last executing test programs:

718.402835ms ago: executing program 1 (id=1948):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_xfrm(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d80)=@acquire={0x128, 0x17, 0x502, 0x70bd27, 0x25dfdbfd, {{@in=@remote, 0x4d2, 0xff}, @in=@multicast2, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x80, 0x3a}, {{@in=@broadcast, @in=@broadcast, 0x4e21, 0x8001, 0x4e23, 0x7, 0xa, 0x0, 0x80, 0x25}, {0x7961, 0x81, 0x5, 0x0, 0x6, 0x38000, 0x7, 0x1c}, {0x5474, 0x6, 0x822, 0x200}, 0x2, 0x6e6bbe, 0x2, 0x0, 0x1, 0x2}, 0x5, 0x457, 0x5, 0x70bd2d}}, 0x128}, 0x1, 0x0, 0x0, 0x40100}, 0x4004)
r1 = socket$inet6(0xa, 0x80002, 0x88)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48)
socket$inet6(0xa, 0x1, 0x26)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r1}, 0x20)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000200)={0xa0000004})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)

579.786204ms ago: executing program 1 (id=1949):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20541, 0x0)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x80800)
setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000180)=0xf, 0x4)
recvmmsg(r2, &(0x7f0000008680)=[{{&(0x7f00000001c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/244, 0xf4}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/177, 0xb1}], 0x4}, 0xff}, {{&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000640)=""/143, 0x8f}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/41, 0x29}, {&(0x7f00000017c0)=""/140, 0x8c}, {&(0x7f0000001880)=""/46, 0x2e}, {&(0x7f00000018c0)=""/159, 0x9f}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/62, 0x3e}, {&(0x7f00000029c0)=""/180, 0xb4}], 0xa, &(0x7f0000002b40)}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002b80)=""/153, 0x99}, {&(0x7f0000002c40)=""/188, 0xbc}, {&(0x7f0000002d00)=""/155, 0x9b}, {&(0x7f0000002dc0)=""/122, 0x7a}], 0x4, &(0x7f0000002e80)=""/4096, 0x1000}}, {{&(0x7f0000003e80)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003f00)=""/165, 0xa5}], 0x1, &(0x7f0000004000)=""/106, 0x6a}, 0x5}, {{&(0x7f0000004080)=@tipc=@name, 0x80, &(0x7f0000005580)=[{&(0x7f0000004100)=""/66, 0x42}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/8, 0x8}, {&(0x7f00000051c0)=""/244, 0xf4}, {&(0x7f00000052c0)=""/82, 0x52}, {&(0x7f0000005340)=""/175, 0xaf}, {&(0x7f0000005400)=""/93, 0x5d}, {&(0x7f0000005480)=""/8, 0x8}, {&(0x7f00000054c0)=""/91, 0x5b}, {&(0x7f0000005540)=""/28, 0x1c}], 0xa, &(0x7f0000005640)=""/237, 0xed}, 0x35ce}, {{&(0x7f0000005740)=@pppol2tpv3={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005880)=[{&(0x7f00000057c0)=""/160, 0xa0}], 0x1, &(0x7f00000058c0)=""/220, 0xdc}}, {{&(0x7f00000059c0)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005a40)=""/232, 0xe8}, {&(0x7f0000005b40)=""/96, 0x60}, {&(0x7f0000005bc0)=""/251, 0xfb}, {&(0x7f0000005cc0)=""/104, 0x68}, {&(0x7f0000005d40)=""/47, 0x2f}, {&(0x7f0000005d80)=""/189, 0xbd}, {&(0x7f0000005e40)=""/240, 0xf0}], 0x7, &(0x7f0000005fc0)=""/4096, 0x1000}, 0x517155bf}, {{&(0x7f0000006fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000008580)=[{&(0x7f0000007040)=""/247, 0xf7}, {&(0x7f0000007140)=""/179, 0xb3}, {&(0x7f0000007200)=""/169, 0xa9}, {&(0x7f00000072c0)=""/72, 0x48}, {&(0x7f0000007340)=""/4096, 0x1000}, {&(0x7f0000008340)}, {&(0x7f0000008380)=""/5, 0x5}, {&(0x7f00000083c0)=""/229, 0xe5}, {&(0x7f00000084c0)=""/177, 0xb1}], 0x9, &(0x7f0000008640)=""/62, 0x3e}, 0x6}], 0x8, 0x12000, &(0x7f0000008880)={0x77359400})
getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000088c0)={0x0, 0x1}, &(0x7f0000008900)=0x8)
r5 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000008940))
r6 = accept$nfc_llcp(r4, 0x0, &(0x7f0000008980))
ppoll(&(0x7f00000089c0)=[{r6, 0x80}, {r5, 0x244}, {r5, 0x5}, {r2, 0x2020}, {r4, 0x4311}], 0x5, &(0x7f0000008a00)={0x0, 0x3938700}, &(0x7f0000008a40)={[0x7]}, 0x8)
bind$bt_sco(r3, &(0x7f0000008a80), 0x8)
r7 = socket$kcm(0x29, 0x5, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000008ac0)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x5, 0x5, 0x9, 0x5, 0x80000000, 0xa000000000}, {0x7, 0x80, 0x200, 0x1, 0x5, 0x4000000000000000}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
unshare(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000008d80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000009000)={<r10=>0x0, 0x2, 0x1, [0x10000, 0xffffffffffffff43, 0xfff, 0x8000000000000000, 0x9], [0x4, 0x9, 0x5, 0x1, 0x6, 0xf, 0x91, 0x2, 0x10001, 0x4, 0x0, 0x1, 0xfff, 0x9, 0x4, 0x8, 0x3, 0x7, 0x1, 0xfffffffffffffffe, 0x3000000000000000, 0x87e, 0xfffffffffffffffe, 0x3, 0x32f8981, 0x67d000000, 0x4, 0x3a4, 0xfff, 0x100000001, 0x9, 0xdd1, 0x0, 0x9, 0x9, 0xe, 0x47, 0x0, 0x6, 0x4, 0x9, 0xd, 0x3, 0x10001, 0x9, 0x6, 0x4, 0x4, 0x9, 0x8, 0x2, 0x1, 0x9, 0x8, 0x80000000, 0x5, 0x8, 0x5, 0x0, 0x7, 0x8000000000000001, 0x29, 0x100, 0x9, 0x8, 0x7, 0x5, 0x5, 0x9, 0x3, 0x1, 0x2, 0x3, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x7, 0x6, 0x2, 0x9, 0x7, 0x3, 0x7fffffffffffffff, 0x4, 0x8, 0x9, 0x5, 0x9, 0x3, 0x7, 0xa98, 0x8, 0x6, 0x7, 0x8, 0x1000, 0x5, 0x8001, 0x7, 0x7fffffffffffffff, 0x1, 0x100, 0x6, 0x100000000, 0x0, 0x6, 0x3ff, 0x2, 0x3, 0x4, 0x2, 0x5, 0x6, 0x80000001, 0x7, 0x1, 0x9, 0xff, 0x5, 0x7, 0x10000]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000009440)={{r7}, r9, 0x2, @inherit={0x60, &(0x7f0000008f80)={0x0, 0x3, 0x6, 0x8, {0x12, 0x1ff, 0x2, 0x1ff, 0x101}, [0xfffffffffffffa96, 0xffffffffffffffff, 0x4b]}}, @devid=r10})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f000000a440), &(0x7f000000a480)=0x8)
r12 = accept4$ax25(r4, &(0x7f000000a4c0)={{0x3, @bcast}, [@null, @bcast, @bcast, @netrom, @remote, @rose, @bcast, @null]}, &(0x7f000000a540)=0x48, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r12, 0x4004f506, &(0x7f000000a580))
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000a600), r11)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f000000a6c0)={&(0x7f000000a5c0)={0x10, 0x0, 0x0, 0x10902400}, 0xc, &(0x7f000000a680)={&(0x7f000000a640)={0x14, r13, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
r14 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_void(r14, 0x1, 0x0, 0x0, 0x0)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f000000a740)=0xfffffffe)

560.451988ms ago: executing program 1 (id=1950):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000001c0)='irq_noise\x00', r1, 0x0, 0x1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070a010000000000000001000000040008802c000480030001000000050003000000000005000302010000000500030000000000050003000200d79208000100030000000800020001000000"], 0x54}}, 0x880)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2a, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000fd00000000000000030006000000000002000000ac1414000000000000000000020001000000000000000000000000200300050000000000020000000000000000000000000000007758c59008e85ed3b5c2147185922942fcd086434f03dbe19777614f9aa0154b65516972b2b863f6f152c7e53c8a4c9477227ff508e423976dfda55efcfe036dfffdba4f7a6e2e5240397cdbb6d366a52fe9f0a7782998d7066eb68ca8ae81309663c31405d1343c695cd39048a4ec4f6be1911a6e6c633b3b00ea6f9d6bf40b3f284b8891350bef0229f9f4b94c9e0638c0560bedf1167d877376e40aa275f7e72dc745f09bb5d1a1b82da20e782cc675a2d48d1d06aed8bc9308ce93e03e33c21d568103a5b2b11af69aa3617a9766"], 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab7"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001895b00"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000300000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r8 = socket(0x10, 0x803, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x92ff, 0x30, 0x1, 0x9558}, &(0x7f0000000200)=0x18)
socket$kcm(0xf, 0x0, 0x2)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000001800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000207010100000000000000000500000a0c0003400000000073139b5767a0b0c657b3a5e59b8f4eb55f8d2624d5232cce6f4b4c1d1bfb96b8860cc44ccdcbbead351968619a49c51f8d95d76d30cc5712396cc0ae4d28a22c222eb0129b0138e7986aa0af54fb1e9e14a446cb9918cd803a55e1d2dfe9ea96045b4d9ab52806021838eaa33838fdce4df19df41766bcc781b352"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

474.803441ms ago: executing program 1 (id=1952):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x101, 0x4, 0x22}, 0x50)
r2 = socket$inet(0x2, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2, 0x2}, 0x20)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800)

389.988513ms ago: executing program 1 (id=1953):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x1, 0x3, 0x4, 0x4}}, 0x26)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x76}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x0)

330.478078ms ago: executing program 1 (id=1955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time\x00')
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x400, 0xc3, &(0x7f00000026c0)=""/195}, 0x94)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040202001200000000000000", @ANYRES32, @ANYBLOB="000000000000001800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000440)=r2}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="fea400000000000000000000a4abbf02904ee1c735c463f7e56d93e2d1e6dd2f0861e300800000001aa600bd14f8570605b42ba145059cf9ce7ea67b0146c5dae807ac49599274c6cd82e8baacaa", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x16, 0xc, &(0x7f00000025c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=<r5=>r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000002480)=""/105, 0x69, <r6=>0x0, &(0x7f0000002500)=""/129, 0x81}}, 0x10)
r7 = socket$rds(0x15, 0x5, 0x0)
getsockopt(r7, 0x1, 0x7, &(0x7f0000000480)=""/47, &(0x7f0000000780)=0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000002640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRESHEX=r4, @ANYRESHEX=r5, @ANYRESOCT, @ANYRESHEX=r7, @ANYRES64=r6], 0x0, 0x2, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$BTRFS_IOC_SCRUB(r12, 0xc400941b, &(0x7f0000002ac0)={0x0, 0x200, 0xb3})
read$alg(r11, &(0x7f0000000500)=""/4096, 0x1000)
splice(r11, 0x0, r10, 0x0, 0x114, 0xe)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x693, '\x00', r9, r10, 0x4, 0x4, 0x1}, 0x50)
r13 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r13, 0x29, 0x3c, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r13, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0xc2}, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000001440)=""/4134, 0x1026}], 0x1)

330.082072ms ago: executing program 0 (id=1956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d00000000000000013100000008000300", @ANYRES32=r2, @ANYBLOB="501cc9a4721c7e4694b52b95fe97cb6a0cb5865f4122b4f5cf146e2a0cc16a7fce8ef7ad11294d54b5cd28eedef9fbfb1dca00000000000080011ede92526cd2045f694878cca0629f6b7a0e745a6346aa30152d0e9e96fe6695cd66d9e2e8201c2f69116331905a81175522663c122392d16bcc20d7109020874fdff7c4c71b5fb70a71e67f025d461ab93de594ce3392ed0203adaa1176cb12ce7491e5a7c8a5a2e2f13bb46e3e3247cdf642e5e352166d47c3a5593b19a7b561a54c59130700"/214, @ANYRES32, @ANYBLOB], 0x24}}, 0x0)

249.692432ms ago: executing program 0 (id=1957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaadf960000000000000800450000b00500000000119078ac1414ffac1414aa08000000009c907801000000000000006fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732bdf23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c25df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe32cfee9b9d5b0b2b171b51f9174963b0ce40ca7e0a7b4bbc4bc9720c876a57954"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a30b200000000080005400000001c08000a4000000000080003400000004008000f4000000006440000000c0a01030000000000000000070000070900020073797a31000000000900010073797a300000000018000380140000800900090073797a310000000004000a80140000001000010000000000000000000084000a"], 0xd8}}, 0x4000000)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r9=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'})
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x2, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0x1000d27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0xff, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x401, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="000129bd7000fddbdf25060000000c00018008000100", @ANYRES32=r4, @ANYBLOB="180001801400020064766d727030000000000000000000004000018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="14000200626f6e64300000000000000000000000080003000000000008000100", @ANYRES32=r12, @ANYBLOB="2800018008000300003a672bcf000200766c616e300000000000000000000000180001801400020069705f767469300000000000000000000c000180080001000000000000000000", @ANYRES32=r13, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000600)=@get={0x1, &(0x7f0000000500)=""/247, 0x7ff})
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
socket(0x400000000010, 0x3, 0x0)

249.075477ms ago: executing program 2 (id=1958):
r0 = socket(0x2a, 0x2, 0x0) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f0000000100)) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x25, 0x0, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [0x100000, 0x100]}}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x9}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}]}}]}, 0x48}}, 0xc41e639508b512e) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4)

248.356603ms ago: executing program 2 (id=1959):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRES16=r4], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x0)
r8 = socket(0x2, 0x3, 0x40)
setsockopt(r8, 0xff, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
write(r3, &(0x7f0000000300)="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", 0xfb)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002d00010026bd7000fcdbdf2504000000539aed015b8c21ed3e373035261fef0fd81231b79a41b423f7ddc649d167c05eb6e2c7bb8cbdc472a4c15157ed5ec06d59a7496c929011e126adb8298aadc5da3f3da9c7d40a7be65b0eeeed65722f395ad083e431ba10d5a66c8a0bac76de459ff7077cd5878ae10508a878bdbe0f3e95dee2c515c4c8d496bcafbe7afd007525414a9d68d709eb242c5d205a7c555fbc864c19263de230e923dc73fb19da008660016f31ea1f221810e0e8c40fd150cc29ea0d471584a148"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

160.863146ms ago: executing program 0 (id=1960):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {@in6=@dev, 0x0, 0x6c}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)

160.567706ms ago: executing program 2 (id=1961):
r0 = socket(0x1d, 0x2, 0x6)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x19)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18)
r5 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@alg={0xe8, 0x10, 0x1, 0x70bd3d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2400}, [{0x8, 0x1, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8041}, 0x20008090)
r6 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000080))
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="53cef5", 0x3}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4c004)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)

160.104392ms ago: executing program 0 (id=1962):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xe, 0x3c00, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x70}, 0x1, 0x7}, 0x0)

96.983088ms ago: executing program 0 (id=1963):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x300, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c001}, 0x15)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

91.253583ms ago: executing program 2 (id=1964):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d34}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r9=>0x0})
r10 = socket$alg(0x26, 0x5, 0x0)
getsockopt$SO_COOKIE(r10, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8) (async)
r11 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000204000008000500", @ANYRES32=r9], 0x4c}}, 0x0)

89.78275ms ago: executing program 0 (id=1965):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000100)=0xffee, 0x80c00)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket(0x11, 0x800000003, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38)

78.283899ms ago: executing program 2 (id=1966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0xfffffff0)

0s ago: executing program 2 (id=1967):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000000000000001, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[], 0x184}}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000020a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a30"], 0x13a8}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup=r6, 0xffffffffffffffff, 0x18, 0x2016}, 0x20)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6"}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f00000007c0)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1af7089438b0300a46e3098df7afc754445be4f47dfc5548d483f2c9f1608e91ee2050fbbc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xffffff41}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f0000000980)="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", 0x51}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x0, 0xfffffffe, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x24}}, 0x8000)
sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}}, 0x0)
accept(r1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
socket$kcm(0x10, 0x2, 0x10)

kernel console output (not intermixed with test programs):

_slave_0: entered promiscuous mode
[   56.909928][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.912912][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.916122][ T5855] bridge_slave_1: entered allmulticast mode
[   56.920338][ T5855] bridge_slave_1: entered promiscuous mode
[   56.937027][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.940287][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.950700][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.988213][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.991379][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.002226][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.008448][ T5846] team0: Port device team_slave_0 added
[   57.032216][ T5846] team0: Port device team_slave_1 added
[   57.036361][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.041934][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.089610][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.092191][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.100984][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.130195][ T5855] team0: Port device team_slave_0 added
[   57.133334][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.136314][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.147314][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.156337][ T5848] hsr_slave_0: entered promiscuous mode
[   57.159522][ T5848] hsr_slave_1: entered promiscuous mode
[   57.162898][ T5855] team0: Port device team_slave_1 added
[   57.243838][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.246813][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.258637][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.282372][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.285429][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.296571][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.312303][ T5846] hsr_slave_0: entered promiscuous mode
[   57.317595][ T5846] hsr_slave_1: entered promiscuous mode
[   57.321056][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   57.323548][ T5846] Cannot create hsr debugfs directory
[   57.447946][ T5855] hsr_slave_0: entered promiscuous mode
[   57.451544][ T5855] hsr_slave_1: entered promiscuous mode
[   57.454482][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   57.456915][ T5855] Cannot create hsr debugfs directory
[   57.633461][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.641937][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.666864][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.694146][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.746340][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.761098][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.775762][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.783626][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.855217][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.865555][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.874435][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.881790][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.976191][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.998260][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.021047][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.027815][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.043356][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.046311][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.054096][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   58.063212][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.065694][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.070722][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   58.083813][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.086307][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.090255][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.092747][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.105849][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.108707][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.113648][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.116019][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.210627][ T5847] Bluetooth: hci0: command tx timeout
[   58.213175][ T5847] Bluetooth: hci1: command tx timeout
[   58.291503][ T5237] Bluetooth: hci2: command tx timeout
[   58.305803][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.314209][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.384028][ T5846] veth0_vlan: entered promiscuous mode
[   58.387470][ T5848] veth0_vlan: entered promiscuous mode
[   58.394629][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.407425][ T5846] veth1_vlan: entered promiscuous mode
[   58.418618][ T5848] veth1_vlan: entered promiscuous mode
[   58.461781][ T5855] veth0_vlan: entered promiscuous mode
[   58.476095][ T5848] veth0_macvtap: entered promiscuous mode
[   58.485728][ T5855] veth1_vlan: entered promiscuous mode
[   58.496567][ T5848] veth1_macvtap: entered promiscuous mode
[   58.507950][ T5846] veth0_macvtap: entered promiscuous mode
[   58.515938][ T5846] veth1_macvtap: entered promiscuous mode
[   58.527150][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.544505][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.549728][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.565119][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.571503][ T5709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.575331][ T5709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.587777][ T5855] veth0_macvtap: entered promiscuous mode
[   58.595769][ T5709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.603239][ T5709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.606874][ T5709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.616805][ T5855] veth1_macvtap: entered promiscuous mode
[   58.622286][ T5709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.626004][ T5709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.644832][ T5709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.690891][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.723218][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.752673][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.752711][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.765362][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.774208][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.795539][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.804466][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.835648][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.852488][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.863234][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.868614][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.907037][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.912456][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.933734][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.970138][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.973507][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.027550][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   59.046201][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.050300][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.127707][ T5918] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1'.
[   59.165504][ T5920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.206405][ T5923] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.221638][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5'.
[   59.271890][ T5926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7'.
[   59.405895][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   59.446345][ T5941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12'.
[   59.683612][ T5956] tipc: Enabling of bearer <et:g> rejected, media not registered
[   59.872560][ T5973] Zero length message leads to an empty skb
[   59.872693][ T5972] tipc: Started in network mode
[   59.876811][ T5972] tipc: Node identity ac14142f, cluster identity 4711
[   59.881629][ T5972] tipc: New replicast peer: 0.0.0.0
[   59.884710][ T5972] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.920960][ T5972] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   59.932576][ T5978] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   59.967630][ T5972] tipc: Enabled bearer <ib:caif0>, priority 14
[   60.011306][ T5981] gretap1: entered promiscuous mode
[   60.064007][ T5978] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.23'.
[   60.136718][ T5987] IPVS: set_ctl: invalid protocol: 92 172.20.20.42:20000
[   60.195715][ T5991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.28'.
[   60.205780][ T5993] bridge0: entered allmulticast mode
[   60.220812][ T5993] pim6reg: entered allmulticast mode
[   60.232296][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   60.235960][ T5993] bridge_slave_1: left allmulticast mode
[   60.249034][ T5993] bridge_slave_1: left promiscuous mode
[   60.256912][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.284342][ T5993] bridge_slave_0: left allmulticast mode
[   60.286693][ T5993] bridge_slave_0: left promiscuous mode
[   60.293842][ T5237] Bluetooth: hci1: command tx timeout
[   60.296119][ T5237] Bluetooth: hci0: command tx timeout
[   60.300924][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.324027][ T5993] bridge0 (unregistering): left allmulticast mode
[   60.369499][ T5237] Bluetooth: hci2: command tx timeout
[   60.503231][ T6008] netlink: 'syz.0.34': attribute type 1 has an invalid length.
[   60.506489][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'.
[   60.512979][ T6008] openvswitch: netlink: IPv4 tun info is not correct
[   60.573713][ T6010] tipc: Invalid UDP bearer configuration
[   60.573761][ T6010] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   60.664455][ T6014] netlink: 'syz.0.37': attribute type 1 has an invalid length.
[   60.774391][ T6020] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   60.785406][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.789818][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.876421][ T6024] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.924987][ T6030] netlink: 'syz.2.44': attribute type 6 has an invalid length.
[   60.945415][ T6030] netlink: 'syz.2.44': attribute type 12 has an invalid length.
[   61.039121][   T51] tipc: Node number set to 2886997039
[   61.198866][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.513667][ T6089] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.538520][ T6091] netlink: 'syz.1.63': attribute type 1 has an invalid length.
[   61.555247][  T791] IPVS: starting estimator thread 0...
[   61.639101][ T6095] IPVS: using max 79 ests per chain, 189600 per kthread
[   62.031044][ T6128] netlink: 'syz.0.71': attribute type 19 has an invalid length.
[   62.047078][ T5709] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.051158][ T6128] netlink: 'syz.0.71': attribute type 19 has an invalid length.
[   62.055476][ T5709] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.060096][ T5709] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.064721][ T5709] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.118536][ T6133] block nbd0: not configured, cannot reconfigure
[   62.369555][ T5237] Bluetooth: hci1: command tx timeout
[   62.369808][ T5847] Bluetooth: hci0: command tx timeout
[   62.459687][ T5847] Bluetooth: hci2: command tx timeout
[   62.496516][ T6152] netlink: 'syz.0.81': attribute type 7 has an invalid length.
[   62.623029][ T6165] netlink: 'syz.2.88': attribute type 1 has an invalid length.
[   63.084283][ T6186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.187432][ T6186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.263651][ T6186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.409573][    C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96
[   64.086174][ T6236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.087933][ T6240] __nla_validate_parse: 26 callbacks suppressed
[   64.087946][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.109'.
[   64.192502][ T6236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.283742][ T6236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.366902][ T6236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.438209][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.446478][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.453381][ T5847] Bluetooth: hci0: command tx timeout
[   64.459044][ T5847] Bluetooth: hci1: command tx timeout
[   64.465031][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.474284][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.540698][ T5847] Bluetooth: hci2: command tx timeout
[   64.676249][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'.
[   64.680635][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'.
[   65.234469][ T6284] syz.1.122 uses obsolete (PF_INET,SOCK_PACKET)
[   65.303269][ T6285] netlink: 36 bytes leftover after parsing attributes in process `syz.2.124'.
[   65.412076][ T6289] validate_nla: 6 callbacks suppressed
[   65.412085][ T6289] netlink: 'syz.1.126': attribute type 10 has an invalid length.
[   65.432326][ T6289] veth0_vlan: left promiscuous mode
[   65.436213][ T6289] veth0_vlan: entered promiscuous mode
[   65.444084][ T6289] team0: Device veth0_vlan failed to register rx_handler
[   65.513914][ T6291] netlink: 'syz.1.127': attribute type 7 has an invalid length.
[   65.541493][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.128'.
[   65.638575][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'.
[   65.643577][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'.
[   65.704418][ T6300] netlink: 'syz.0.130': attribute type 8 has an invalid length.
[   65.709795][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'.
[   65.716649][ T6300] bond0: entered promiscuous mode
[   65.719438][ T6300] bond_slave_0: entered promiscuous mode
[   65.722046][ T6300] bond_slave_1: entered promiscuous mode
[   65.727108][ T6300] bond0: left promiscuous mode
[   65.729425][ T6300] bond_slave_0: left promiscuous mode
[   65.731705][ T6300] bond_slave_1: left promiscuous mode
[   65.802243][ T6299] netlink: 'syz.1.131': attribute type 3 has an invalid length.
[   65.805772][ T6299] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[   65.809892][ T6299] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.131'.
[   65.815932][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.1.131'.
[   66.219839][ T6310] bond0: entered promiscuous mode
[   66.222072][ T6310] bond_slave_0: entered promiscuous mode
[   66.224360][ T6310] bond_slave_1: entered promiscuous mode
[   66.228401][ T6310] batadv0: entered promiscuous mode
[   66.232396][ T6310] 8021q: adding VLAN 0 to HW filter on device hsr1
[   66.239716][   T24] IPVS: starting estimator thread 0...
[   66.242192][ T6310] IPVS: lc: FWM 3 0x00000003 - no destination available
[   66.242192][ T6311] IPVS: lc: FWM 3 0x00000003 - no destination available
[   66.242252][    C0] IPVS: lc: FWM 3 0x00000003 - no destination available
[   66.245037][    C1] IPVS: lc: FWM 3 0x00000003 - no destination available
[   66.329228][ T6312] IPVS: using max 47 ests per chain, 112800 per kthread
[   66.741532][ T6326] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[   67.448177][ T6354] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20004
[   68.180361][ T6384] nbd: couldn't find device at index 536870912
[   68.500482][ T6392] Bluetooth: MGMT ver 1.23
[   68.631010][ T6398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.634573][ T6399] syzkaller0: entered promiscuous mode
[   68.637030][ T6399] syzkaller0: entered allmulticast mode
[   68.651526][ T6397] tipc: Resetting bearer <eth:syzkaller0>
[   68.659237][ T6397] tipc: Disabling bearer <eth:syzkaller0>
[   68.862699][ T6408] netlink: 'syz.2.168': attribute type 7 has an invalid length.
[   68.953158][ T6413] openvswitch: netlink: Key type 12918 is out of range max 32
[   69.181088][ T6425] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   69.250958][ T6429] __nla_validate_parse: 9 callbacks suppressed
[   69.250972][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'.
[   69.359519][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'.
[   69.422035][ T6439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.180'.
[   69.624567][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'.
[   69.744537][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'.
[   70.005667][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'.
[   70.602688][   T10] cfg80211: failed to load regulatory.db
[   70.684066][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'.
[   70.886099][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'.
[   70.890771][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'.
[   70.900364][ T6483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.198'.
[   71.094855][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.664493][ T6563] openvswitch: netlink: IPv4 tun info is not correct
[   71.733914][ T6564] netlink: 'syz.1.221': attribute type 10 has an invalid length.
[   71.752530][ T6566] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.762335][ T6564] team0: entered promiscuous mode
[   71.764319][ T6564] team_slave_0: entered promiscuous mode
[   71.766489][ T6564] team_slave_1: entered promiscuous mode
[   71.772530][ T6564] netlink: 'syz.1.221': attribute type 1 has an invalid length.
[   71.842422][ T6566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.904671][ T6566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.947496][ T6566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.084088][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.098829][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.121623][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.137245][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.157883][ T6539] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   72.338602][ T6595] bridge_slave_1: left allmulticast mode
[   72.340968][ T6595] bridge_slave_1: left promiscuous mode
[   72.343308][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.349368][ T6595] bridge_slave_0: left allmulticast mode
[   72.351790][ T6595] bridge_slave_0: left promiscuous mode
[   72.354375][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.489020][ T5847] Bluetooth: hci0: command 0x0c20 tx timeout
[   73.686700][ T6673] ip6gretap0: entered promiscuous mode
[   74.076802][ T6675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   74.137751][ T6675] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   74.261735][ T6688] __nla_validate_parse: 18 callbacks suppressed
[   74.261747][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'.
[   74.268684][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'.
[   74.360708][ T6698] netlink: 'syz.1.266': attribute type 21 has an invalid length.
[   74.363443][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   74.365819][ T6696] netlink: 'syz.2.267': attribute type 6 has an invalid length.
[   74.371480][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.374677][ T6698] netlink: 'syz.1.266': attribute type 21 has an invalid length.
[   74.375830][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.382953][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   74.387209][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.391763][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'.
[   74.397564][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.445585][ T6701] netlink: 'syz.2.268': attribute type 15 has an invalid length.
[   74.544460][ T6712] netlink: 128 bytes leftover after parsing attributes in process `syz.2.272'.
[   74.544586][ T6713] netlink: 'syz.1.271': attribute type 10 has an invalid length.
[   74.561773][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'.
[   74.585667][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.590010][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.833129][ T6735] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   74.919876][ T6746] netlink: 'syz.2.279': attribute type 15 has an invalid length.
[   75.052822][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'.
[   75.057328][ T6758] netlink: 9 bytes leftover after parsing attributes in process `syz.1.281'.
[   75.068116][ T6758] ..0: renamed from hsr0 (while UP)
[   75.068126][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'.
[   75.075367][ T6758] ..0: entered allmulticast mode
[   75.077104][ T6758] hsr_slave_0: entered allmulticast mode
[   75.081289][ T6758] hsr_slave_1: entered allmulticast mode
[   75.084695][ T6758] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   75.192816][ T6766] netlink: 'syz.0.286': attribute type 11 has an invalid length.
[   75.234304][ T6756] bond0 (unregistering): left promiscuous mode
[   75.236975][ T6756] bond_slave_0: left promiscuous mode
[   75.240486][ T6756] bond_slave_1: left promiscuous mode
[   75.244899][ T6756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.251734][ T6756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.257231][ T6756] bond0 (unregistering): Released all slaves
[   75.902245][ T6775] netlink: 'syz.1.290': attribute type 9 has an invalid length.
[   76.246553][ T6785] bond0: ARP target 170.170.170.170 is already present
[   76.249752][ T6785] bond0: option arp_ip_target: invalid value (2863311530)
[   76.306196][ T6787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.313213][ T6787] syzkaller0: entered promiscuous mode
[   76.316232][ T6787] syzkaller0: entered allmulticast mode
[   76.341344][ T6787] tipc: Resetting bearer <eth:syzkaller0>
[   76.345677][ T6786] tipc: Resetting bearer <eth:syzkaller0>
[   76.358323][ T6786] tipc: Disabling bearer <eth:syzkaller0>
[   76.747545][ T6817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.753278][ T6817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.828838][ T6817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.834668][ T6817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.868051][ T6825] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   76.871847][ T6825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.910395][ T6817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.914740][ T6817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.009767][ T6817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.013812][ T6817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.110714][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.113872][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.157513][ T5884] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.168329][ T5884] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.175190][ T5884] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.178707][ T5884] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.182279][ T5884] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.189346][ T5884] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.214089][ T6839] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.263762][ T6839] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.306027][ T6839] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.357630][ T6839] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.431205][ T5884] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.441570][ T5884] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.450894][ T5884] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.462050][ T5884] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.603649][ T6894] batadv_slave_1: entered promiscuous mode
[   78.612719][ T6894] batadv_slave_1: left promiscuous mode
[   78.647011][ T6896] lo: entered allmulticast mode
[   78.672952][ T6897] lo: left allmulticast mode
[   78.756617][ T6901] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[   78.768239][ T6901] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[   78.828793][ T6910] netlink: 'syz.1.339': attribute type 4 has an invalid length.
[   78.948440][ T6918] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[   78.952879][ T6918] netlink: 'syz.2.342': attribute type 12 has an invalid length.
[   78.957057][ T6918] netlink: 'syz.2.342': attribute type 29 has an invalid length.
[   78.960835][ T6918] netlink: 'syz.2.342': attribute type 1 has an invalid length.
[   79.080362][ T6923] netlink: 'syz.0.344': attribute type 13 has an invalid length.
[   79.088594][ T6923] netlink: 'syz.0.344': attribute type 17 has an invalid length.
[   79.202531][ T6923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.261848][ T6926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.322288][ T6926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.364904][ T6937] __nla_validate_parse: 23 callbacks suppressed
[   79.364919][ T6937] netlink: 128 bytes leftover after parsing attributes in process `syz.1.348'.
[   79.454727][ T6937] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   79.458803][ T6937] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   79.493863][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'.
[   79.502584][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[   79.765959][ T6970] netlink: 'syz.0.359': attribute type 15 has an invalid length.
[   80.250349][ T6990] block nbd1: not configured, cannot reconfigure
[   80.321672][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   80.414024][ T7002] netlink: 120 bytes leftover after parsing attributes in process `syz.0.373'.
[   80.419323][ T7002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'.
[   80.484060][ T7006] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.507945][ T7006] veth5: entered promiscuous mode
[   80.514052][ T7006] bond4: (slave veth5): Enslaving as an active interface with a down link
[   80.636184][ T7012] netlink: 4308 bytes leftover after parsing attributes in process `syz.2.376'.
[   80.640727][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'.
[   80.772448][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[   81.013274][ T7042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'.
[   81.082247][ T7044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'.
[   82.214733][ T7086] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000
[   82.264231][ T7086] ave_0: entered promiscuous mode
[   82.359392][ T7095] openvswitch: netlink: Message has 16 unknown bytes.
[   82.362378][ T7095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.088504][ T7154] block nbd0: not configured, cannot reconfigure
[   83.952303][ T7189] validate_nla: 4 callbacks suppressed
[   83.952314][ T7189] netlink: 'syz.2.438': attribute type 15 has an invalid length.
[   84.017936][ T7193] netlink: 'syz.2.440': attribute type 1 has an invalid length.
[   84.083912][ T7197] netlink: 'syz.2.442': attribute type 1 has an invalid length.
[   84.085818][ T7198] netlink: 'syz.2.442': attribute type 1 has an invalid length.
[   84.103175][ T7197] bond0: entered promiscuous mode
[   84.105574][ T7197] bond0: entered allmulticast mode
[   84.108231][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.134819][ T7197] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.138691][ T7197] bond1: entered promiscuous mode
[   84.141556][ T7197] bond1: entered allmulticast mode
[   84.144270][ T7197] bond0: (slave bond1): Enslaving as a backup interface with a down link
[   84.257007][  T790] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[   84.263457][  T790] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[   84.448495][ T7222] IPVS: length: 209 != 16824
[   84.486108][ T7224] IPVS: Error connecting to the multicast addr
[   84.713950][ T7236] netlink: 'syz.0.454': attribute type 1 has an invalid length.
[   84.716684][ T7236] netlink: 'syz.0.454': attribute type 2 has an invalid length.
[   84.793299][ T7240] __nla_validate_parse: 74 callbacks suppressed
[   84.793311][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'.
[   84.920574][ T7247] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[   84.923970][ T7247] netlink: 128 bytes leftover after parsing attributes in process `syz.1.458'.
[   84.927408][ T7247] netlink: 'syz.1.458': attribute type 2 has an invalid length.
[   84.935990][ T7247] netlink: 'syz.1.458': attribute type 1 has an invalid length.
[   85.114794][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[   85.145526][ T7262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.465'.
[   85.378155][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.385603][ T7270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.481127][ T7270] veth5: left promiscuous mode
[   85.515612][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.524315][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.527460][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.546250][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.549791][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.475'.
[   85.550117][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.555666][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.559975][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.562795][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.566154][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.593155][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.596306][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.598846][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.651612][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.476'.
[   85.683251][ T7296] netlink: 'syz.2.478': attribute type 21 has an invalid length.
[   85.685695][ T7296] IPv6: NLM_F_CREATE should be specified when creating new route
[   85.688659][ T7296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.691409][ T7296] IPv6: NLM_F_CREATE should be set when creating new route
[   85.693928][ T7296] IPv6: NLM_F_CREATE should be set when creating new route
[   85.696414][ T7296] IPv6: NLM_F_CREATE should be set when creating new route
[   85.700313][ T7296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.845531][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.485'.
[   85.971300][ T7328] pim6reg1: entered promiscuous mode
[   85.973664][ T7328] pim6reg1: entered allmulticast mode
[   86.001985][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'.
[   86.157696][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   86.236055][ T7351] block nbd1: not configured, cannot reconfigure
[   86.450846][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   86.718422][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'.
[   86.728798][ T7381] bond0: entered promiscuous mode
[   86.732414][ T7381] bond_slave_0: entered promiscuous mode
[   86.734549][ T7381] bond_slave_1: entered promiscuous mode
[   86.737404][ T7381] batadv0: entered promiscuous mode
[   86.740685][ T7381] debugfs: 'hsr0' already exists in 'hsr'
[   86.743309][ T7381] Cannot create hsr debugfs directory
[   86.745465][ T7381] 8021q: adding VLAN 0 to HW filter on device hsr0
[   86.985672][ T7395] netlink: 'syz.1.513': attribute type 11 has an invalid length.
[   87.004679][ T7395] netlink: 'syz.1.513': attribute type 11 has an invalid length.
[   87.059414][ T7398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.081906][ T7398] tipc: Disabling bearer <eth:syzkaller0>
[   87.237099][ T7414] IPv6: sit1: Disabled Multicast RS
[   87.240827][ T7414] sit1: entered allmulticast mode
[   87.545675][ T7431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.548231][ T7432] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.580779][ T7431] tipc: Resetting bearer <eth:syzkaller0>
[   87.584910][ T7430] tipc: Disabling bearer <eth:syzkaller0>
[   88.192396][ T7479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.377899][ T7494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.383340][ T7494] syzkaller0: entered promiscuous mode
[   88.385684][ T7494] syzkaller0: entered allmulticast mode
[   88.398396][ T7494] tipc: Resetting bearer <eth:syzkaller0>
[   88.402353][ T7493] tipc: Resetting bearer <eth:syzkaller0>
[   88.408671][ T7493] tipc: Disabling bearer <eth:syzkaller0>
[   88.503588][ T7502] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[   88.635875][ T7510] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.640775][ T7513] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   88.670490][  T790] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   88.703226][ T7515] bond1: entered promiscuous mode
[   88.705418][ T7515] bond1: entered allmulticast mode
[   88.723290][ T7515] bridge0: entered promiscuous mode
[   88.725185][ T7515] bridge0: entered allmulticast mode
[   88.730371][ T7515] bond1: (slave bridge0): making interface the new active one
[   88.734158][ T7515] bond1: (slave bridge0): Enslaving as an active interface with an up link
[   88.750777][ T7515] bridge1: entered promiscuous mode
[   88.753802][ T7515] bridge1: entered allmulticast mode
[   88.759592][ T7515] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   88.796030][ T7525] sch_fq: defrate 0 ignored.
[   88.865302][ T7532] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   88.870612][ T7531] IPVS: stopping backup sync thread 7532 ...
[   89.244825][ T7562] validate_nla: 4 callbacks suppressed
[   89.244836][ T7562] netlink: 'syz.2.573': attribute type 2 has an invalid length.
[   89.286169][ T7567] netlink: 'syz.1.575': attribute type 2 has an invalid length.
[   89.570719][  T790] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   89.709917][ T7605] netlink: 'syz.2.584': attribute type 3 has an invalid length.
[   89.718284][ T7605] bridge: RTM_NEWNEIGH with invalid ether address
[   89.785831][ T7609] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   89.790754][ T7610] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   89.852577][ T7614] team0: Device ipip0 is of different type
[   89.998770][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   90.148078][ T7623] __nla_validate_parse: 18 callbacks suppressed
[   90.148093][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.591'.
[   90.194763][ T7625] netlink: 'syz.2.592': attribute type 23 has an invalid length.
[   90.318135][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'.
[   90.383696][ T7635] netlink: 'syz.2.596': attribute type 1 has an invalid length.
[   90.415353][ T7635] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.666068][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'.
[   90.703785][ T7662] ip6gre0: entered allmulticast mode
[   90.714070][ T7662] dvmrp8: entered allmulticast mode
[   90.729619][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.607'.
[   90.733533][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.607'.
[   90.877357][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'.
[   90.983422][ T7679] netlink: 256 bytes leftover after parsing attributes in process `syz.1.614'.
[   91.168667][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'.
[   91.212301][ T7692] netlink: 'syz.1.620': attribute type 83 has an invalid length.
[   91.282933][ T7703] netlink: 208 bytes leftover after parsing attributes in process `syz.0.623'.
[   91.288378][ T7701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.404742][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'.
[   91.419180][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.322765][ T7756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.391036][ T7762] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   92.395329][ T7762] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   92.418395][ T7776] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.718531][ T7804] netlink: 'syz.2.655': attribute type 11 has an invalid length.
[   92.744603][ T7794] vlan0: entered promiscuous mode
[   92.746902][ T7794] gretap0: entered promiscuous mode
[   93.245289][ T7849] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   93.653294][ T7887] team0: left promiscuous mode
[   93.659406][ T7887] team_slave_0: left promiscuous mode
[   93.664282][ T7887] team_slave_1: left promiscuous mode
[   93.839249][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.854243][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.878865][ T7887] ..0: left allmulticast mode
[   93.881319][ T7887] hsr_slave_0: left allmulticast mode
[   93.883420][ T7887] hsr_slave_1: left allmulticast mode
[   94.059464][ T7887] bond1: left promiscuous mode
[   94.061745][ T7887] bond1: left allmulticast mode
[   94.064688][ T7887] bridge0: left promiscuous mode
[   94.066946][ T7887] bridge0: left allmulticast mode
[   94.073847][ T7887] bridge1: left promiscuous mode
[   94.075962][ T7887] bridge1: left allmulticast mode
[   94.084684][ T5884] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.088267][ T5884] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.093653][ T5884] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.096545][ T5884] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.111069][ T5884] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.120447][ T5884] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.128067][ T5884] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.133542][ T5884] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.595465][ T7928] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20000
[   95.190461][ T7964] __nla_validate_parse: 17 callbacks suppressed
[   95.190479][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'.
[   95.220419][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'.
[   95.622515][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'.
[   95.622596][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.2.723'.
[   95.703517][ T8001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.707236][ T8001] syzkaller0: entered promiscuous mode
[   95.719381][ T8001] syzkaller0: entered allmulticast mode
[   95.750409][ T8001] tipc: Resetting bearer <eth:syzkaller0>
[   95.757365][ T8000] tipc: Resetting bearer <eth:syzkaller0>
[   95.768029][ T8000] tipc: Disabling bearer <eth:syzkaller0>
[   95.809242][ T8004] netlink: 9 bytes leftover after parsing attributes in process `syz.1.726'.
[   95.818507][ T8004] ..1: renamed from ..0
[   95.823396][ T8004] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   95.827129][ T8004] ..1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.833082][ T8004] ..1: entered allmulticast mode
[   95.834768][ T8004] hsr_slave_0: entered allmulticast mode
[   95.836758][ T8004] hsr_slave_1: entered allmulticast mode
[   95.851073][ T8004] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[   96.054752][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'.
[   96.065163][ T8009] vlan1: entered promiscuous mode
[   96.067451][ T8009] gretap0: entered promiscuous mode
[   96.221834][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'.
[   96.626907][ T8041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.737'.
[   96.633911][ T8041] netlink: 'syz.1.737': attribute type 8 has an invalid length.
[   96.950515][ T8068] netlink: 104 bytes leftover after parsing attributes in process `syz.1.746'.
[   96.988217][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'.
[   97.386897][ T8086] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   97.390942][ T8086] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   97.536957][ T8098] tipc: Started in network mode
[   97.538716][ T8098] tipc: Node identity 824f1a126147, cluster identity 4711
[   97.542168][ T8098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.545183][ T8098] syzkaller0: entered promiscuous mode
[   97.547397][ T8098] syzkaller0: entered allmulticast mode
[   97.563414][ T8098] tipc: Resetting bearer <eth:syzkaller0>
[   97.568584][ T8097] tipc: Resetting bearer <eth:syzkaller0>
[   97.579495][ T8097] tipc: Disabling bearer <eth:syzkaller0>
[   97.825094][ T8113] netlink: 'syz.0.764': attribute type 1 has an invalid length.
[   97.828258][ T8113] netlink: 'syz.0.764': attribute type 1 has an invalid length.
[   97.853452][ T8115] vlan3: entered allmulticast mode
[   97.855659][ T8115] bridge_slave_0: entered allmulticast mode
[   98.104021][ T8144] IPVS: set_ctl: invalid protocol: 136 172.20.20.47:20003
[   98.152030][ T8149] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.155052][ T8148] netlink: 'syz.1.776': attribute type 12 has an invalid length.
[   98.232842][ T8161] block nbd0: not configured, cannot reconfigure
[   98.483402][ T8187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.502409][ T8192] block nbd2: not configured, cannot reconfigure
[   98.691590][ T8214] netlink: 'syz.2.796': attribute type 1 has an invalid length.
[   98.817103][ T8227] netlink: 'syz.2.798': attribute type 13 has an invalid length.
[   98.822578][ T8227] netlink: 'syz.2.798': attribute type 17 has an invalid length.
[   98.927721][ T8227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.986680][ T8276] netlink: 'syz.0.802': attribute type 10 has an invalid length.
[   99.686062][ T8286] netlink: 'syz.2.805': attribute type 1 has an invalid length.
[   99.701056][ T8286] bond4: entered promiscuous mode
[   99.702922][ T8286] bond4: entered allmulticast mode
[   99.721152][ T8286] bridge8: entered promiscuous mode
[   99.723000][ T8286] bridge8: entered allmulticast mode
[   99.726249][ T8286] bond4: (slave bridge8): making interface the new active one
[   99.740248][ T8286] bond4: (slave bridge8): Enslaving as an active interface with an up link
[   99.786065][ T8293] Bluetooth: MGMT ver 1.23
[   99.793613][ T8293] IPVS: lc: FWM 3 0x00000003 - no destination available
[   99.796818][    C1] IPVS: lc: FWM 3 0x00000003 - no destination available
[   99.985326][ T8318] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   99.989354][ T8317] IPVS: stopping backup sync thread 8318 ...
[  100.019468][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  100.074207][ T8323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.077029][ T8323] IPv6: NLM_F_CREATE should be set when creating new route
[  100.080011][ T8323] IPv6: NLM_F_CREATE should be set when creating new route
[  100.083047][ T8323] IPv6: NLM_F_CREATE should be set when creating new route
[  100.090556][ T8323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.147976][ T8336] netlink: 'syz.0.820': attribute type 1 has an invalid length.
[  100.187890][ T8336] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  100.210687][ T8336] bond0: (slave bond_slave_0): Releasing backup interface
[  100.215108][ T8336] bond0: (slave bond_slave_1): Releasing backup interface
[  100.225368][ T8336] team0: Port device team_slave_0 removed
[  100.232740][ T8336] team0: Port device team_slave_1 removed
[  100.235422][ T8336] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.240208][ T8336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  100.329657][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  100.355902][ T8356] __nla_validate_parse: 31 callbacks suppressed
[  100.355913][ T8356] netlink: 208 bytes leftover after parsing attributes in process `syz.1.825'.
[  100.377589][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'.
[  100.458788][ T8365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.826'.
[  100.486127][ T8368] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  100.489681][ T8368] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.585304][ T8451] syzkaller1: entered promiscuous mode
[  101.598595][ T8451] syzkaller1: entered allmulticast mode
[  101.640612][ T8454] validate_nla: 1 callbacks suppressed
[  101.640632][ T8454] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  101.685785][ T8454] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  101.690319][ T8454] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  101.696693][ T8454] bond5: (slave vcan1): making interface the new active one
[  101.700681][ T8454] bond5: (slave vcan1): Enslaving as an active interface with an up link
[  101.715550][ T8454] bond5: (slave vcan2): The slave device specified does not support setting the MAC address
[  101.732148][ T8454] bond5: (slave vcan2): Enslaving as a backup interface with an up link
[  101.746490][ T8454] 8021q: adding VLAN 0 to HW filter on device bond5
[  101.791185][ T8459] netlink: 208 bytes leftover after parsing attributes in process `syz.0.834'.
[  101.841519][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'.
[  101.845401][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.836'.
[  101.920102][ T8469] netlink: 72 bytes leftover after parsing attributes in process `syz.1.838'.
[  101.937687][ T8471] netlink: 72 bytes leftover after parsing attributes in process `syz.1.838'.
[  101.994599][ T8482] netlink: 644 bytes leftover after parsing attributes in process `syz.2.843'.
[  102.006572][ T8482] veth20: entered allmulticast mode
[  102.012966][ T8484] netlink: 'syz.0.840': attribute type 13 has an invalid length.
[  102.015690][ T8484] netlink: 'syz.0.840': attribute type 17 has an invalid length.
[  102.037725][ T8484] ip6gretap0: left promiscuous mode
[  102.044261][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.047417][ T8484] 8021q: adding VLAN 0 to HW filter on device team0
[  102.056388][ T8484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.097916][ T8488] geneve2: entered promiscuous mode
[  102.116757][ T8487] geneve2: entered promiscuous mode
[  102.157827][ T8492] netlink: 'syz.1.845': attribute type 1 has an invalid length.
[  102.160667][ T8492] netlink: 'syz.1.845': attribute type 3 has an invalid length.
[  102.163386][ T8492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.845'.
[  102.166466][ T8492] NCSI netlink: No device for ifindex 246
[  102.414323][ T8516] netlink: 'syz.2.854': attribute type 21 has an invalid length.
[  102.417622][ T8516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  102.531369][ T8524] bridge_slave_1: left allmulticast mode
[  102.534747][ T8524] bridge_slave_1: left promiscuous mode
[  102.537628][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.547741][ T8524] bridge_slave_0: left allmulticast mode
[  102.551079][ T8524] bridge_slave_0: left promiscuous mode
[  102.553812][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.576324][ T8513] infiniband syz1: set down
[  102.579983][ T8513] infiniband syz1: added syz_tun
[  102.606111][ T8513] RDS/IB: syz1: added
[  102.607848][ T8513] smc: adding ib device syz1 with port count 1
[  102.610444][ T8513] smc:    ib device syz1 port 1 has no pnetid
[  102.740734][ T8530] veth1_to_bridge: mtu less than device minimum
[  103.064972][ T8547] bond0: entered promiscuous mode
[  103.067362][ T8547] batadv0: entered promiscuous mode
[  103.072434][ T8547] debugfs: 'hsr1' already exists in 'hsr'
[  103.074422][ T8547] Cannot create hsr debugfs directory
[  103.076551][ T8547] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  103.084383][ T8547] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  103.088601][ T8547] 8021q: adding VLAN 0 to HW filter on device hsr1
[  103.096621][ T8547] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  103.157285][ T8549] netlink: 'syz.0.864': attribute type 11 has an invalid length.
[  103.460529][ T8565] netlink: 'syz.0.869': attribute type 1 has an invalid length.
[  103.485649][ T8565] 8021q: adding VLAN 0 to HW filter on device bond8
[  103.520096][ T8565] bond8: (slave wlan0): Enslaving as an active interface with a down link
[  103.569710][ T8565] vlan2: entered allmulticast mode
[  103.571937][ T8565] veth1: entered allmulticast mode
[  103.621895][ T8571] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  103.661672][ T8574] netlink: 'syz.0.872': attribute type 21 has an invalid length.
[  103.665127][ T8574] netlink: 'syz.0.872': attribute type 5 has an invalid length.
[  103.668367][ T8574] netlink: 'syz.0.872': attribute type 6 has an invalid length.
[  104.847740][ T8622] syz_tun: entered allmulticast mode
[  104.881962][ T8622] dvmrp1: entered allmulticast mode
[  104.888025][ T8621] syz_tun: left allmulticast mode
[  105.378166][ T8648] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.419905][ T8648] bond5: (slave gretap1): making interface the new active one
[  105.424037][ T8648] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  105.444316][ T8652] __nla_validate_parse: 18 callbacks suppressed
[  105.444333][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'.
[  105.469824][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'.
[  105.471471][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'.
[  105.472939][ T8654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.903'.
[  105.591775][ T8667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.908'.
[  105.932014][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.915'.
[  106.157911][ T8699] batman_adv: batadv0: Adding interface: dummy0
[  106.160943][ T8699] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  106.175000][ T8699] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  106.407662][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[  106.407911][ T8712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.921'.
[  106.427893][ T8713] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  106.452593][ T8712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.921'.
[  106.490942][ T8712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.921'.
[  106.932151][ T8747] bond0: (slave rose0): Enslaving as an active interface with an up link
[  106.980032][ T8751] sch_tbf: burst 5 is lower than device lo mtu (65550) !
[  107.312530][ T8770] bond0: (slave wlan1): Releasing backup interface
[  107.322095][ T8770] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode
[  107.338420][ T8774] validate_nla: 5 callbacks suppressed
[  107.338431][ T8774] netlink: 'syz.0.931': attribute type 29 has an invalid length.
[  107.345919][ T8775] netlink: 'syz.0.931': attribute type 29 has an invalid length.
[  107.678423][ T8797] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.693871][ T8797] syz.0.939: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  107.707682][ T8797] CPU: 0 UID: 0 PID: 8797 Comm: syz.0.939 Not tainted syzkaller #0 PREEMPT(full) 
[  107.707702][ T8797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.707708][ T8797] Call Trace:
[  107.707714][ T8797]  <TASK>
[  107.707742][ T8797]  dump_stack_lvl+0x189/0x250
[  107.707764][ T8797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.707776][ T8797]  ? __pfx__printk+0x10/0x10
[  107.707797][ T8797]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  107.707808][ T8797]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  107.707820][ T8797]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  107.707833][ T8797]  warn_alloc+0x214/0x310
[  107.707851][ T8797]  ? stack_depot_save_flags+0x40/0x860
[  107.707869][ T8797]  ? __pfx_warn_alloc+0x10/0x10
[  107.707886][ T8797]  ? kasan_save_track+0x4f/0x80
[  107.707899][ T8797]  ? xskq_create+0x56/0x170
[  107.707908][ T8797]  ? xsk_init_queue+0xb0/0x110
[  107.707915][ T8797]  ? xsk_setsockopt+0x4dc/0x8d0
[  107.707926][ T8797]  ? do_sock_setsockopt+0x17c/0x1b0
[  107.707939][ T8797]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  107.707950][ T8797]  ? do_syscall_64+0xfa/0x3b0
[  107.707959][ T8797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.707972][ T8797]  __vmalloc_node_range_noprof+0x125/0x12f0
[  107.708006][ T8797]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  107.708023][ T8797]  ? __kasan_kmalloc+0x93/0xb0
[  107.708038][ T8797]  vmalloc_user_noprof+0xad/0xf0
[  107.708051][ T8797]  ? xskq_create+0xbf/0x170
[  107.708060][ T8797]  xskq_create+0xbf/0x170
[  107.708070][ T8797]  xsk_init_queue+0xb0/0x110
[  107.708079][ T8797]  xsk_setsockopt+0x4dc/0x8d0
[  107.708093][ T8797]  ? __pfx_xsk_setsockopt+0x10/0x10
[  107.708106][ T8797]  ? __pfx_aa_sk_perm+0x10/0x10
[  107.708121][ T8797]  ? aa_sock_opt_perm+0xff/0x1b0
[  107.708132][ T8797]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  107.708141][ T8797]  ? __pfx_xsk_setsockopt+0x10/0x10
[  107.708154][ T8797]  do_sock_setsockopt+0x17c/0x1b0
[  107.708167][ T8797]  __x64_sys_setsockopt+0x13f/0x1b0
[  107.708182][ T8797]  do_syscall_64+0xfa/0x3b0
[  107.708190][ T8797]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.708199][ T8797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.708207][ T8797]  ? exc_page_fault+0x9f/0xf0
[  107.708217][ T8797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.708225][ T8797] RIP: 0033:0x7f7ee5f8ec29
[  107.708235][ T8797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.708242][ T8797] RSP: 002b:00007f7ee6dda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  107.708254][ T8797] RAX: ffffffffffffffda RBX: 00007f7ee61d5fa0 RCX: 00007f7ee5f8ec29
[  107.708260][ T8797] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  107.708265][ T8797] RBP: 00007f7ee6011e41 R08: 0000000000000004 R09: 0000000000000000
[  107.708270][ T8797] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.708275][ T8797] R13: 00007f7ee61d6038 R14: 00007f7ee61d5fa0 R15: 00007ffe1073b118
[  107.708290][ T8797]  </TASK>
[  107.708294][ T8797] Mem-Info:
[  107.765277][ T8803] netlink: 'syz.0.939': attribute type 4 has an invalid length.
[  107.778549][ T8797] active_anon:5509 inactive_anon:0 isolated_anon:0
[  107.778549][ T8797]  active_file:1559 inactive_file:38262 isolated_file:0
[  107.778549][ T8797]  unevictable:1768 dirty:259 writeback:0
[  107.778549][ T8797]  slab_reclaimable:10278 slab_unreclaimable:95340
[  107.778549][ T8797]  mapped:18212 shmem:2445 pagetables:928
[  107.778549][ T8797]  sec_pagetables:0 bounce:0
[  107.778549][ T8797]  kernel_misc_reclaimable:0
[  107.778549][ T8797]  free:252793 free_pcp:17278 free_cma:0
[  107.842007][ T8797] Node 0 active_anon:10544kB inactive_anon:0kB active_file:4292kB inactive_file:133972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28112kB dirty:844kB writeback:0kB shmem:4756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9064kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.854958][ T8797] Node 1 active_anon:11628kB inactive_anon:0kB active_file:1944kB inactive_file:19076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44736kB dirty:192kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4556kB pagetables:1864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.867355][ T8797] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  107.880232][ T8797] lowmem_reserve[]: 0 811 811 811 811
[  107.882103][ T8797] Node 0 DMA32 free:248516kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10544kB inactive_anon:0kB active_file:4292kB inactive_file:133972kB unevictable:3536kB writepending:844kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:38320kB local_pcp:24684kB free_cma:0kB
[  107.893495][ T8797] lowmem_reserve[]: 0 0 0 0 0
[  107.895236][ T8797] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  107.905047][ T8797] lowmem_reserve[]: 0 0 854 854 854
[  107.906779][ T8797] Node 1 Normal free:287568kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11696kB inactive_anon:0kB active_file:1944kB inactive_file:19076kB unevictable:3536kB writepending:192kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30804kB local_pcp:20952kB free_cma:0kB
[  107.919229][ T8797] lowmem_reserve[]: 0 0 0 0 0
[  107.921327][ T8797] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  107.926683][ T8797] Node 0 DMA32: 1841*4kB (UME) 789*8kB (UME) 245*16kB (UME) 231*32kB (UM) 79*64kB (UM) 27*128kB (UME) 16*256kB (UM) 6*512kB (UM) 5*1024kB (ME) 5*2048kB (UME) 47*4096kB (M) = 248540kB
[  107.934533][ T8797] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  107.941390][ T8797] Node 1 Normal: 4*4kB (UME) 8*8kB (UME) 12*16kB (UE) 152*32kB (UE) 139*64kB (UME) 59*128kB (UM) 21*256kB (UM) 9*512kB (UME) 0*1024kB 1*2048kB (E) 62*4096kB (M) = 287568kB
[  107.957819][ T8797] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  107.961315][ T8797] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  107.964240][ T8797] 42266 total pagecache pages
[  107.966114][ T8797] 0 pages in swap cache
[  107.967520][ T8797] Free swap  = 124996kB
[  107.969787][ T8797] Total swap = 124996kB
[  107.971285][ T8797] 786301 pages RAM
[  107.972780][ T8797] 0 pages HighMem/MovableOnly
[  107.974394][ T8797] 241356 pages reserved
[  107.975931][ T8797] 0 pages cma reserved
[  108.041489][ T8813] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  108.045233][ T8813] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  108.335551][ T8838] netlink: 'syz.0.953': attribute type 1 has an invalid length.
[  108.384134][ T8844] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  108.412363][ T8841] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.415254][ T8841] bridge0: port 1(bond7) entered blocking state
[  108.419359][ T8841] bridge0: port 1(bond7) entered disabled state
[  108.421856][ T8841] bond7: entered allmulticast mode
[  108.424951][ T8841] bond7: entered promiscuous mode
[  108.910877][ T8908] netlink: 'syz.1.975': attribute type 10 has an invalid length.
[  109.562225][ T8955] netlink: 'syz.0.992': attribute type 5 has an invalid length.
[  109.574666][ T8955] netlink: 'syz.0.992': attribute type 10 has an invalid length.
[  109.585843][ T8955] 8021q: adding VLAN 0 to HW filter on device team0
[  109.593363][ T8955] team0: entered promiscuous mode
[  109.597074][ T8955] bond0: (slave team0): Enslaving as an active interface with an up link
[  109.898745][ T8980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.935069][ T8973] tipc: Disabling bearer <eth:syzkaller0>
[  110.082125][ T9001] netlink: 'syz.2.1008': attribute type 46 has an invalid length.
[  110.162647][ T9001] bridge0: port 1(veth23) entered blocking state
[  110.165400][ T9001] bridge0: port 1(veth23) entered disabled state
[  110.168008][ T9001] veth23: entered allmulticast mode
[  110.173710][ T9001] veth23: entered promiscuous mode
[  110.184405][ T9001] bridge0: port 2(veth0_to_bond) entered blocking state
[  110.187643][ T9001] bridge0: port 2(veth0_to_bond) entered disabled state
[  110.198006][ T9001] veth0_to_bond: entered allmulticast mode
[  110.202098][ T9001] veth0_to_bond: entered promiscuous mode
[  110.239391][ T7895] IPVS: starting estimator thread 0...
[  110.329374][ T9014] IPVS: using max 47 ests per chain, 112800 per kthread
[  110.363760][ T9027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.571634][ T9045] syzkaller1: entered promiscuous mode
[  110.574090][ T9045] syzkaller1: entered allmulticast mode
[  110.578569][ T9045] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  110.597733][ T9047] __nla_validate_parse: 53 callbacks suppressed
[  110.597752][ T9047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1021'.
[  110.612982][ T9047] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  110.658584][ T9049] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[  110.695836][ T9049] bond6: (slave vxcan9): The slave device specified does not support setting the MAC address
[  110.702873][ T9049] bond6: (slave vxcan9): Error -95 calling set_mac_address
[  110.742715][ T9053] gretap1: entered promiscuous mode
[  110.747890][ T9053] bond6: (slave gretap1): making interface the new active one
[  110.754229][ T9053] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  110.759634][ T9053] netem: incorrect ge model size
[  110.761880][ T9053] netem: change failed
[  111.033665][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  111.167214][ T9080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1033'.
[  111.171440][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  111.178092][ T9079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1033'.
[  111.363166][ T9085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1035'.
[  111.420929][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1036'.
[  111.426664][ T9089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1036'.
[  111.473911][ T9089] team0: Port device team_slave_0 removed
[  111.654337][ T9096] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1037'.
[  111.766595][ T9107] ..1: left allmulticast mode
[  111.768737][ T9107] hsr_slave_0: left allmulticast mode
[  111.776135][ T9107] hsr_slave_1: left allmulticast mode
[  111.796985][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'.
[  111.858035][ T9111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.899937][ T9107] bond0: left promiscuous mode
[  111.903618][ T9107] bond_slave_0: left promiscuous mode
[  111.906030][ T9107] bond_slave_1: left promiscuous mode
[  111.910651][ T9107] batadv0: left promiscuous mode
[  112.002057][ T9115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.087445][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.253834][ T9121] pim6reg1: entered promiscuous mode
[  113.256163][ T9121] pim6reg1: entered allmulticast mode
[  113.576850][ T9135] validate_nla: 6 callbacks suppressed
[  113.576860][ T9135] netlink: 'syz.2.1050': attribute type 1 has an invalid length.
[  113.740437][ T9154] netlink: 'syz.2.1056': attribute type 21 has an invalid length.
[  113.808708][ T9154] netlink: 'syz.2.1056': attribute type 5 has an invalid length.
[  113.812779][ T9154] netlink: 'syz.2.1056': attribute type 6 has an invalid length.
[  114.271940][ T9195] rdma_op ffff8880383cb9f0 conn xmit_rdma 0000000000000000
[  114.418270][ T9205] netlink: 'syz.2.1073': attribute type 1 has an invalid length.
[  114.573509][ T9220] netlink: 'syz.2.1078': attribute type 10 has an invalid length.
[  114.583455][ T9220] veth0_vlan: left promiscuous mode
[  114.586266][ T9220] veth0_vlan: entered promiscuous mode
[  114.590234][ T9220] team0: Device veth0_vlan failed to register rx_handler
[  114.713075][ T9230] netlink: 'syz.0.1080': attribute type 5 has an invalid length.
[  114.779395][ T9238] macsec2: entered promiscuous mode
[  114.782466][ T9238] macsec2: entered allmulticast mode
[  114.801752][ T9241] netlink: 'syz.2.1085': attribute type 2 has an invalid length.
[  114.819435][ T9243] netlink: 'syz.0.1086': attribute type 9 has an invalid length.
[  114.822551][ T9243] netlink: 'syz.0.1086': attribute type 6 has an invalid length.
[  115.408029][ T9303] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  115.603771][ T9312] __nla_validate_parse: 30 callbacks suppressed
[  115.603792][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'.
[  115.993528][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'.
[  115.997340][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'.
[  116.076115][ T9322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.463488][ T9344] !: renamed from dummy0
[  116.550188][ T9349] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1121'.
[  116.554121][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'.
[  116.562722][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1121'.
[  116.581223][ T9349] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1121'.
[  116.601368][ T9350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1119'.
[  116.825222][ T9357] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1123'.
[  116.875589][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'.
[  116.895098][ T9359] vlan0: entered allmulticast mode
[  116.897239][ T9359] bridge0: entered allmulticast mode
[  116.900183][ T9359] bridge4: port 1(vlan0) entered blocking state
[  116.902977][ T9359] bridge4: port 1(vlan0) entered disabled state
[  116.906505][ T9359] vlan0: entered promiscuous mode
[  116.908258][ T9359] bridge0: entered promiscuous mode
[  116.914447][ T9359] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  117.545119][ T9409] veth0_to_bond: entered allmulticast mode
[  117.615537][ T9409] bond0: (slave bond_slave_1): Releasing backup interface
[  117.691472][ T9408] veth0_to_bond: left allmulticast mode
[  118.463024][ T9457] bond10: entered promiscuous mode
[  118.465422][ T9457] bond10: entered allmulticast mode
[  118.468176][ T9457] 8021q: adding VLAN 0 to HW filter on device bond10
[  118.534873][ T9457] bond10 (unregistering): Released all slaves
[  118.767284][ T9483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.819947][ T9472] validate_nla: 4 callbacks suppressed
[  118.819957][ T9472] netlink: 'syz.1.1165': attribute type 10 has an invalid length.
[  118.907203][ T9488] bridge0: port 2(erspan0) entered blocking state
[  118.910357][ T9488] bridge0: port 2(erspan0) entered disabled state
[  118.914382][ T9488] erspan0: entered allmulticast mode
[  118.918684][ T9488] erspan0: entered promiscuous mode
[  118.921886][ T9496] netlink: 'syz.2.1171': attribute type 32 has an invalid length.
[  118.927553][ T9488] erspan0: left allmulticast mode
[  118.930423][ T9488] erspan0: left promiscuous mode
[  118.933400][ T9488] bridge0: port 2(erspan0) entered disabled state
[  120.635903][ T9545] __nla_validate_parse: 14 callbacks suppressed
[  120.635919][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'.
[  120.703673][ T9550] netlink: 'syz.2.1187': attribute type 8 has an invalid length.
[  120.707420][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'.
[  120.976258][ T9561] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1190'.
[  121.120776][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1192'.
[  121.137299][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'.
[  121.323708][ T9588] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1199'.
[  121.555310][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'.
[  121.651789][ T9607] netlink: 'syz.0.1203': attribute type 13 has an invalid length.
[  121.655286][ T9607] netlink: 'syz.0.1203': attribute type 17 has an invalid length.
[  121.667002][ T9607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.722503][ T9612] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  121.772400][ T9616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.827965][ T9616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.225701][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1208'.
[  122.316927][ T9630] netlink: 'syz.1.1210': attribute type 29 has an invalid length.
[  122.913734][ T9652] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1216'.
[  122.917701][ T9652] ..0: renamed from hsr0 (while UP)
[  122.922663][ T9652] ..0: entered allmulticast mode
[  122.924422][ T9652] hsr_slave_0: entered allmulticast mode
[  122.926614][ T9652] hsr_slave_1: entered allmulticast mode
[  122.929243][ T9652] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  123.424271][ T9685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1223'.
[  123.877146][ T9696] trusted_key: syz.0.1226 sent an empty control message without MSG_MORE.
[  123.889717][ T5847] Bluetooth: hci2: command tx timeout
[  123.908365][ T9696] bridge0: entered promiscuous mode
[  123.911724][ T9696] bridge0: entered allmulticast mode
[  123.921086][ T9696] team0: Port device bridge0 added
[  123.948127][ T9703] netlink: 'syz.2.1225': attribute type 13 has an invalid length.
[  123.955417][ T9703] netlink: 'syz.2.1225': attribute type 17 has an invalid length.
[  123.965771][ T9703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.065994][ T9703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.154440][ T9716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.155577][ T9715] ip_vti0: entered promiscuous mode
[  124.262369][ T9723] netlink: 'syz.1.1235': attribute type 1 has an invalid length.
[  124.461761][ T9738] netlink: 'syz.0.1240': attribute type 8 has an invalid length.
[  124.711307][ T9766] IPVS: length: 24 != 3642072
[  124.868594][ T9770] : renamed from bond_slave_0
[  124.875168][ T9770] sctp: [Deprecated]: syz.1.1251 (pid 9770) Use of int in max_burst socket option deprecated.
[  124.875168][ T9770] Use struct sctp_assoc_value instead
[  124.956649][ T9778] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.965237][ T9778] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.028290][ T9778] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.032570][ T9778] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.105154][ T9778] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.119215][ T9778] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.156656][ T9778] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.161044][ T9778] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.226986][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.231335][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.241073][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.243997][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.256083][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.259943][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.273133][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.276763][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.445664][ T9793] openvswitch: netlink: Actions may not be safe on all matching packets
[  125.614473][ T9805] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  125.706979][ T9810] __nla_validate_parse: 13 callbacks suppressed
[  125.706990][ T9810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1263'.
[  125.805644][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'.
[  125.885842][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1266'.
[  125.988091][ T9838] 8021q: adding VLAN 0 to HW filter on device bond8
[  125.993499][ T9843] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1273'.
[  126.033443][ T9846] smc: net device bond0 applied user defined pnetid SYZ2
[  126.036179][ T9846] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[  126.041604][ T9846] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1275'.
[  126.067234][ T9848] tipc: Started in network mode
[  126.073115][ T9848] tipc: Node identity 0665f2cae963, cluster identity 4711
[  126.083885][ T9848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.087824][ T9848] syzkaller0: entered promiscuous mode
[  126.093780][ T9848] syzkaller0: entered allmulticast mode
[  126.159935][ T9848] tipc: Resetting bearer <eth:syzkaller0>
[  126.175053][ T9845] tipc: Resetting bearer <eth:syzkaller0>
[  126.189928][ T9845] tipc: Disabling bearer <eth:syzkaller0>
[  126.198610][ T9864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.201726][ T9864] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  126.204386][ T9864] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  126.261760][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1280'.
[  126.301352][ T9873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.304108][ T9873] syzkaller0: entered promiscuous mode
[  126.306059][ T9873] syzkaller0: entered allmulticast mode
[  126.356130][ T9873] tipc: Resetting bearer <eth:syzkaller0>
[  126.363118][ T9879] netlink: 'syz.2.1283': attribute type 20 has an invalid length.
[  126.363190][ T9881] netlink: 'syz.2.1283': attribute type 20 has an invalid length.
[  126.375239][ T9870] tipc: Resetting bearer <eth:syzkaller0>
[  126.388670][ T9870] tipc: Disabling bearer <eth:syzkaller0>
[  127.209520][   T24] tipc: Node number set to 3808958994
[  127.290527][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'.
[  127.317251][ T9896] geneve0: entered promiscuous mode
[  127.408064][ T9908] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1291'.
[  127.411368][ T9909] netlink: 'syz.1.1292': attribute type 5 has an invalid length.
[  127.411417][ T9909] netlink: 'syz.1.1292': attribute type 5 has an invalid length.
[  127.417795][ T9906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1290'.
[  127.449626][ T9906] netlink: 'syz.0.1290': attribute type 4 has an invalid length.
[  127.538399][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'.
[  127.557086][ T9922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.140168][ T9953] macsec1: entered allmulticast mode
[  128.143150][ T9953] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[  128.366353][ T9957] mac80211_hwsim hwsim18 wlan1 (unregistering): left allmulticast mode
[  128.421553][ T9959] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  128.525912][ T9967] ..0: renamed from ..1
[  128.535743][ T9967] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  128.541527][ T9967] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.546105][ T9967] ..0: entered allmulticast mode
[  128.559255][ T9967] hsr_slave_0: entered allmulticast mode
[  128.562068][ T9967] hsr_slave_1: entered allmulticast mode
[  128.569970][ T9967] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  128.689228][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.714241][ T9983] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  128.818652][ T9989] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.041529][T10010] netlink: 'syz.1.1329': attribute type 21 has an invalid length.
[  129.044463][T10010] netlink: 'syz.1.1329': attribute type 1 has an invalid length.
[  129.056481][T10012] netlink: 'syz.2.1330': attribute type 21 has an invalid length.
[  129.061287][T10012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  129.063940][T10012] IPv6: NLM_F_CREATE should be set when creating new route
[  129.066389][T10012] IPv6: NLM_F_CREATE should be set when creating new route
[  129.068854][T10012] IPv6: NLM_F_CREATE should be set when creating new route
[  129.092785][T10014] netlink: 'syz.1.1331': attribute type 10 has an invalid length.
[  129.150557][T10020] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  129.155494][T10020] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  129.338051][T10038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.342205][T10038] syzkaller0: entered promiscuous mode
[  129.344466][T10038] syzkaller0: entered allmulticast mode
[  129.349802][T10038] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  129.382228][T10038] tipc: Resetting bearer <eth:syzkaller0>
[  129.386831][T10037] tipc: Resetting bearer <eth:syzkaller0>
[  129.406928][T10037] tipc: Disabling bearer <eth:syzkaller0>
[  129.567218][T10068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.672104][T10081] netlink: 'syz.1.1350': attribute type 6 has an invalid length.
[  129.857975][T10093] netlink: 'syz.1.1355': attribute type 2 has an invalid length.
[  129.863669][T10093] netlink: 'syz.1.1355': attribute type 2 has an invalid length.
[  129.871660][T10093] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  129.875073][T10093] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  129.918327][T10095] bond7: left allmulticast mode
[  129.920974][T10095] bond7: left promiscuous mode
[  129.922849][T10095] bridge0: port 1(bond7) entered disabled state
[  129.934177][T10095] bond1: (slave bridge0): Releasing backup interface
[  129.936657][T10095] bond1: (slave bridge0): the permanent HWaddr of slave - 92:27:d3:a7:7a:8b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  129.943858][T10095] bond1: (slave bridge1): making interface the new active one
[  129.958070][T10095] vlan0 (unregistering): left promiscuous mode
[  129.962638][T10095] bridge0 (unregistering): left promiscuous mode
[  129.965386][T10095] bridge4: port 1(vlan0) entered disabled state
[  130.140612][T10100] netlink: 'syz.2.1358': attribute type 6 has an invalid length.
[  130.150279][T10100] netlink: 'syz.2.1358': attribute type 12 has an invalid length.
[  130.413193][T10120] xt_socket: unknown flags 0x50
[  130.610996][T10126] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  130.702923][T10115] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  130.936950][T10145] __nla_validate_parse: 26 callbacks suppressed
[  130.936966][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  130.963860][T10145] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1373'.
[  131.355990][T10170] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  131.491047][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'.
[  131.640663][T10193] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1388'.
[  131.645532][T10193] netlink: zone id is out of range
[  131.647826][T10193] netlink: zone id is out of range
[  131.653258][T10193] netlink: zone id is out of range
[  131.655729][T10193] netlink: zone id is out of range
[  131.754569][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'.
[  131.781335][T10198] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1387'.
[  131.793124][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'.
[  131.894060][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'.
[  131.971556][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1392'.
[  132.182063][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'.
[  132.190901][T10225] ip_vti0: left promiscuous mode
[  132.242121][T10227] delete_channel: no stack
[  132.400847][T10240] ..1: renamed from ..0 (while UP)
[  132.526606][T10260] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000
[  132.533025][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.541746][T10261] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000
[  132.643764][T10277] veth0_to_bridge: entered promiscuous mode
[  132.689568][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  132.847792][T10293] syz.0.1420 uses old SIOCAX25GETINFO
[  133.016953][T10320] ipvlan0: entered promiscuous mode
[  133.067104][T10327] net_ratelimit: 10 callbacks suppressed
[  133.067116][T10327] openvswitch: netlink: Missing key (keys=40, expected=80)
[  133.106341][T10328] veth0_to_bond: left allmulticast mode
[  133.108521][T10328] veth0_to_bond: left promiscuous mode
[  133.113496][T10328] bridge0: port 2(veth0_to_bond) entered disabled state
[  133.120768][T10328] veth23: left allmulticast mode
[  133.122648][T10328] veth23: left promiscuous mode
[  133.128770][T10328] bridge0: port 1(veth23) entered disabled state
[  133.255795][T10331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.260907][T10331] syzkaller0: entered promiscuous mode
[  133.263406][T10331] syzkaller0: entered allmulticast mode
[  133.290171][T10331] tipc: Resetting bearer <eth:syzkaller0>
[  133.299975][T10330] tipc: Resetting bearer <eth:syzkaller0>
[  133.313205][T10330] tipc: Disabling bearer <eth:syzkaller0>
[  133.730003][T10379] netlink: 'syz.2.1444': attribute type 11 has an invalid length.
[  134.532441][T10425] nbd: nbd2 already in use
[  134.694676][T10446] team_slave_1: entered promiscuous mode
[  134.696930][T10446] vlan2: entered promiscuous mode
[  134.698697][T10446] team0: entered promiscuous mode
[  134.702079][T10446] team0: Device vlan2 is already an upper device of the team interface
[  134.827012][T10454] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.831700][T10454] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.897487][T10454] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.902529][T10454] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.913419][T10464] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  134.927444][T10464] pim6reg: left allmulticast mode
[  134.958383][T10454] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.963106][T10454] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.986104][T10467] bond0: entered promiscuous mode
[  134.987791][T10467] : entered promiscuous mode
[  134.990382][T10467] batadv0: entered promiscuous mode
[  134.992678][T10467] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  134.995847][T10467] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  135.001780][T10467] 8021q: adding VLAN 0 to HW filter on device hsr0
[  135.077295][T10454] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.081848][T10454] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.207422][ T5884] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.211722][ T5884] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.247984][ T5882] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.253096][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.273268][ T5882] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.276910][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.328286][ T5884] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.335304][ T5884] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.648399][T10505] validate_nla: 7 callbacks suppressed
[  135.648416][T10505] netlink: 'syz.0.1482': attribute type 9 has an invalid length.
[  135.657034][T10505] netlink: 'syz.0.1482': attribute type 7 has an invalid length.
[  135.663716][T10505] netlink: 'syz.0.1482': attribute type 8 has an invalid length.
[  135.988681][T10525] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.993078][T10525] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.002723][T10527] __nla_validate_parse: 44 callbacks suppressed
[  136.002734][T10527] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1490'.
[  136.033144][T10525] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.041158][T10525] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.069259][T10535] netlink: 'syz.1.1490': attribute type 1 has an invalid length.
[  136.073623][T10525] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.077022][T10525] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.095166][T10538] sctp: [Deprecated]: syz.0.1495 (pid 10538) Use of int in max_burst socket option.
[  136.095166][T10538] Use struct sctp_assoc_value instead
[  136.101944][T10537] sctp: [Deprecated]: syz.0.1495 (pid 10537) Use of int in max_burst socket option.
[  136.101944][T10537] Use struct sctp_assoc_value instead
[  136.122735][T10525] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.126154][T10525] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.963608][T10546] team0: Device ipip0 is of different type
[  137.002716][T10546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.006442][T10546] syzkaller0: entered promiscuous mode
[  137.008552][T10546] syzkaller0: entered allmulticast mode
[  137.012606][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1497'.
[  137.024963][T10546] tipc: Resetting bearer <eth:syzkaller0>
[  137.030789][T10545] tipc: Resetting bearer <eth:syzkaller0>
[  137.042808][T10545] tipc: Disabling bearer <eth:syzkaller0>
[  137.145823][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1500'.
[  137.267725][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.306216][T10564] sctp: [Deprecated]: syz.1.1501 (pid 10564) Use of int in maxseg socket option.
[  137.306216][T10564] Use struct sctp_assoc_value instead
[  137.324605][T10561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.350109][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'.
[  138.061553][T10569] vti1: entered promiscuous mode
[  138.183459][T10576] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.259630][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'.
[  138.264026][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'.
[  138.354159][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'.
[  138.385513][T10584] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  138.391471][T10584] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  138.432156][T10586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1509'.
[  138.504737][T10588] tipc: New replicast peer: 255.255.255.255
[  138.507715][T10588] tipc: Enabled bearer <udp:syz2>, priority 10
[  138.670776][T10603] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.733560][T10612] netlink: 'syz.1.1519': attribute type 1 has an invalid length.
[  138.756779][T10612] 8021q: adding VLAN 0 to HW filter on device bond11
[  138.780928][T10612] 8021q: adding VLAN 0 to HW filter on device batadv1
[  138.784849][T10612] bond11: (slave batadv1): making interface the new active one
[  138.788392][T10612] bond11: (slave batadv1): Enslaving as an active interface with an up link
[  138.796796][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'.
[  138.847764][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'.
[  138.875921][T10612] bond11 (unregistering): (slave batadv1): Releasing active interface
[  138.881997][T10612] bond11 (unregistering): Released all slaves
[  139.021403][T10628] netlink: 'syz.1.1525': attribute type 10 has an invalid length.
[  139.060432][ T5884] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.063801][ T5884] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.069986][ T5884] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.075898][ T5884] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.084833][ T5884] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.088376][ T5884] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.104087][ T5884] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.107494][ T5884] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.266610][T10654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.271805][T10647] syzkaller0: entered promiscuous mode
[  139.274014][T10647] syzkaller0: entered allmulticast mode
[  139.336103][T10646] tipc: Resetting bearer <eth:syzkaller0>
[  139.354861][T10646] tipc: Disabling bearer <eth:syzkaller0>
[  139.593020][T10668] ..0: renamed from hsr0
[  139.596756][T10668] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  139.601641][T10668] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  139.605874][T10668] ..0: entered allmulticast mode
[  139.607893][T10668] hsr_slave_0: entered allmulticast mode
[  139.610774][T10668] hsr_slave_1: entered allmulticast mode
[  139.614149][T10668] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  139.820532][T10681] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  139.823993][T10681] netlink: 'syz.0.1538': attribute type 11 has an invalid length.
[  140.339028][   T24] tipc: Node number set to 4010209994
[  140.701684][T10711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.998485][T10726] netlink: 'syz.0.1553': attribute type 3 has an invalid length.
[  141.003528][T10725] netlink: 'syz.0.1553': attribute type 3 has an invalid length.
[  141.459071][T10740] __nla_validate_parse: 43 callbacks suppressed
[  141.459087][T10740] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1556'.
[  141.537764][T10742] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  141.545189][T10742] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  141.595424][T10744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1558'.
[  141.636647][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1559'.
[  141.755396][T10752] netlink: 'syz.0.1560': attribute type 13 has an invalid length.
[  141.759450][T10752] netlink: 'syz.0.1560': attribute type 17 has an invalid length.
[  141.792476][T10752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.908519][T10752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.976102][T10751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.014368][T10757] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1561'.
[  142.201922][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'.
[  142.477527][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'.
[  142.517206][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1566'.
[  142.520973][T10773] netlink: 'syz.0.1567': attribute type 1 has an invalid length.
[  142.569233][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'.
[  142.589625][T10778] team1: entered promiscuous mode
[  142.591762][T10778] team1: entered allmulticast mode
[  142.632157][T10782] syzkaller1: entered promiscuous mode
[  142.634170][T10782] syzkaller1: entered allmulticast mode
[  142.642678][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'.
[  142.708288][T10786] netlink: 'syz.1.1572': attribute type 10 has an invalid length.
[  142.789334][T10790] IPVS: set_ctl: invalid protocol: 59 172.20.20.15:20001
[  142.796218][T10793] IPVS: set_ctl: invalid protocol: 59 172.20.20.15:20001
[  142.899722][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'.
[  142.931101][T10804] netlink: 'syz.1.1579': attribute type 1 has an invalid length.
[  142.937696][T10804] netlink: 'syz.1.1579': attribute type 4 has an invalid length.
[  143.031338][T10811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.248785][T10823] netlink: 'syz.2.1584': attribute type 4 has an invalid length.
[  143.544169][T10849] netlink: 'syz.1.1595': attribute type 6 has an invalid length.
[  143.672185][T10860] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.718784][T10862] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  143.722835][T10862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.084004][ T5237] Bluetooth: hci2: link tx timeout
[  144.086877][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.664085][T10919] 8021q: adding VLAN 0 to HW filter on device bond8
[  144.683405][T10919] bond8: (slave geneve0): making interface the new active one
[  144.688589][T10919] bond8: (slave geneve0): Enslaving as an active interface with an up link
[  144.700019][T10919] bond8: entered promiscuous mode
[  144.702370][T10919] geneve0: entered promiscuous mode
[  144.732919][T10919] syz.2.1617 (10919) used greatest stack depth: 17688 bytes left
[  144.935654][T10939] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  144.955440][T10946] NCSI netlink: No device for ifindex 0
[  145.255381][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  145.267876][T10977] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.495115][T10981] team0: Port device bridge0 removed
[  146.054178][T11008] validate_nla: 6 callbacks suppressed
[  146.054188][T11008] netlink: 'syz.2.1640': attribute type 12 has an invalid length.
[  146.060714][T11009] netlink: 'syz.2.1640': attribute type 12 has an invalid length.
[  146.162059][T11013] tipc: Resetting bearer <eth:syzkaller0>
[  146.226022][T11013] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  146.245453][T11022] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  146.268590][T11030] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.295240][T11030] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  146.383821][T11036] openvswitch: netlink: Flow actions attr not present in new flow.
[  146.505778][T11045] __nla_validate_parse: 22 callbacks suppressed
[  146.505796][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'.
[  146.511717][T11045] veth1: entered promiscuous mode
[  146.513906][T11045] netlink: 'syz.0.1650': attribute type 8 has an invalid length.
[  146.516709][T11045] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  146.656063][T11053] team0: No ports can be present during mode change
[  146.830963][T11065] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  147.037368][T11094] netlink: 'syz.2.1667': attribute type 58 has an invalid length.
[  147.042567][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1667'.
[  147.045609][T11096] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1668'.
[  147.122489][T11101] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1669'.
[  147.224782][T11112] openvswitch: netlink: Flow actions attr not present in new flow.
[  147.286363][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'.
[  147.307796][T11117] netlink: 'syz.1.1675': attribute type 1 has an invalid length.
[  147.329139][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  147.334451][T11117] 8021q: adding VLAN 0 to HW filter on device bond11
[  147.363491][T11117] bond11: (slave veth27): Enslaving as an active interface with a down link
[  147.384323][T11117] 8021q: adding VLAN 0 to HW filter on device batadv2
[  147.387963][T11117] bond11: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  147.421879][T11125] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1675'.
[  147.584060][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'.
[  147.627263][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'.
[  147.854112][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'.
[  147.882525][T11161] bond12: entered promiscuous mode
[  147.885320][T11161] 8021q: adding VLAN 0 to HW filter on device bond12
[  147.898080][T11161] 8021q: adding VLAN 0 to HW filter on device bond12
[  147.901459][T11161] bond12: (slave vcan1): The slave device specified does not support setting the MAC address
[  147.907052][T11161] bond12: (slave vcan1): Error -95 calling set_mac_address
[  148.120475][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'.
[  148.155795][T11174] netlink: 'syz.0.1690': attribute type 22 has an invalid length.
[  148.159638][T11174] netlink: 'syz.0.1690': attribute type 22 has an invalid length.
[  148.889391][T11196] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.966152][T11202] netlink: 'syz.2.1699': attribute type 5 has an invalid length.
[  148.977315][T11206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.032605][T11208] netlink: 'syz.2.1701': attribute type 27 has an invalid length.
[  149.209583][T11208] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.226663][T11208] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.260918][T11208] ..0: left allmulticast mode
[  149.262831][T11208] hsr_slave_0: left allmulticast mode
[  149.266155][T11208] hsr_slave_1: left allmulticast mode
[  149.343688][T11208] bond0: left promiscuous mode
[  149.345390][T11208] bond1: left promiscuous mode
[  149.347072][T11208] bond0: left allmulticast mode
[  149.349006][T11208] bond1: left allmulticast mode
[  149.369138][T11208] vlan1: left promiscuous mode
[  149.370801][T11208] gretap0: left promiscuous mode
[  149.372597][T11208] bond4: left promiscuous mode
[  149.374286][T11208] bond4: left allmulticast mode
[  149.376504][T11208] bridge8: left promiscuous mode
[  149.378378][T11208] bridge8: left allmulticast mode
[  149.388631][T11208] gretap1: left promiscuous mode
[  149.396338][T11208] bond8: left promiscuous mode
[  149.398189][T11208] geneve0: left promiscuous mode
[  149.435439][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.438587][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.442176][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.449018][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.459233][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.462369][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.469237][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.479366][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.502431][T11220] netlink: 'syz.0.1705': attribute type 21 has an invalid length.
[  149.565211][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.569141][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.577690][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.582357][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.618042][ T7898] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.621721][ T7898] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.624877][ T7898] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.631702][ T7898] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  149.817041][T11241] bond10: entered promiscuous mode
[  149.984615][T11254] sit0: entered promiscuous mode
[  150.461444][T11271] vlan2: entered promiscuous mode
[  150.463342][T11271] geneve1: entered promiscuous mode
[  150.465614][T11271] vlan2: entered allmulticast mode
[  150.467983][T11271] geneve1: entered allmulticast mode
[  150.535744][T11271] xfrm1: entered promiscuous mode
[  150.537995][T11271] xfrm1: entered allmulticast mode
[  151.562669][T11315] __nla_validate_parse: 25 callbacks suppressed
[  151.562684][T11315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1732'.
[  151.665342][T11315] vlan2: entered promiscuous mode
[  151.667606][T11315] gretap0: entered promiscuous mode
[  151.682645][T11318] validate_nla: 2 callbacks suppressed
[  151.682655][T11318] netlink: 'syz.1.1734': attribute type 12 has an invalid length.
[  151.687335][T11318] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1734'.
[  151.787715][T11321] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1735'.
[  151.791291][T11321] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  151.922490][T11327] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1737'.
[  152.003275][T11335] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1739'.
[  152.010550][T11337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'.
[  152.015345][T11337] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  152.162540][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'.
[  152.178531][T11347] syzkaller0: entered promiscuous mode
[  152.189675][T11347] syzkaller0: entered allmulticast mode
[  152.351152][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'.
[  152.409647][T11359] syzkaller0: entered promiscuous mode
[  152.412085][T11359] syzkaller0: entered allmulticast mode
[  152.502004][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1751'.
[  152.505771][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1750'.
[  152.526942][ T7898] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  152.530571][ T7898] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  152.534382][ T7898] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  152.539349][ T7898] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  152.631993][T11382] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  152.635408][T11382] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  153.054026][T11403] netlink: 'syz.0.1760': attribute type 1 has an invalid length.
[  153.516282][T11403] 8021q: adding VLAN 0 to HW filter on device bond11
[  154.502914][T11424] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  154.573867][T11435] lo: entered allmulticast mode
[  154.575886][T11435] lo: left allmulticast mode
[  154.773792][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.785499][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.794607][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.805940][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.913850][T11452] netlink: 'syz.2.1776': attribute type 4 has an invalid length.
[  155.035542][T11462] netlink: 'syz.2.1779': attribute type 2 has an invalid length.
[  155.045124][T11462] : entered promiscuous mode
[  155.145947][T11476] netlink: 'syz.2.1784': attribute type 4 has an invalid length.
[  155.552451][T11496] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  155.601776][T11496] team0: Mode changed to "activebackup"
[  156.593850][T11569] __nla_validate_parse: 19 callbacks suppressed
[  156.593868][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'.
[  156.617164][T11569] team1: entered promiscuous mode
[  156.619094][T11569] team1: entered allmulticast mode
[  156.649980][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'.
[  156.654509][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1812'.
[  156.658133][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1812'.
[  156.704090][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1814'.
[  157.196851][T11599] netlink: 'syz.1.1820': attribute type 13 has an invalid length.
[  157.205781][T11599] netlink: 'syz.1.1820': attribute type 17 has an invalid length.
[  157.230866][T11599] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.235179][T11599] 8021q: adding VLAN 0 to HW filter on device team0
[  157.238766][T11599] batman_adv: batadv0: Interface activated: 0!
[  157.242592][T11599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.250411][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  157.254489][    T9] syz1: Port: 1 Link ACTIVE
[  157.331406][T11600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.386659][T11600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.596318][T11604] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1821'.
[  157.634725][T11606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1822'.
[  157.717786][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'.
[  158.813814][T11646] xt_time: invalid argument - start or stop time greater than 23:59:59
[  158.924634][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'.
[  158.932548][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1832'.
[  158.987201][T11652] netlink: 'syz.0.1834': attribute type 8 has an invalid length.
[  159.066148][T11675] netlink: 'syz.1.1838': attribute type 10 has an invalid length.
[  159.113100][T11675] batman_adv: batadv0: Interface deactivated: 0!
[  159.135780][T11675] tipc: Resetting bearer <eth:syzkaller0>
[  159.153078][ T5884] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.159219][ T7895] syz1: Port: 1 Link DOWN
[  159.162145][ T5884] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.165015][ T5884] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.172518][ T5884] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.323562][T11699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.326692][T11699] syzkaller0: entered promiscuous mode
[  159.328719][T11699] syzkaller0: entered allmulticast mode
[  159.344356][T11699] tipc: Resetting bearer <eth:syzkaller0>
[  159.347721][T11698] tipc: Resetting bearer <eth:syzkaller0>
[  159.355821][T11698] tipc: Disabling bearer <eth:syzkaller0>
[  159.438338][T11704] netlink: 'syz.0.1848': attribute type 13 has an invalid length.
[  159.444723][T11704] netlink: 'syz.0.1848': attribute type 17 has an invalid length.
[  159.454106][T11704] gretap0: refused to change device tx_queue_len
[  159.462510][T11704] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.480064][T11704] dvmrp0: entered allmulticast mode
[  159.482911][T11706] lo speed is unknown, defaulting to 1000
[  159.485697][T11706] lo speed is unknown, defaulting to 1000
[  159.490417][T11706] lo speed is unknown, defaulting to 1000
[  159.498762][T11706] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  159.511218][T11706] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  159.516416][T11708] netlink: 'syz.0.1850': attribute type 10 has an invalid length.
[  159.520374][T11708] ..0: left allmulticast mode
[  159.522354][T11708] hsr_slave_0: left allmulticast mode
[  159.524974][T11708] hsr_slave_1: left allmulticast mode
[  159.527001][T11708] ..0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  159.534828][T11706] lo speed is unknown, defaulting to 1000
[  159.537755][T11706] lo speed is unknown, defaulting to 1000
[  159.542633][T11706] lo speed is unknown, defaulting to 1000
[  159.569710][T11706] netlink: 'syz.2.1849': attribute type 4 has an invalid length.
[  159.612495][T11708] bridge5: entered promiscuous mode
[  159.614451][T11708] bridge5: entered allmulticast mode
[  159.883598][T11732] wg1: entered promiscuous mode
[  159.885828][T11732] wg1: entered allmulticast mode
[  160.106414][T11744] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  160.262804][T11749] IPVS: length: 209 != 24
[  160.265991][T11749] netlink: 'syz.0.1868': attribute type 1 has an invalid length.
[  160.272662][T11749] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  160.277041][T11749] bond2: (slave vcan1): Error -95 calling set_mac_address
[  160.324965][T11749] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  160.329894][T11749] bond2: (slave vcan1): Error -95 calling set_mac_address
[  160.550308][T11760] ieee802154 phy0 wpan0: encryption failed: -22
[  160.687488][T11770] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  160.849434][T11782] veth35: entered promiscuous mode
[  160.895425][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.898083][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.274977][T11822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.278519][T11822] syzkaller0: entered promiscuous mode
[  161.280792][T11822] syzkaller0: entered allmulticast mode
[  161.294738][T11822] tipc: Resetting bearer <eth:syzkaller0>
[  161.298828][T11821] tipc: Resetting bearer <eth:syzkaller0>
[  161.311498][T11821] tipc: Disabling bearer <eth:syzkaller0>
[  161.468662][T11831] openvswitch: netlink: IPv4 tun info is not correct
[  161.513675][T11835] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  161.666432][T11846] __nla_validate_parse: 51 callbacks suppressed
[  161.666448][T11846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1901'.
[  161.715021][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'.
[  161.719544][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'.
[  161.724893][T11848] netlink: 'syz.2.1902': attribute type 1 has an invalid length.
[  161.727899][T11848] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1902'.
[  161.825158][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1903'.
[  162.392243][T11856] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1906'.
[  162.451294][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1904'.
[  162.517455][T11870] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  162.563066][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1904'.
[  162.572850][T11870] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  162.727146][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'.
[  162.727569][T11878] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1911'.
[  162.739952][T11880] netlink: 'syz.0.1912': attribute type 11 has an invalid length.
[  163.023059][T11888] netlink: 'syz.2.1915': attribute type 10 has an invalid length.
[  163.238086][T11900] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  163.403492][T11912] netlink: 'syz.1.1921': attribute type 1 has an invalid length.
[  163.632650][T11931] netlink: 'syz.1.1927': attribute type 1 has an invalid length.
[  163.658014][T11931] 8021q: adding VLAN 0 to HW filter on device bond13
[  163.667228][T11931] bond13: (slave geneve2): making interface the new active one
[  163.670942][T11931] bond13: (slave geneve2): Enslaving as an active interface with an up link
[  163.673880][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.676761][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.697754][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.712168][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.727091][T11941] netlink: 'syz.1.1930': attribute type 9 has an invalid length.
[  163.833004][T11935] lo speed is unknown, defaulting to 1000
[  164.032518][T11964] tipc: Resetting bearer <eth:syzkaller0>
[  164.129219][T11971] netlink: 'syz.2.1940': attribute type 8 has an invalid length.
[  164.881397][T11986] : entered promiscuous mode
[  165.033508][T11988] lo speed is unknown, defaulting to 1000
[  165.122016][ T8241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.124651][ T8241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.163973][T11992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  165.167816][T11992] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  165.622197][T12009] netlink: 'syz.1.1950': attribute type 2 has an invalid length.
[  165.633744][T12009] k*: entered promiscuous mode
[  165.654592][T12009] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.657608][T12009] 8021q: adding VLAN 0 to HW filter on device team0
[  165.662259][T12009] batman_adv: batadv0: Interface activated: 0!
[  165.666116][T12009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.671754][   T24] syz1: Port: 1 Link ACTIVE
[  165.699770][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  165.743858][T12015] geneve3: entered promiscuous mode
[  165.746575][ T7898] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  165.749473][ T7898] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  165.752477][ T7898] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  165.755190][ T7898] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  165.904387][T12030] netlink: 'syz.0.1957': attribute type 10 has an invalid length.
[  165.908794][T12030] dummy0: entered promiscuous mode
[  165.914437][T12030] team0: Port device dummy0 added
[  166.011411][T12042] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  166.113031][T12053] netlink: 'syz.0.1965': attribute type 1 has an invalid length.
[  166.127906][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  166.144359][T12053] 8021q: adding VLAN 0 to HW filter on device bond13
[  166.169813][T12053] 8021q: adding VLAN 0 to HW filter on device bond13
[  166.173201][T12053] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  166.180492][T12053] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  166.213046][T12060] netlink: 'syz.2.1967': attribute type 2 has an invalid length.
[  166.217346][T12059] veth39: entered promiscuous mode
[  166.223454][T12059] bond13: (slave veth39): Enslaving as an active interface with a down link
[  166.343852][    C1] ==================================================================
[  166.346612][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  166.349569][    C1] Write of size 8 at addr ffff88811af72d30 by task swapper/1/0
[  166.352747][    C1] 
[  166.354093][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  166.354104][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.354110][    C1] Call Trace:
[  166.354114][    C1]  <IRQ>
[  166.354118][    C1]  dump_stack_lvl+0x189/0x250
[  166.354132][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  166.354141][    C1]  ? rcu_is_watching+0x15/0xb0
[  166.354148][    C1]  ? __kasan_check_byte+0x12/0x40
[  166.354159][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.354166][    C1]  ? rcu_is_watching+0x15/0xb0
[  166.354172][    C1]  ? lock_release+0x4b/0x3e0
[  166.354182][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  166.354189][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  166.354197][    C1]  print_report+0xca/0x240
[  166.354459][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  166.354469][    C1]  kasan_report+0x118/0x150
[  166.354478][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  166.354487][    C1]  __xfrm_state_delete+0x696/0xca0
[  166.354497][    C1]  xfrm_timer_handler+0x18f/0xa00
[  166.354507][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  166.354514][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  166.354522][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.354529][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  166.354535][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.354542][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  166.354549][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  166.354557][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  166.354567][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  166.354574][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  166.354582][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  166.354590][    C1]  handle_softirqs+0x286/0x870
[  166.354597][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  166.354603][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  166.354610][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  166.354619][    C1]  __irq_exit_rcu+0xca/0x1f0
[  166.354625][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  166.354632][    C1]  irq_exit_rcu+0x9/0x30
[  166.354638][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  166.354645][    C1]  </IRQ>
[  166.354647][    C1]  <TASK>
[  166.354650][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  166.354659][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  166.354666][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  166.354673][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  166.354681][    C1] RAX: 3389c5d04a438600 RBX: ffffffff819683f8 RCX: 3389c5d04a438600
[  166.354689][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba1da RDI: ffffffff8be33f00
[  166.354696][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  166.354703][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38f30
[  166.354710][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  166.354717][    C1]  ? do_idle+0x1e8/0x510
[  166.354731][    C1]  default_idle+0x13/0x20
[  166.354745][    C1]  default_idle_call+0x74/0xb0
[  166.354757][    C1]  do_idle+0x1e8/0x510
[  166.354768][    C1]  ? __pfx_do_idle+0x10/0x10
[  166.354779][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.354793][    C1]  cpu_startup_entry+0x44/0x60
[  166.354805][    C1]  start_secondary+0x101/0x110
[  166.354821][    C1]  common_startup_64+0x13e/0x147
[  166.354833][    C1]  </TASK>
[  166.354836][    C1] 
[  166.477726][    C1] Allocated by task 11165:
[  166.479467][    C1]  kasan_save_track+0x3e/0x80
[  166.481276][    C1]  __kasan_slab_alloc+0x6c/0x80
[  166.483116][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  166.485141][    C1]  xfrm_state_alloc+0x24/0x2f0
[  166.486919][    C1]  xfrm_add_sa+0x17d1/0x4070
[  166.488683][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  166.490599][    C1]  netlink_rcv_skb+0x208/0x470
[  166.492412][    C1]  xfrm_netlink_rcv+0x79/0x90
[  166.494190][    C1]  netlink_unicast+0x82f/0x9e0
[  166.495946][    C1]  netlink_sendmsg+0x805/0xb30
[  166.497751][    C1]  __sock_sendmsg+0x21c/0x270
[  166.499581][    C1]  ____sys_sendmsg+0x505/0x830
[  166.501407][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  166.503191][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  166.505056][    C1]  do_syscall_64+0xfa/0x3b0
[  166.506752][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.509000][    C1] 
[  166.509973][    C1] Freed by task 24:
[  166.511425][    C1]  kasan_save_track+0x3e/0x80
[  166.513213][    C1]  kasan_save_free_info+0x46/0x50
[  166.515055][    C1]  __kasan_slab_free+0x5b/0x80
[  166.516849][    C1]  kmem_cache_free+0x18f/0x400
[  166.518652][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  166.520583][    C1]  process_scheduled_works+0xae1/0x17b0
[  166.522669][    C1]  worker_thread+0x8a0/0xda0
[  166.524421][    C1]  kthread+0x711/0x8a0
[  166.525950][    C1]  ret_from_fork+0x439/0x7d0
[  166.527660][    C1]  ret_from_fork_asm+0x1a/0x30
[  166.529535][    C1] 
[  166.530459][    C1] The buggy address belongs to the object at ffff88811af72d00
[  166.530459][    C1]  which belongs to the cache xfrm_state of size 928
[  166.535514][    C1] The buggy address is located 48 bytes inside of
[  166.535514][    C1]  freed 928-byte region [ffff88811af72d00, ffff88811af730a0)
[  166.540570][    C1] 
[  166.541512][    C1] The buggy address belongs to the physical page:
[  166.543886][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811af71f80 pfn:0x11af70
[  166.547595][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  166.550781][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  166.553614][    C1] page_type: f5(slab)
[  166.555125][    C1] raw: 057ff00000000040 ffff888105111c80 dead000000000122 0000000000000000
[  166.558241][    C1] raw: ffff88811af71f80 00000000800e0008 00000000f5000000 0000000000000000
[  166.561446][    C1] head: 057ff00000000040 ffff888105111c80 dead000000000122 0000000000000000
[  166.564553][    C1] head: ffff88811af71f80 00000000800e0008 00000000f5000000 0000000000000000
[  166.567771][    C1] head: 057ff00000000002 ffffea00046bdc01 00000000ffffffff 00000000ffffffff
[  166.571031][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  166.574212][    C1] page dumped because: kasan: bad access detected
[  166.576550][    C1] page_owner tracks the page as allocated
[  166.578661][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5941, tgid 5940 (syz.2.12), ts 59456857031, free_ts 59442794062
[  166.585502][    C1]  post_alloc_hook+0x240/0x2a0
[  166.587265][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  166.589340][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  166.591506][    C1]  alloc_pages_mpol+0x232/0x4a0
[  166.593361][    C1]  allocate_slab+0x8a/0x370
[  166.595099][    C1]  ___slab_alloc+0xbeb/0x1420
[  166.596867][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  166.598872][    C1]  xfrm_state_alloc+0x24/0x2f0
[  166.600708][    C1]  xfrm_add_acquire+0xf7/0xb20
[  166.602497][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  166.604362][    C1]  netlink_rcv_skb+0x208/0x470
[  166.606174][    C1]  xfrm_netlink_rcv+0x79/0x90
[  166.607947][    C1]  netlink_unicast+0x82f/0x9e0
[  166.609795][    C1]  netlink_sendmsg+0x805/0xb30
[  166.611556][    C1]  __sock_sendmsg+0x21c/0x270
[  166.613290][    C1]  ____sys_sendmsg+0x505/0x830
[  166.615076][    C1] page last free pid 5940 tgid 5940 stack trace:
[  166.617426][    C1]  __free_frozen_pages+0xbc4/0xd30
[  166.619381][    C1]  __slab_free+0x303/0x3c0
[  166.621090][    C1]  qlist_free_all+0x97/0x140
[  166.622826][    C1]  kasan_quarantine_reduce+0x148/0x160
[  166.624869][    C1]  __kasan_slab_alloc+0x22/0x80
[  166.626703][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  166.628750][    C1]  vm_area_dup+0x2b/0x680
[  166.630399][    C1]  __split_vma+0x1a9/0xa00
[  166.632117][    C1]  vma_modify+0x12c3/0x1970
[  166.633788][    C1]  vma_modify_flags+0x1e8/0x230
[  166.635609][    C1]  mprotect_fixup+0x407/0x9c0
[  166.637397][    C1]  do_mprotect_pkey+0x8cd/0xce0
[  166.639285][    C1]  __x64_sys_mprotect+0x80/0x90
[  166.641151][    C1]  do_syscall_64+0xfa/0x3b0
[  166.642791][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.645029][    C1] 
[  166.645945][    C1] Memory state around the buggy address:
[  166.648062][    C1]  ffff88811af72c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  166.651125][    C1]  ffff88811af72c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  166.654107][    C1] >ffff88811af72d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.656857][    C1]                                      ^
[  166.658637][    C1]  ffff88811af72d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.661511][    C1]  ffff88811af72e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.664680][    C1] ==================================================================
[  166.668321][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  166.671218][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  166.674783][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.678863][    C1] Call Trace:
[  166.680221][    C1]  <IRQ>
[  166.681241][    C1]  dump_stack_lvl+0x99/0x250
[  166.682772][    C1]  ? __asan_memcpy+0x40/0x70
[  166.684318][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.686056][    C1]  ? __pfx__printk+0x10/0x10
[  166.687590][    C1]  vpanic+0x281/0x750
[  166.689019][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  166.690754][    C1]  ? __pfx_vpanic+0x10/0x10
[  166.692276][    C1]  ? asm_common_interrupt+0x26/0x40
[  166.694008][    C1]  panic+0xb9/0xc0
[  166.695248][    C1]  ? __pfx_panic+0x10/0x10
[  166.696980][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  166.699067][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.701136][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  166.702884][    C1]  check_panic_on_warn+0x89/0xb0
[  166.704755][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  166.706879][    C1]  end_report+0x78/0x160
[  166.708673][    C1]  kasan_report+0x129/0x150
[  166.710545][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  166.712698][    C1]  __xfrm_state_delete+0x696/0xca0
[  166.714804][    C1]  xfrm_timer_handler+0x18f/0xa00
[  166.716888][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  166.719152][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  166.721267][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.723155][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  166.725276][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.727373][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  166.729227][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  166.731148][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  166.732870][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  166.734766][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  166.736700][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  166.738566][    C1]  handle_softirqs+0x286/0x870
[  166.740199][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  166.741770][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  166.743558][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  166.745264][    C1]  __irq_exit_rcu+0xca/0x1f0
[  166.746852][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  166.748607][    C1]  irq_exit_rcu+0x9/0x30
[  166.750074][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  166.752302][    C1]  </IRQ>
[  166.753565][    C1]  <TASK>
[  166.754857][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  166.757025][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  166.759335][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  166.766289][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  166.768392][    C1] RAX: 3389c5d04a438600 RBX: ffffffff819683f8 RCX: 3389c5d04a438600
[  166.771729][    C1] RDX: 0000000000000001 RSI: ffffffff8d9ba1da RDI: ffffffff8be33f00
[  166.774980][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  166.778301][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38f30
[  166.781567][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  166.784775][    C1]  ? do_idle+0x1e8/0x510
[  166.786546][    C1]  default_idle+0x13/0x20
[  166.788353][    C1]  default_idle_call+0x74/0xb0
[  166.790331][    C1]  do_idle+0x1e8/0x510
[  166.792009][    C1]  ? __pfx_do_idle+0x10/0x10
[  166.793900][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.796037][    C1]  cpu_startup_entry+0x44/0x60
[  166.797977][    C1]  start_secondary+0x101/0x110
[  166.799955][    C1]  common_startup_64+0x13e/0x147
[  166.802063][    C1]  </TASK>
[  166.804114][    C1] Kernel Offset: disabled
[  166.805985][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:34:17  Registers:
info registers vcpu 0

CPU#0
RAX=e9660a021de80600 RBX=ffffffff819683f8 RCX=e9660a021de80600 RDX=0000000000000001
RSI=ffffffff8d9ba1da RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200001000000 CR3=0000000116838000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7ee6012e7b
XMM06=0000000000000000 00007f7ee6012e75 XMM07=0000000000000000 00007f7ee6012e89
XMM08=0000000000000000 00007f7ee6012f0f XMM09=0000000000000000 00007f7ee6012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000001f RBX=0000000000000042 RCX=0000000000000001 RDX=ffffffff8b7756a0
RSI=ffffffff8f8a9530 RDI=0000000000000042 RBP=ffffc900001e0290 RSP=ffffc900001e0178
R8 =ffff888100680000 R9 =0000000000000005 R10=0000000000000045 R11=0000000000000100
R12=ffffffff81281e9a R13=ffffffff8da5f93d R14=1ffff9200003c03c R15=ffffffffffff0a00
RIP=ffffffff81bfb3b9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c304738 CR3=0000000126092000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=00007f58f1da7498 00007f58f1da7470 XMM03=00007f58f1da74a8 00007f58f1da74a0
XMM04=00007f58f290d100 00007f58f1da7460 XMM05=00007f58f1da7478 00007f58f1da74c0
XMM06=00007f58f1da74b8 00007f58f1da74b0 XMM07=00007f58f1da74a8 00007f58f1da74a0
XMM08=0021668a87059d81 956a437ce9158dd8 XMM09=0000000000000000 00007f58f1c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
