/MovableOnly
[  236.504319][T13652] 241320 pages reserved
[  236.505710][T13652] 0 pages cma reserved
[  236.652896][T13672] netlink: 'syz.0.2570': attribute type 11 has an invalid length.
[  236.923135][T13689] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000
[  237.583624][T13727] syz.2.2589 (13727) used obsolete PPPIOCDETACH ioctl
[  237.786101][T13739] lo speed is unknown, defaulting to 1000
[  237.997268][T13739] wg0 speed is unknown, defaulting to 1000
[  238.067168][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  238.649913][T13765] __nla_validate_parse: 15 callbacks suppressed
[  238.649924][T13765] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2608'.
[  238.660148][T13766] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2608'.
[  239.142036][T13751] Bluetooth: hci1: Opcode 0x080f failed: -4
[  239.177534][T13770] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  239.181431][T13770] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  239.201019][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'.
[  239.207606][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'.
[  239.211850][T13769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2602'.
[  239.231576][T13772] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2604'.
[  239.235391][T13772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2604'.
[  239.294240][T13774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2605'.
[  239.464744][T13790] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2612'.
[  239.471803][T13787] netlink: 'syz.2.2612': attribute type 11 has an invalid length.
[  239.730380][T13823] net_ratelimit: 3 callbacks suppressed
[  239.730392][T13823] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  239.825754][T13826] netlink: 'syz.1.2621': attribute type 1 has an invalid length.
[  239.946144][T13833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.951248][T13833] syzkaller0: entered promiscuous mode
[  239.953389][T13833] syzkaller0: entered allmulticast mode
[  239.969279][T13833] tipc: Resetting bearer <eth:syzkaller0>
[  239.988699][T13835] tipc: Resetting bearer <eth:syzkaller0>
[  240.000308][T13835] tipc: Disabling bearer <eth:syzkaller0>
[  240.151507][T13841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2628'.
[  240.394205][ T5851] Bluetooth: hci1: command 0x080f tx timeout
[  241.571247][T13891] netlink: 'syz.2.2646': attribute type 5 has an invalid length.
[  242.132088][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  242.342436][T13956] syzkaller0: entered promiscuous mode
[  242.344964][T13956] syzkaller0: entered allmulticast mode
[  242.536333][T13959] gretap0: entered promiscuous mode
[  242.541834][T13959] 0{X: renamed from gretap0
[  242.544957][T13959] 0{X: left promiscuous mode
[  242.546613][T13959] 0{X: entered allmulticast mode
[  242.550703][T13959] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  242.562705][T13959] 0{X: entered promiscuous mode
[  242.566112][T13959] 0{X: left allmulticast mode
[  242.610817][T13964] syzkaller1: entered promiscuous mode
[  242.612660][T13964] syzkaller1: entered allmulticast mode
[  243.321239][T14009] netlink: 'syz.2.2681': attribute type 7 has an invalid length.
[  243.401342][T14014] netlink: 'syz.0.2682': attribute type 10 has an invalid length.
[  243.664398][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  243.666691][ T5851] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  243.746982][T14054] syzkaller1: entered promiscuous mode
[  243.748842][T14054] syzkaller1: entered allmulticast mode
[  243.932429][T14068] __nla_validate_parse: 11 callbacks suppressed
[  243.932567][T14068] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2697'.
[  243.977966][T14073] syz_tun: entered promiscuous mode
[  244.319494][T14094] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  244.441289][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  244.536759][T14119] netlink: 'syz.1.2717': attribute type 1 has an invalid length.
[  244.539133][T14119] netlink: 'syz.1.2717': attribute type 2 has an invalid length.
[  244.623237][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2718'.
[  244.631738][T14126] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2718'.
[  244.987476][T14134] netlink: 'syz.1.2720': attribute type 5 has an invalid length.
[  244.989841][T14134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2720'.
[  245.381981][T14156] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2727'.
[  245.548209][T14171] netlink: 'syz.2.2733': attribute type 4 has an invalid length.
[  245.650534][T14179] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2735'.
[  245.707619][T14181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.710817][T14181] syzkaller0: entered promiscuous mode
[  245.713166][T14181] syzkaller0: entered allmulticast mode
[  245.751867][T14181] tipc: Resetting bearer <eth:syzkaller0>
[  245.768083][T14181] tipc: Disabling bearer <eth:syzkaller0>
[  245.830314][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'.
[  245.889800][T14193] syzkaller0: entered promiscuous mode
[  245.891551][T14193] syzkaller0: entered allmulticast mode
[  245.898855][T14193] netlink: 'syz.2.2741': attribute type 11 has an invalid length.
[  245.902267][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2741'.
[  245.911598][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'.
[  245.915019][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'.
[  246.333271][T14232] bridge4: entered promiscuous mode
[  246.525867][T14256] netlink: 'syz.1.2763': attribute type 2 has an invalid length.
[  246.537012][T14256] `: entered promiscuous mode
[  246.851386][T14289] netlink: 'syz.2.2773': attribute type 10 has an invalid length.
[  246.860332][T14289] bond0: (slave team0): refused to change device type
[  247.509301][T14304] tipc: New replicast peer: 255.255.255.255
[  247.513599][T14304] tipc: Enabled bearer <udp:syz2>, priority 6
[  247.841706][T14325] netlink: 'syz.1.2786': attribute type 21 has an invalid length.
[  247.935349][T14329] netlink: 'syz.1.2788': attribute type 10 has an invalid length.
[  248.192130][T14345] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  248.199077][T14345] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  248.383756][T14361] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  248.442726][T14354] bond7: entered promiscuous mode
[  248.445400][T14354] 8021q: adding VLAN 0 to HW filter on device bond7
[  248.570680][T14370] netlink: 'syz.0.2803': attribute type 16 has an invalid length.
[  248.573534][T14370] netlink: 'syz.0.2803': attribute type 17 has an invalid length.
[  249.265960][T14403] __nla_validate_parse: 14 callbacks suppressed
[  249.265971][T14403] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2815'.
[  249.520206][T14429] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2824'.
[  249.520653][T14428] netlink: 'syz.1.2825': attribute type 3 has an invalid length.
[  249.528382][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'.
[  249.588223][T14432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2826'.
[  249.675268][T14437] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2828'.
[  249.842602][T14448] netlink: 'syz.0.2832': attribute type 16 has an invalid length.
[  250.043109][T14452] ip6tnl4: entered promiscuous mode
[  250.046230][T14452] ip6tnl4: entered allmulticast mode
[  250.111080][T14460] lo speed is unknown, defaulting to 1000
[  250.209073][T14468] validate_nla: 1 callbacks suppressed
[  250.209088][T14468] netlink: 'syz.2.2839': attribute type 9 has an invalid length.
[  250.282516][T14460] wg0 speed is unknown, defaulting to 1000
[  250.417200][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'.
[  250.879294][T14500] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  251.209482][T14533] netlink: 'syz.1.2862': attribute type 1 has an invalid length.
[  251.249288][T14533] 8021q: adding VLAN 0 to HW filter on device bond7
[  251.277059][T14533] veth13: entered promiscuous mode
[  251.286788][T14533] bond7: (slave veth13): Enslaving as an active interface with a down link
[  251.297714][T14533] erspan0: entered allmulticast mode
[  251.349607][T14543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2866'.
[  251.352394][T14543] bond0: invalid ARP target 0.0.0.0 specified for addition
[  251.354778][T14543] bond0: option arp_ip_target: invalid value (0)
[  251.397246][T14546] netlink: 'syz.2.2865': attribute type 2 has an invalid length.
[  251.437379][T14552] netlink: 'syz.1.2869': attribute type 8 has an invalid length.
[  251.440803][T14552] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  251.552665][T14557] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  251.821509][T14568] netlink: 'syz.1.2876': attribute type 1 has an invalid length.
[  251.826703][T14568] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2876'.
[  252.052511][T14580] dvmrp0: left allmulticast mode
[  252.177554][T14546] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  252.270804][T14590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2882'.
[  252.298757][T14590] bond8: entered promiscuous mode
[  252.301217][T14590] 8021q: adding VLAN 0 to HW filter on device bond8
[  252.501962][T14606] netlink: 'syz.2.2889': attribute type 1 has an invalid length.
[  252.505019][T14606] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2889'.
[  252.831482][T14628] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  252.943449][T14637] netlink: 'syz.0.2898': attribute type 1 has an invalid length.
[  253.020599][T14648] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  253.170469][T14661] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  253.318381][T14665] bond0 (unregistering): Released all slaves
[  253.435230][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  253.462769][T14687] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.491029][T14687] tipc: Resetting bearer <eth:syzkaller0>
[  253.556337][T14692] ==================================================================
[  253.559113][T14692] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  253.561835][T14692] Read of size 1 at addr ffff88801f669530 by task syz.2.2919/14692
[  253.565249][T14692] 
[  253.566353][T14692] CPU: 1 UID: 0 PID: 14692 Comm: syz.2.2919 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  253.566367][T14692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.566373][T14692] Call Trace:
[  253.566378][T14692]  <TASK>
[  253.566382][T14692]  dump_stack_lvl+0x189/0x250
[  253.566397][T14692]  ? __kasan_check_byte+0x12/0x40
[  253.566411][T14692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.566421][T14692]  ? lock_release+0x4b/0x3e0
[  253.566435][T14692]  ? __virt_addr_valid+0x4a5/0x5c0
[  253.566447][T14692]  print_report+0xca/0x240
[  253.566456][T14692]  ? __xfrm_state_insert+0x8af/0x1450
[  253.566468][T14692]  kasan_report+0x118/0x150
[  253.566481][T14692]  ? __xfrm_state_insert+0x8af/0x1450
[  253.566495][T14692]  __xfrm_state_insert+0x8af/0x1450
[  253.566509][T14692]  xfrm_state_insert+0x54/0x60
[  253.566521][T14692]  ipcomp6_init_state+0x655/0x900
[  253.566535][T14692]  __xfrm_init_state+0xa76/0x13f0
[  253.566543][T14692]  ? __xfrm_init_state+0x7ef/0x13f0
[  253.566552][T14692]  xfrm_init_state+0x18/0xa0
[  253.566563][T14692]  pfkey_add+0x1d38/0x2e00
[  253.566578][T14692]  ? __pfx_pfkey_add+0x10/0x10
[  253.566588][T14692]  ? kmem_cache_free+0x18f/0x400
[  253.566601][T14692]  pfkey_sendmsg+0xbfe/0x1090
[  253.566615][T14692]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  253.566631][T14692]  ? aa_sock_msg_perm+0xf1/0x1d0
[  253.566642][T14692]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  253.566652][T14692]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  253.566662][T14692]  __sock_sendmsg+0x21c/0x270
[  253.566673][T14692]  ____sys_sendmsg+0x52d/0x830
[  253.566686][T14692]  ? __pfx_____sys_sendmsg+0x10/0x10
[  253.566699][T14692]  ? import_iovec+0x74/0xa0
[  253.566708][T14692]  ___sys_sendmsg+0x21f/0x2a0
[  253.566720][T14692]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.566738][T14692]  ? __fget_files+0x2a/0x420
[  253.566750][T14692]  ? __fget_files+0x3a0/0x420
[  253.566763][T14692]  __sys_sendmmsg+0x227/0x430
[  253.566776][T14692]  ? __pfx___sys_sendmmsg+0x10/0x10
[  253.566787][T14692]  ? do_futex+0x333/0x420
[  253.566805][T14692]  ? fdget+0x184/0x1e0
[  253.566816][T14692]  ? rcu_is_watching+0x15/0xb0
[  253.566827][T14692]  __x64_sys_sendmmsg+0xa0/0xc0
[  253.566839][T14692]  do_syscall_64+0xfa/0x3b0
[  253.566850][T14692]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.566860][T14692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.566869][T14692]  ? exc_page_fault+0x9f/0xf0
[  253.566879][T14692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.566888][T14692] RIP: 0033:0x7faea918ebe9
[  253.566897][T14692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.566905][T14692] RSP: 002b:00007faeaa05b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  253.566938][T14692] RAX: ffffffffffffffda RBX: 00007faea93b5fa0 RCX: 00007faea918ebe9
[  253.566945][T14692] RDX: 000000000400008a RSI: 0000200000000180 RDI: 000000000000000b
[  253.566951][T14692] RBP: 00007faea9211e19 R08: 0000000000000000 R09: 0000000000000000
[  253.566957][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.566961][T14692] R13: 00007faea93b6038 R14: 00007faea93b5fa0 R15: 00007ffce0bde868
[  253.566972][T14692]  </TASK>
[  253.566975][T14692] 
[  253.666536][T14692] Allocated by task 10126:
[  253.667961][T14692]  kasan_save_track+0x3e/0x80
[  253.669424][T14692]  __kasan_slab_alloc+0x6c/0x80
[  253.670995][T14692]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  253.672685][T14692]  xfrm_state_alloc+0x24/0x2f0
[  253.674240][T14692]  __find_acq_core+0x8a7/0x1c00
[  253.675838][T14692]  xfrm_find_acq+0x78/0xa0
[  253.677295][T14692]  xfrm_alloc_userspi+0x6b3/0xc90
[  253.678979][T14692]  xfrm_user_rcv_msg+0x7a3/0xab0
[  253.680961][T14692]  netlink_rcv_skb+0x208/0x470
[  253.682511][T14692]  xfrm_netlink_rcv+0x79/0x90
[  253.684022][T14692]  netlink_unicast+0x82f/0x9e0
[  253.685520][T14692]  netlink_sendmsg+0x805/0xb30
[  253.687128][T14692]  __sock_sendmsg+0x21c/0x270
[  253.688761][T14692]  ____sys_sendmsg+0x505/0x830
[  253.690295][T14692]  ___sys_sendmsg+0x21f/0x2a0
[  253.691665][T14692]  __x64_sys_sendmsg+0x19b/0x260
[  253.693159][T14692]  do_syscall_64+0xfa/0x3b0
[  253.694500][T14692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.696237][T14692] 
[  253.697151][T14692] Freed by task 5910:
[  253.698570][T14692]  kasan_save_track+0x3e/0x80
[  253.700111][T14692]  kasan_save_free_info+0x46/0x50
[  253.701979][T14692]  __kasan_slab_free+0x5b/0x80
[  253.703459][T14692]  kmem_cache_free+0x18f/0x400
[  253.705181][T14692]  xfrm_state_gc_task+0x52d/0x6b0
[  253.706648][T14692]  process_scheduled_works+0xae1/0x17b0
[  253.708292][T14692]  worker_thread+0x8a0/0xda0
[  253.709707][T14692]  kthread+0x711/0x8a0
[  253.710969][T14692]  ret_from_fork+0x3fc/0x770
[  253.712311][T14692]  ret_from_fork_asm+0x1a/0x30
[  253.713746][T14692] 
[  253.714470][T14692] The buggy address belongs to the object at ffff88801f669200
[  253.714470][T14692]  which belongs to the cache xfrm_state of size 928
[  253.718802][T14692] The buggy address is located 816 bytes inside of
[  253.718802][T14692]  freed 928-byte region [ffff88801f669200, ffff88801f6695a0)
[  253.723027][T14692] 
[  253.723845][T14692] The buggy address belongs to the physical page:
[  253.725794][T14692] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f66a880 pfn:0x1f668
[  253.729490][T14692] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  253.732512][T14692] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  253.735332][T14692] page_type: f5(slab)
[  253.736840][T14692] raw: 00fff00000000040 ffff888104e7a280 dead000000000122 0000000000000000
[  253.740092][T14692] raw: ffff88801f66a880 00000000800e0007 00000000f5000000 0000000000000000
[  253.743296][T14692] head: 00fff00000000040 ffff888104e7a280 dead000000000122 0000000000000000
[  253.746519][T14692] head: ffff88801f66a880 00000000800e0007 00000000f5000000 0000000000000000
[  253.749045][T14692] head: 00fff00000000002 ffffea00007d9a01 00000000ffffffff 00000000ffffffff
[  253.751635][T14692] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  253.754207][T14692] page dumped because: kasan: bad access detected
[  253.756124][T14692] page_owner tracks the page as allocated
[  253.757853][T14692] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5922, tgid 5921 (syz.0.5), ts 58939776021, free_ts 58936637956
[  253.763548][T14692]  post_alloc_hook+0x240/0x2a0
[  253.765405][T14692]  get_page_from_freelist+0x21e4/0x22c0
[  253.767305][T14692]  __alloc_frozen_pages_noprof+0x181/0x370
[  253.769102][T14692]  alloc_pages_mpol+0x232/0x4a0
[  253.770507][T14692]  allocate_slab+0x8a/0x370
[  253.772115][T14692]  ___slab_alloc+0xbeb/0x1410
[  253.773724][T14692]  kmem_cache_alloc_noprof+0x283/0x3c0
[  253.775371][T14692]  xfrm_state_alloc+0x24/0x2f0
[  253.777131][T14692]  __find_acq_core+0x8a7/0x1c00
[  253.778632][T14692]  xfrm_find_acq+0x78/0xa0
[  253.780116][T14692]  pfkey_getspi+0x65d/0xee0
[  253.781813][T14692]  pfkey_sendmsg+0xbfe/0x1090
[  253.783274][T14692]  __sock_sendmsg+0x21c/0x270
[  253.784722][T14692]  ____sys_sendmsg+0x505/0x830
[  253.786237][T14692]  ___sys_sendmsg+0x21f/0x2a0
[  253.787754][T14692]  __x64_sys_sendmsg+0x19b/0x260
[  253.789377][T14692] page last free pid 5922 tgid 5921 stack trace:
[  253.791386][T14692]  __free_frozen_pages+0xbc4/0xd30
[  253.792958][T14692]  stack_depot_save_flags+0x436/0x860
[  253.794608][T14692]  kasan_save_track+0x4f/0x80
[  253.796327][T14692]  __kasan_kmalloc+0x93/0xb0
[  253.797889][T14692]  __kmalloc_noprof+0x27a/0x4f0
[  253.799702][T14692]  sk_prot_alloc+0xe7/0x220
[  253.801216][T14692]  sk_alloc+0x3a/0x370
[  253.802695][T14692]  pfkey_create+0xdc/0x570
[  253.804090][T14692]  __sock_create+0x4b3/0x9f0
[  253.805505][T14692]  __sys_socket+0xd7/0x1b0
[  253.806885][T14692]  __x64_sys_socket+0x7a/0x90
[  253.808345][T14692]  do_syscall_64+0xfa/0x3b0
[  253.809748][T14692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.811552][T14692] 
[  253.812297][T14692] Memory state around the buggy address:
[  253.814018][T14692]  ffff88801f669400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.816449][T14692]  ffff88801f669480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.819647][T14692] >ffff88801f669500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.822850][T14692]                                      ^
[  253.824836][T14692]  ffff88801f669580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  253.827415][T14692]  ffff88801f669600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  253.829986][T14692] ==================================================================
[  253.832786][T14692] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  253.835086][T14692] CPU: 1 UID: 0 PID: 14692 Comm: syz.2.2919 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  253.839040][T14692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.842298][T14692] Call Trace:
[  253.843350][T14692]  <TASK>
[  253.844275][T14692]  dump_stack_lvl+0x99/0x250
[  253.845729][T14692]  ? __asan_memcpy+0x40/0x70
[  253.847373][T14692]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.849379][T14692]  ? __pfx__printk+0x10/0x10
[  253.851190][T14692]  vpanic+0x281/0x750
[  253.852741][T14692]  ? __pfx_vpanic+0x10/0x10
[  253.854497][T14692]  ? irqentry_exit+0x74/0x90
[  253.855964][T14692]  panic+0xb9/0xc0
[  253.857136][T14692]  ? __pfx_panic+0x10/0x10
[  253.858478][T14692]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  253.860213][T14692]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  253.861996][T14692]  ? __xfrm_state_insert+0x8af/0x1450
[  253.863639][T14692]  check_panic_on_warn+0x89/0xb0
[  253.865140][T14692]  ? __xfrm_state_insert+0x8af/0x1450
[  253.866913][T14692]  end_report+0x78/0x160
[  253.868243][T14692]  kasan_report+0x129/0x150
[  253.869596][T14692]  ? __xfrm_state_insert+0x8af/0x1450
[  253.871300][T14692]  __xfrm_state_insert+0x8af/0x1450
[  253.872926][T14692]  xfrm_state_insert+0x54/0x60
[  253.874689][T14692]  ipcomp6_init_state+0x655/0x900
[  253.876394][T14692]  __xfrm_init_state+0xa76/0x13f0
[  253.877945][T14692]  ? __xfrm_init_state+0x7ef/0x13f0
[  253.879595][T14692]  xfrm_init_state+0x18/0xa0
[  253.881252][T14692]  pfkey_add+0x1d38/0x2e00
[  253.882985][T14692]  ? __pfx_pfkey_add+0x10/0x10
[  253.884781][T14692]  ? kmem_cache_free+0x18f/0x400
[  253.886428][T14692]  pfkey_sendmsg+0xbfe/0x1090
[  253.888109][T14692]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  253.889644][T14692]  ? aa_sock_msg_perm+0xf1/0x1d0
[  253.891267][T14692]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  253.892994][T14692]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  253.894550][T14692]  __sock_sendmsg+0x21c/0x270
[  253.896021][T14692]  ____sys_sendmsg+0x52d/0x830
[  253.897502][T14692]  ? __pfx_____sys_sendmsg+0x10/0x10
[  253.899165][T14692]  ? import_iovec+0x74/0xa0
[  253.900821][T14692]  ___sys_sendmsg+0x21f/0x2a0
[  253.902635][T14692]  ? __pfx____sys_sendmsg+0x10/0x10
[  253.904526][T14692]  ? __fget_files+0x2a/0x420
[  253.906297][T14692]  ? __fget_files+0x3a0/0x420
[  253.907805][T14692]  __sys_sendmmsg+0x227/0x430
[  253.909276][T14692]  ? __pfx___sys_sendmmsg+0x10/0x10
[  253.911103][T14692]  ? do_futex+0x333/0x420
[  253.912663][T14692]  ? fdget+0x184/0x1e0
[  253.913966][T14692]  ? rcu_is_watching+0x15/0xb0
[  253.915438][T14692]  __x64_sys_sendmmsg+0xa0/0xc0
[  253.916962][T14692]  do_syscall_64+0xfa/0x3b0
[  253.918364][T14692]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.919925][T14692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.921993][T14692]  ? exc_page_fault+0x9f/0xf0
[  253.923490][T14692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.925334][T14692] RIP: 0033:0x7faea918ebe9
[  253.926734][T14692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.933848][T14692] RSP: 002b:00007faeaa05b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  253.936734][T14692] RAX: ffffffffffffffda RBX: 00007faea93b5fa0 RCX: 00007faea918ebe9
[  253.939601][T14692] RDX: 000000000400008a RSI: 0000200000000180 RDI: 000000000000000b
[  253.942093][T14692] RBP: 00007faea9211e19 R08: 0000000000000000 R09: 0000000000000000
[  253.944513][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.947186][T14692] R13: 00007faea93b6038 R14: 00007faea93b5fa0 R15: 00007ffce0bde868
[  253.950102][T14692]  </TASK>
[  253.951860][T14692] Kernel Offset: disabled
[  253.953451][T14692] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:57:11  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1b7b9a2 RBX=0000000000000000 RCX=39fdf3104b603e00 RDX=ffff888022768000
RSI=ffffffff8be32660 RDI=ffffffff8be32620 RBP=ffff88801cdf4cd0 RSP=ffffc90007fd7938
R8 =ffff88801cdf4ccf R9 =1ffff110039be999 R10=dffffc0000000000 R11=ffffed10039be99a
R12=ffffffff822e4d3d R13=0000000000000000 R14=ffffffff8dbdcd10 R15=dffffc0000000000
RIP=ffffffff81a65dc4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557870d500 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5ecabc2780 CR3=0000000039920000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f5ecb8ed6c0 00007f5ecb8ed6c0 XMM01=00007f5ecb8ed6b0 00007f5ecb8ed6b0
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f5ecac12e53
XMM06=0000000000000000 00007f5ecac12e4d XMM07=0000000000000000 00007f5ecac12e61
XMM08=0000000000000000 00007f5ecac12ee7 XMM09=0000000000000000 00007f5ecac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001763 RDI=0000000000001764 RBP=00000000000003f8 RSP=ffffc90008006cb0
R8 =ffff8880200a8237 R9 =1ffff11004015046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48d8 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faeaa05b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d7d41 CR3=0000000126704000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faea9387498 00007faea9387470 XMM03=00007faea93874a8 00007faea93874a0
XMM04=00007faea9eed100 00007faea9387460 XMM05=00007faea9387478 00007faea93874c0
XMM06=00007faea93874b8 00007faea93874b0 XMM07=00007faea93874a8 00007faea93874a0
XMM08=0000000000000000 00007faea9212ee7 XMM09=0000000000000000 00007faea9212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
