last executing test programs:

2.342072186s ago: executing program 0 (id=5353):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="6a0ac4ff150000007110a910000000009500ffffffe60000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)

2.229468162s ago: executing program 0 (id=5354):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0xb0, 0x30, 0x1, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_vlan={0x98, 0x1c, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffffff01, 0xfff, 0x7, 0x0, 0x9}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff4, 0x3, 0x3d57b8b5e306a0c6, 0x5, 0x1}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8db}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb0}}, 0x4040)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, &(0x7f0000000040))

1.845619065s ago: executing program 0 (id=5363):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x20, 0x0, 0x1, 0x5, 0x10}]}}, 0x0, 0x2a}, 0x28)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000906010800000000000000000200ffff0c00078008000a40000000020900020073797a31009000000500010007000800"], 0x34}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000c40)=0x7, 0x8)

1.752256068s ago: executing program 2 (id=5365):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/63, 0x3f}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x0, 0x400c)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_LIMIT={0x8, 0x2, 0x6}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x1}, @TCA_PIE_LIMIT={0x8, 0x2, 0x80}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r8=>0x0})
r9 = socket$inet6(0x10, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x8, 0xfff00000}, {0x16, 0x10, 0x1c, 0x4f}]}, 0x10)
sendto$inet6(r9, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)="c982c5", 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x850)
recvfrom(r9, &(0x7f0000000500)=""/191, 0xbf, 0x20, 0x0, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x6, 0x9, &(0x7f0000000480)={{0x2b, @loopback, 0x0, 0x3, 'wrr\x00', 0x12, 0x0, 0x2d}, {@private=0xa010102, 0x4e24, 0x1, 0x0, 0x6}}, 0x44)
getsockopt$inet_tcp_int(r10, 0x6, 0x9, 0x0, &(0x7f0000000040))
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xcb47f0b37d3315eb)

1.350336102s ago: executing program 1 (id=5369):
r0 = socket$inet6(0x10, 0x2, 0x6) (async)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10)
sendto$inet6(r0, &(0x7f0000000000)="1c0000002800050f0c1000000049b23e9b200a000835b3c000000001", 0x1c, 0x0, 0x0, 0x0)

1.347641718s ago: executing program 1 (id=5370):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'wlan1\x00', &(0x7f0000000a00)=@ethtool_cmd={0x2f, 0x6, 0x4, 0x0, 0x9c, 0xa, 0x1, 0xff, 0x4, 0x8, 0x10000, 0x10, 0x6, 0x80, 0x7, 0x1, [0xcb, 0x7f]}}) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 64)

1.260374878s ago: executing program 0 (id=5371):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt(r3, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000)
r4 = socket(0x10, 0x803, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) (async, rerun: 64)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async, rerun: 64)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4)
unshare(0x62040200) (async)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x8000000000000d, 0x0, 0x0) (async, rerun: 32)
bind$inet(r7, 0x0, 0x0) (rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) (async)
sendto$inet(r7, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e36, 0x0, 'fo\x00', 0x38, 0x3, 0x8}, 0x2c) (async)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (rerun: 32)

1.208140795s ago: executing program 1 (id=5372):
syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f51002b1f03003a000000000011000000000000fe8000000000000000000000000000aa84ffc2"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x600}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @generic={{0x36, 0x4, 0x2, 0x22, 0xe7, 0x67, 0x0, 0x5, 0x6, 0x0, @multicast2, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x19, [@dev={0xac, 0x14, 0x14, 0x3f}, @empty, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x44, 0x68, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x7fffffff}, {@empty, 0x2}, {@private=0xa010101, 0xe3000000}, {@rand_addr=0x64010100, 0x54c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x4}]}, @lsrr={0x83, 0x1b, 0xf0, [@loopback, @private=0xa010100, @multicast1, @loopback, @empty, @remote]}, @timestamp_prespec={0x44, 0x34, 0x61, 0x3, 0x1, [{@remote, 0x3}, {@local, 0x80}, {@rand_addr=0x64010100}, {@broadcast, 0x4}, {@broadcast, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0xb8, 0x1, 0x7, [{@local}, {@private=0xa010101, 0xa180}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x50}]}]}}, "0335ba1969d12dcccda6aa72a5739a"}}}}}, 0xf9)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000440)={0x29, @multicast1, 0x4e20, 0x3, 'wrr\x00', 0x2, 0xfff, 0x50}, 0x2c)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x400007)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002"], 0x3c}, 0x1, 0x0, 0x0, 0x2000082e}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c0007000000000000000000140003"], 0x114}], 0x1}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x80)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r10, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x44001}, 0x40000)

989.010893ms ago: executing program 1 (id=5373):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0xe, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xfffd, @remote}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x0, 0xb, {0x6, 0x2b, 0x3, 0xbf, 0x0, 0x7, 0x0, @in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x1, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0xa5f}]}, 0xb8}}, 0x0)

978.291673ms ago: executing program 1 (id=5374):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='\'@\x00', 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000070201006608000000000041180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

851.502651ms ago: executing program 2 (id=5375):
r0 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6b16afac133c"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd2c5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfa3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x58}}, 0x4040000)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'erspan0\x00', <r3=>0x0, 0x8, 0x20, 0x8, 0x2, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, {[@lsrr={0x83, 0x7, 0xbd, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x17, 0xd4, [@private=0xa010102, @rand_addr=0x64010102, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}, @empty]}]}}}}}) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r5=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@RTM_NEWMDB={0xb8, 0x54, 0x200, 0x70bd26, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0xa5e1f05d7cc51c41, 0x2, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x3, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @remote}, 0x536e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x0, {@in6_addr=@remote, 0x86dd}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9, 0x3}, {0x0, 0xffff}, {0x9, 0xfff1}}}, 0x24}}, 0x4044004) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'sit0\x00', r7, 0x20, 0x700, 0x3, 0x2, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x66, 0x0, 0x0, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@cipso={0x86, 0x14, 0x2, [{0x7, 0x2}, {0x6, 0x2}, {0x6, 0xa, "7089ce936a2cb5e7"}]}]}}}}})

792.66996ms ago: executing program 2 (id=5376):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000000007010300000000000000000700000a0c20024000000000800000010c00078008000140000007ff0c0003400000f6ffffff00070c0002400000000000000000080005400000000108000540000000010c000640000000004c4b33740900010073797a30000000000c20024000000000000000de"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4008000)

721.999967ms ago: executing program 2 (id=5377):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x42, 0x800}, 0x4000)

619.562015ms ago: executing program 2 (id=5378):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd4, 0xffffffbf, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7fb, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x101, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x74, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd6, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x6000000, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x81, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x2, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x6}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x7fff, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0xd, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x4b9151eb496286f}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x4}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)

618.784834ms ago: executing program 2 (id=5379):
r0 = socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0)

518.588984ms ago: executing program 0 (id=5380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x4000040)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
socket$pptp(0x18, 0x1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

518.226531ms ago: executing program 0 (id=5381):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0x9c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b00010067726574617000"], 0xc0}}, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x5, 0x55c})
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)

0s ago: executing program 1 (id=5382):
r0 = socket(0x2c, 0x3, 0xe7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfe79, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x1, @remote, 0x7}]}, &(0x7f0000000100)=0x10)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000500)={0x1, 0x4, 0xa4, 0x8003, @vifc_lcl_addr=@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffef9)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000040)={r8, 0x180}, 0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$inet_tcp_int(r6, 0x6, 0x11, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="110725bd7000fbdbc12504e10000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r11, @ANYBLOB="000129bd7000ffdbdf252100000008000300", @ANYRES32=r12], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x40080c0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x3d}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0xc, 0x9, 0x3, 0x8}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x864)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, 0x24}}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r14=>0x0})
ioctl$TUNSETIFINDEX(r13, 0x400454da, &(0x7f0000000080)=r14)

kernel console output (not intermixed with test programs):

 interface the new active one
[  237.872081][T16745] bond60: (slave bond61): Enslaving as an active interface with an up link
[  237.893876][T16747] tipc: Resetting bearer <eth:syzkaller0>
[  237.912135][T16746] tipc: Resetting bearer <eth:syzkaller0>
[  237.934717][T16746] tipc: Disabling bearer <eth:syzkaller0>
[  237.961227][T16757] nbd: must specify at least one socket
[  238.012216][T16761] netlink: 'syz.1.3510': attribute type 1 has an invalid length.
[  238.132114][T16774] netlink: 'syz.1.3515': attribute type 1 has an invalid length.
[  238.173587][T16774] 8021q: adding VLAN 0 to HW filter on device bond72
[  238.176950][T16774] bond71: (slave bond72): making interface the new active one
[  238.180623][T16774] bond71: (slave bond72): Enslaving as an active interface with an up link
[  238.217290][T16772] bond67: (slave bond68): Releasing backup interface
[  238.243471][T16772] bond71: (slave bond72): Releasing backup interface
[  238.352381][T16786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.357218][T16786] syzkaller0: entered promiscuous mode
[  238.359592][T16786] syzkaller0: entered allmulticast mode
[  238.548206][T16808] netlink: 'syz.1.3526': attribute type 21 has an invalid length.
[  238.848766][T16840] netlink: 'syz.1.3538': attribute type 1 has an invalid length.
[  239.073768][T16860] pim6reg: entered allmulticast mode
[  239.076088][T16859] pim6reg: left allmulticast mode
[  239.210304][T16866] __nla_validate_parse: 25 callbacks suppressed
[  239.210319][T16866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3547'.
[  239.238246][T16871] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  239.245210][T16871] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3548'.
[  239.249515][T16871] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3548'.
[  239.296818][T16873] can: request_module (can-proto-5) failed.
[  239.357221][T16879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  239.380757][T16882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3553'.
[  239.468252][T16893] netlink: 'syz.1.3556': attribute type 29 has an invalid length.
[  239.472543][T16893] netlink: 'syz.1.3556': attribute type 29 has an invalid length.
[  239.475928][T16893] netlink: 'syz.1.3556': attribute type 27 has an invalid length.
[  239.481371][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'.
[  239.541184][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3558'.
[  239.544330][T16897] netlink: 'syz.1.3558': attribute type 2 has an invalid length.
[  239.710343][T16909] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.906154][T16926] netlink: 'syz.1.3566': attribute type 1 has an invalid length.
[  239.909445][T16926] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3566'.
[  239.914887][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3566'.
[  240.007706][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3569'.
[  240.018983][T16935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3569'.
[  240.558185][T16955] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  240.765678][T16954] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  241.378688][T17006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.031937][T17028] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  242.251023][T17051] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  242.409135][T17065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.509157][T17081] syz_tun: entered promiscuous mode
[  242.515444][T17081] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  242.526465][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.532642][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.608590][T17089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.612200][T17089] syzkaller0: entered promiscuous mode
[  242.614628][T17089] syzkaller0: entered allmulticast mode
[  242.620011][T17089] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  242.730283][T17089] nbd1: detected capacity change from 0 to 127
[  242.736269][T17089] tipc: Resetting bearer <eth:syzkaller0>
[  242.742178][   T56] block nbd1: Receive control failed (result -104)
[  242.745379][T17089] tipc: Resetting bearer <eth:syzkaller0>
[  242.758926][T17089] tipc: Disabling bearer <eth:syzkaller0>
[  243.326090][T17115] validate_nla: 2 callbacks suppressed
[  243.326100][T17115] netlink: 'syz.2.3633': attribute type 1 has an invalid length.
[  243.398706][T17115] 8021q: adding VLAN 0 to HW filter on device bond63
[  243.404951][T17115] bond62: (slave bond63): making interface the new active one
[  243.407901][T17115] bond62: (slave bond63): Enslaving as an active interface with an up link
[  243.437131][T17121] netlink: 'syz.1.3635': attribute type 6 has an invalid length.
[  243.505989][T17133] vlan0: entered promiscuous mode
[  243.635472][T17144] netlink: 'syz.1.3643': attribute type 1 has an invalid length.
[  243.704890][T17144] 8021q: adding VLAN 0 to HW filter on device bond76
[  243.719757][T17144] bond75: (slave bond76): making interface the new active one
[  243.723586][T17144] bond75: (slave bond76): Enslaving as an active interface with an up link
[  243.732509][T17148] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  243.765399][T17148] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  244.027995][   T33] audit: type=1107 audit(1755219649.184:8): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  244.038400][T17171] netlink: 'syz.2.3651': attribute type 10 has an invalid length.
[  244.118483][T17174] netlink: 'syz.2.3652': attribute type 1 has an invalid length.
[  244.163161][T17174] 8021q: adding VLAN 0 to HW filter on device bond65
[  244.167495][T17174] bond64: (slave bond65): making interface the new active one
[  244.171126][T17174] bond64: (slave bond65): Enslaving as an active interface with an up link
[  244.214363][T17178] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  244.244549][T17177] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  244.324459][T17180] __nla_validate_parse: 18 callbacks suppressed
[  244.324469][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'.
[  244.330629][T17180] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  244.410643][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'.
[  244.414502][T17184] smc: net device bond0 applied user defined pnetid SYZ
[  244.418659][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3656'.
[  244.424900][T17185] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3656'.
[  244.424919][T17184] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3656'.
[  244.577375][T17196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.592493][T17196] tipc: Failed to remove unknown binding: 66,1,1/1549638882:4206687422/4206687424
[  244.598398][T17196] tipc: Failed to remove unknown binding: 66,1,1/1549638882:4206687422/4206687424
[  244.604681][T17196] tipc: Failed to remove unknown binding: 66,1,1/1549638882:4206687422/4206687424
[  244.662647][T17197] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3657'.
[  245.026006][T17217] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  245.144866][T17228] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  245.161424][T17228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3668'.
[  245.165306][T17228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3668'.
[  245.169152][T17228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3668'.
[  245.178158][T17228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3668'.
[  245.304379][T17241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.307250][T17241] syzkaller0: entered promiscuous mode
[  245.309061][T17241] syzkaller0: entered allmulticast mode
[  245.323894][T17241] tipc: Resetting bearer <eth:syzkaller0>
[  245.332393][T17240] tipc: Resetting bearer <eth:syzkaller0>
[  245.344054][T17240] tipc: Disabling bearer <eth:syzkaller0>
[  245.506772][T17250] netlink: 'syz.2.3676': attribute type 21 has an invalid length.
[  245.570855][   T33] audit: type=1804 audit(1755219650.724:9): pid=17255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3678" name="/newroot/1182/cgroup.controllers" dev="tmpfs" ino=6083 res=1 errno=0
[  245.591145][   T33] audit: type=1800 audit(1755219650.734:10): pid=17255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3678" name="cgroup.controllers" dev="tmpfs" ino=6083 res=0 errno=0
[  245.691473][T17264] netlink: 'syz.2.3680': attribute type 1 has an invalid length.
[  245.807954][T17275] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  245.957359][T17279] vlan4: entered promiscuous mode
[  245.959186][T17279] bond0: entered promiscuous mode
[  246.159726][T17294] netlink: 'syz.2.3691': attribute type 20 has an invalid length.
[  246.167264][T17294] netlink: 'syz.2.3691': attribute type 20 has an invalid length.
[  246.381481][T17320] netlink: 'syz.1.3697': attribute type 3 has an invalid length.
[  246.965626][T17351] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  247.109496][T17349] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  247.213449][ T7909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.218294][ T7909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.342794][T17332] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  247.358676][T17368] can: request_module (can-proto-4) failed.
[  247.455727][   T33] audit: type=1800 audit(1755219652.614:11): pid=17383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3724" name="memory.events" dev="tmpfs" ino=6290 res=0 errno=0
[  247.468010][   T33] audit: type=1804 audit(1755219652.614:12): pid=17383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3724" name="/newroot/1216/memory.events" dev="tmpfs" ino=6290 res=1 errno=0
[  247.513745][T17391] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  247.828536][T17418] syzkaller0: entered promiscuous mode
[  247.833812][T17418] syzkaller0: entered allmulticast mode
[  248.056367][T17441] bond74: entered promiscuous mode
[  248.058921][T17441] 8021q: adding VLAN 0 to HW filter on device bond74
[  248.080916][T17441] bond74: (slave bridge13): making interface the new active one
[  248.084013][T17441] bridge13: entered promiscuous mode
[  248.086887][T17441] bond74: (slave bridge13): Enslaving as an active interface with an up link
[  248.414606][T17471] sctp: [Deprecated]: syz.2.3750 (pid 17471) Use of struct sctp_assoc_value in delayed_ack socket option.
[  248.414606][T17471] Use struct sctp_sack_info instead
[  248.549033][T17483] validate_nla: 1 callbacks suppressed
[  248.549044][T17483] netlink: 'syz.0.3755': attribute type 11 has an invalid length.
[  248.809561][T17498] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  248.839253][T17498] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  249.546422][T17543] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  249.566209][T17547] IPv6: sit4: Disabled Multicast RS
[  249.793956][T17563] __nla_validate_parse: 21 callbacks suppressed
[  249.793966][T17563] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3778'.
[  249.896268][T17567] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  249.906511][T17566] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  250.004256][T17572] netlink: 'syz.2.3781': attribute type 1 has an invalid length.
[  250.007474][T17572] netlink: 'syz.2.3781': attribute type 2 has an invalid length.
[  250.123517][T17572] infiniband syz2: set active
[  250.126178][T17572] infiniband syz2: added syzkaller0
[  250.171807][T17572] RDS/IB: syz2: added
[  250.173698][T17572] smc: adding ib device syz2 with port count 1
[  250.176455][T17572] smc:    ib device syz2 port 1 has pnetid 
[  250.661872][T17587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  250.717708][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'.
[  250.727633][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'.
[  250.740290][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'.
[  251.599369][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'.
[  251.744502][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'.
[  251.747805][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'.
[  251.754228][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'.
[  251.883478][T17686] openvswitch: netlink: Key type 241 is out of range max 32
[  251.888754][T17688] netlink: 'syz.0.3814': attribute type 39 has an invalid length.
[  271.827163][T17699] netlink: 'syz.1.3819': attribute type 1 has an invalid length.
[  271.834061][T17698] netlink: 'syz.0.3818': attribute type 3 has an invalid length.
[  271.837580][T17698] netlink: 'syz.0.3818': attribute type 3 has an invalid length.
[  271.867234][T17699] 8021q: adding VLAN 0 to HW filter on device bond78
[  271.905789][T17699] veth11: entered promiscuous mode
[  271.916930][T17699] bond78: (slave veth11): Enslaving as a backup interface with a down link
[  271.927760][T17704] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3821'.
[  271.939464][T17699] bond0: (slave syz_tun): Releasing backup interface
[  271.956427][T17699] bond54: (slave bond55): Releasing backup interface
[  271.964899][T17699] bond56: (slave bond57): Releasing backup interface
[  271.973479][T17699] bond58: (slave bond59): Releasing backup interface
[  271.978461][T17699] bond60: (slave bond61): Releasing backup interface
[  271.987476][T17699] bond62: (slave bond63): Releasing backup interface
[  271.995281][T17699] bond64: (slave bond65): Releasing backup interface
[  272.000099][T17699] bond66: (slave bond67): Releasing backup interface
[  272.006178][T17699] bond70: (slave veth9): Releasing backup interface
[  272.016810][T17699] bond71: (slave bond72): Releasing backup interface
[  272.023110][T17699] bond75: (slave bond76): Releasing backup interface
[  272.028049][T17699] bond78: (slave veth11): Releasing backup interface
[  272.171713][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3823'.
[  272.174721][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3823'.
[  272.178372][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3823'.
[  272.193185][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3824'.
[  272.196212][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3824'.
[  272.400055][T17719] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.406357][T17719] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.443979][T17719] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.447196][T17719] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.504138][T17719] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.507481][T17719] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.513674][T17721] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3826'.
[  272.553770][T17719] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.556959][T17719] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.640660][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.648480][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.664492][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.667740][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.679526][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.685496][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.696208][ T5691] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.698957][ T5691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.740346][T17723] vlan4: entered promiscuous mode
[  272.742195][T17723] vlan4: entered allmulticast mode
[  272.744123][T17723] hsr_slave_1: entered allmulticast mode
[  272.806291][T17730] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3829'.
[  272.852242][T17730] dvmrp0: left allmulticast mode
[  273.036478][T17745] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  273.081050][T17741] block nbd2: server does not support multiple connections per device.
[  273.084764][T17741] block nbd2: shutting down sockets
[  273.154581][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3833'.
[  273.337695][T17766] netlink: 'syz.2.3839': attribute type 1 has an invalid length.
[  273.409349][T17766] 8021q: adding VLAN 0 to HW filter on device bond67
[  273.421982][T17766] bond66: (slave bond67): making interface the new active one
[  273.425576][T17766] bond66: (slave bond67): Enslaving as an active interface with an up link
[  273.429819][T17769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3840'.
[  273.498463][T17781] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  273.581376][T17780] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  273.683284][T17792] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  273.689717][T17791] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  273.771506][T17801] netlink: 'syz.2.3850': attribute type 1 has an invalid length.
[  273.841919][T17801] 8021q: adding VLAN 0 to HW filter on device bond69
[  273.849924][T17801] bond68: (slave bond69): making interface the new active one
[  273.854168][T17801] bond68: (slave bond69): Enslaving as an active interface with an up link
[  273.996597][T17817] netlink: 'syz.2.3856': attribute type 1 has an invalid length.
[  274.001579][T17817] netlink: 'syz.2.3856': attribute type 3 has an invalid length.
[  274.106084][T17827] netlink: 'syz.2.3860': attribute type 1 has an invalid length.
[  274.172690][T17827] 8021q: adding VLAN 0 to HW filter on device bond71
[  274.177587][T17827] bond70: (slave bond71): making interface the new active one
[  274.180530][T17827] bond70: (slave bond71): Enslaving as an active interface with an up link
[  274.257333][T17840] netlink: 'syz.0.3865': attribute type 3 has an invalid length.
[  275.106266][T17847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.151271][T17851] netlink: 'syz.1.3867': attribute type 14 has an invalid length.
[  275.405238][T17886] 8021q: adding VLAN 0 to HW filter on device bond77
[  275.409644][T17886] bond76: (slave bond77): making interface the new active one
[  275.415059][T17886] bond76: (slave bond77): Enslaving as an active interface with an up link
[  275.650967][T17919] pim6reg0: tun_chr_ioctl cmd 1074025677
[  275.653135][T17919] pim6reg0: linktype set to 768
[  275.678119][T17922] netlink: 'syz.1.3893': attribute type 11 has an invalid length.
[  275.872150][T17947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.978554][T17963] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  276.376955][T18017] 8021q: adding VLAN 0 to HW filter on device bond73
[  276.381563][T18017] bond72: (slave bond73): making interface the new active one
[  276.384374][T18017] bond72: (slave bond73): Enslaving as an active interface with an up link
[  276.497050][T18038] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  276.517364][T18037] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  276.597302][T18049] 8021q: adding VLAN 0 to HW filter on device bond75
[  276.602212][T18049] bond74: (slave bond75): making interface the new active one
[  276.605592][T18049] bond74: (slave bond75): Enslaving as an active interface with an up link
[  276.858279][T18085] 8021q: adding VLAN 0 to HW filter on device bond77
[  276.866327][T18085] bond76: (slave bond77): making interface the new active one
[  276.869339][T18085] bond76: (slave bond77): Enslaving as an active interface with an up link
[  276.975856][T18092] pim6reg: entered allmulticast mode
[  276.998765][T18092] pim6reg: left allmulticast mode
[  277.337295][T18101] openvswitch: netlink: IPv4 tun info is not correct
[  277.346690][T18101] __nla_validate_parse: 36 callbacks suppressed
[  277.346699][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3954'.
[  277.483707][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3957'.
[  277.492719][T18106] validate_nla: 9 callbacks suppressed
[  277.492729][T18106] netlink: 'syz.0.3957': attribute type 10 has an invalid length.
[  277.529875][T18112] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  277.552392][T18111] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  277.669338][T18125] netlink: 'syz.0.3961': attribute type 1 has an invalid length.
[  277.693891][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3960'.
[  277.704151][T18125] 8021q: adding VLAN 0 to HW filter on device bond79
[  277.707605][T18125] bond78: (slave bond79): making interface the new active one
[  277.710550][T18125] bond78: (slave bond79): Enslaving as an active interface with an up link
[  277.829845][T18141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3966'.
[  277.863446][T18148] net veth1_virt_wifi : renamed from virt_wifi0
[  277.978015][T18164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3976'.
[  278.028451][T18166] lo speed is unknown, defaulting to 1000
[  278.032548][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3975'.
[  278.032802][T18166] lo speed is unknown, defaulting to 1000
[  278.038369][T18166] lo speed is unknown, defaulting to 1000
[  278.415895][T18189] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3984'.
[  278.424451][T18189] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3984'.
[  278.427590][T18189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3984'.
[  278.436861][T18194] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3986'.
[  278.578581][T18203] netlink: 'syz.2.3989': attribute type 1 has an invalid length.
[  278.624139][T18203] 8021q: adding VLAN 0 to HW filter on device bond79
[  278.627480][T18203] bond78: (slave bond79): making interface the new active one
[  278.630733][T18203] bond78: (slave bond79): Enslaving as an active interface with an up link
[  278.765722][T18231] netlink: 'syz.1.3999': attribute type 1 has an invalid length.
[  278.792344][T18231] 8021q: adding VLAN 0 to HW filter on device bond81
[  278.796392][T18231] bond80: (slave bond81): making interface the new active one
[  278.799558][T18231] bond80: (slave bond81): Enslaving as an active interface with an up link
[  278.823935][T18236] syzkaller0: left promiscuous mode
[  278.825862][T18236] syzkaller0: left allmulticast mode
[  278.968996][T18238] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  279.005986][T18237] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  279.014698][T18254] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  279.086338][T18261] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  279.103393][T18263] netlink: 'syz.1.4011': attribute type 29 has an invalid length.
[  279.106902][T18263] netlink: 'syz.1.4011': attribute type 29 has an invalid length.
[  279.166054][T18265] raw_sendmsg: syz.2.4010 forgot to set AF_INET. Fix it!
[  279.266527][T18288] netlink: 'syz.2.4019': attribute type 1 has an invalid length.
[  279.293459][T18288] 8021q: adding VLAN 0 to HW filter on device bond81
[  279.296782][T18288] bond80: (slave bond81): making interface the new active one
[  279.299522][T18288] bond80: (slave bond81): Enslaving as an active interface with an up link
[  279.329212][T18294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  280.102296][T18298] netlink: 'syz.0.4021': attribute type 1 has an invalid length.
[  280.178810][T18310] gtp1: entered promiscuous mode
[  280.180719][T18310] gtp1: entered allmulticast mode
[  280.216742][T18316] netlink: 'syz.2.4028': attribute type 3 has an invalid length.
[  280.294787][T18333] rdma_rxe: rxe_newlink: failed to add vxcan1
[  280.338417][T18341] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  280.348338][T18340] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  280.573385][T18374] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  280.602406][T18373] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  280.690972][T18382] tipc: New replicast peer: 255.255.255.255
[  280.694018][T18382] tipc: Enabled bearer <udp:syz2>, priority 10
[  281.516866][T18397] netlink: 'syz.1.4055': attribute type 21 has an invalid length.
[  281.558245][T18399] 8021q: adding VLAN 0 to HW filter on device team0
[  281.575791][T18399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.588709][T18404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.658973][T18399] lo speed is unknown, defaulting to 1000
[  281.663107][T18399] lo speed is unknown, defaulting to 1000
[  281.665951][T18399] lo speed is unknown, defaulting to 1000
[  281.997419][T18426] 8021q: VLANs not supported on vxcan1
[  282.182334][T18435] nbd2: detected capacity change from 0 to 127
[  282.205513][   T56] block nbd2: Receive control failed (result -104)
[  282.296612][T18451] vti0: entered promiscuous mode
[  282.298357][T18451] vti0: entered allmulticast mode
[  282.306676][T18455] smc: net device bond0 erased user defined pnetid SYZ
[  282.309082][T18455] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1
[  282.523276][T18471] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  282.528434][T18471] CPU: 1 UID: 0 PID: 18471 Comm: syz.1.4076 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  282.528448][T18471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.528453][T18471] Call Trace:
[  282.528457][T18471]  <TASK>
[  282.528461][T18471]  dump_stack_lvl+0x189/0x250
[  282.528474][T18471]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.528482][T18471]  ? __pfx__printk+0x10/0x10
[  282.528493][T18471]  ? kernfs_path_from_node+0x2c/0x260
[  282.528503][T18471]  ? kernfs_path_from_node+0x2c/0x260
[  282.528510][T18471]  ? kernfs_path_from_node+0x2c/0x260
[  282.528520][T18471]  ? kernfs_path_from_node+0x22c/0x260
[  282.528528][T18471]  ? kernfs_path_from_node+0x2c/0x260
[  282.528544][T18471]  sysfs_warn_dup+0x8e/0xa0
[  282.528552][T18471]  sysfs_do_create_link_sd+0xc0/0x110
[  282.528562][T18471]  device_add_class_symlinks+0x1cf/0x240
[  282.528574][T18471]  device_add+0x475/0xb50
[  282.528586][T18471]  wiphy_register+0x1ba6/0x28d0
[  282.528605][T18471]  ? __pfx_wiphy_register+0x10/0x10
[  282.528616][T18471]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  282.528628][T18471]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  282.528638][T18471]  ieee80211_register_hw+0x3425/0x4080
[  282.528654][T18471]  ? ieee80211_register_hw+0x13f1/0x4080
[  282.528665][T18471]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  282.528675][T18471]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  282.528689][T18471]  ? __hrtimer_setup+0x187/0x210
[  282.528699][T18471]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  282.528712][T18471]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  282.528734][T18471]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  282.528744][T18471]  ? trace_kmalloc+0x1f/0xd0
[  282.528754][T18471]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  282.528764][T18471]  ? kstrndup+0xbf/0x160
[  282.528777][T18471]  hwsim_new_radio_nl+0xea4/0x1b10
[  282.528788][T18471]  ? __pfx___nla_validate_parse+0x10/0x10
[  282.528802][T18471]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  282.528818][T18471]  ? __nla_parse+0x40/0x60
[  282.528827][T18471]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  282.528840][T18471]  genl_family_rcv_msg_doit+0x215/0x300
[  282.528852][T18471]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  282.528866][T18471]  ? bpf_lsm_capable+0x9/0x20
[  282.528876][T18471]  ? security_capable+0x7e/0x2e0
[  282.528889][T18471]  genl_rcv_msg+0x60e/0x790
[  282.528922][T18471]  ? __pfx_genl_rcv_msg+0x10/0x10
[  282.528932][T18471]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  282.528949][T18471]  netlink_rcv_skb+0x208/0x470
[  282.528960][T18471]  ? __lock_acquire+0xab9/0xd20
[  282.528971][T18471]  ? __pfx_genl_rcv_msg+0x10/0x10
[  282.528981][T18471]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  282.529000][T18471]  ? down_read+0x1ad/0x2e0
[  282.529008][T18471]  genl_rcv+0x28/0x40
[  282.529016][T18471]  netlink_unicast+0x82f/0x9e0
[  282.529030][T18471]  ? __pfx_netlink_unicast+0x10/0x10
[  282.529041][T18471]  ? netlink_sendmsg+0x642/0xb30
[  282.529052][T18471]  ? skb_put+0x11b/0x210
[  282.529062][T18471]  netlink_sendmsg+0x805/0xb30
[  282.529079][T18471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.529092][T18471]  ? aa_sock_msg_perm+0x94/0x160
[  282.529103][T18471]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  282.529111][T18471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.529121][T18471]  __sock_sendmsg+0x21c/0x270
[  282.529133][T18471]  ____sys_sendmsg+0x505/0x830
[  282.529143][T18471]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.529155][T18471]  ? import_iovec+0x74/0xa0
[  282.529167][T18471]  ___sys_sendmsg+0x21f/0x2a0
[  282.529175][T18471]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.529198][T18471]  ? __fget_files+0x2a/0x420
[  282.529205][T18471]  ? __fget_files+0x3a0/0x420
[  282.529217][T18471]  __x64_sys_sendmsg+0x19b/0x260
[  282.529226][T18471]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  282.529238][T18471]  ? rcu_is_watching+0x15/0xb0
[  282.529251][T18471]  ? do_syscall_64+0xbe/0x3b0
[  282.529263][T18471]  do_syscall_64+0xfa/0x3b0
[  282.529273][T18471]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.529299][T18471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.529308][T18471]  ? exc_page_fault+0x9f/0xf0
[  282.529319][T18471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.529326][T18471] RIP: 0033:0x7fbf7758ebe9
[  282.529334][T18471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.529341][T18471] RSP: 002b:00007fbf783f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.529350][T18471] RAX: ffffffffffffffda RBX: 00007fbf777b6090 RCX: 00007fbf7758ebe9
[  282.529356][T18471] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  282.529361][T18471] RBP: 00007fbf77611e19 R08: 0000000000000000 R09: 0000000000000000
[  282.529366][T18471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.529370][T18471] R13: 00007fbf777b6128 R14: 00007fbf777b6090 R15: 00007ffd6dd3f598
[  282.529383][T18471]  </TASK>
[  282.544198][T18473] validate_nla: 4 callbacks suppressed
[  282.544207][T18473] netlink: 'syz.2.4077': attribute type 1 has an invalid length.
[  282.649529][T18476] netlink: 'syz.1.4078': attribute type 27 has an invalid length.
[  282.712144][T18479] bond82 (unregistering): Released all slaves
[  282.798523][T18488] __nla_validate_parse: 11 callbacks suppressed
[  282.798533][T18488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4080'.
[  282.960372][T18508] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.972053][T18508] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  282.977306][T18508] tipc: Resetting bearer <eth:syzkaller0>
[  282.981626][T18510] netlink: 'syz.1.4087': attribute type 1 has an invalid length.
[  283.009441][T18510] 8021q: adding VLAN 0 to HW filter on device bond83
[  283.014313][T18510] bond82: (slave bond83): making interface the new active one
[  283.017128][T18510] bond82: (slave bond83): Enslaving as an active interface with an up link
[  283.071889][T18520] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.4090'.
[  283.075609][T18520] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  283.078996][T18520] openvswitch: netlink: Duplicate key (type 0).
[  283.155431][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4091'.
[  283.175049][T18531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4093'.
[  283.262113][T18536] netlink: 'syz.2.4095': attribute type 1 has an invalid length.
[  283.283211][T18539] netlink: 'syz.0.4097': attribute type 29 has an invalid length.
[  283.288851][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4098'.
[  283.297166][T18536] 8021q: adding VLAN 0 to HW filter on device bond84
[  283.303499][T18536] bond83: (slave bond84): making interface the new active one
[  283.306933][T18536] bond83: (slave bond84): Enslaving as an active interface with an up link
[  283.310867][T18539] netlink: 'syz.0.4097': attribute type 2 has an invalid length.
[  283.320369][T18543] bond0: (slave rose0): Error: Device can not be enslaved while up
[  283.333300][T18539] netlink: 'syz.0.4097': attribute type 29 has an invalid length.
[  283.340342][T18539] netlink: 'syz.0.4097': attribute type 29 has an invalid length.
[  283.344380][T18539] netlink: 'syz.0.4097': attribute type 29 has an invalid length.
[  283.347150][T18539] netlink: 'syz.0.4097': attribute type 29 has an invalid length.
[  283.485806][T18571] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  283.488323][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4100'.
[  283.497877][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'.
[  283.501983][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4102'.
[  283.508766][T18551] ip6tnl5: entered promiscuous mode
[  283.519722][T18551] ip6tnl5: entered allmulticast mode
[  283.541242][T18573] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  283.563973][T18561] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  283.628405][T18566] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  283.664818][T18582] 8021q: adding VLAN 0 to HW filter on device bond81
[  283.670629][T18582] bond80: (slave bond81): making interface the new active one
[  283.673708][T18582] bond80: (slave bond81): Enslaving as an active interface with an up link
[  283.709119][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'.
[  283.787274][T18597] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4110'.
[  283.868835][T18612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.265294][T18656] nbd: nbd1 already in use
[  284.267762][T18656] block nbd1: NBD_DISCONNECT
[  284.269784][T18656] block nbd1: Send disconnect failed -32
[  284.275047][T18656] block nbd1: shutting down sockets
[  284.300988][    C1] blk_print_req_error: 138 callbacks suppressed
[  284.300999][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.306026][    C1] buffer_io_error: 138 callbacks suppressed
[  284.306032][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  284.310914][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.314048][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  284.316846][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.319790][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  284.322664][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.325668][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  284.330321][T15916] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.339094][T15916] Buffer I/O error on dev nbd1, logical block 0, async page read
[  284.342102][T15916] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.345197][T15916] Buffer I/O error on dev nbd1, logical block 1, async page read
[  284.347762][T15916] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.350809][T15916] Buffer I/O error on dev nbd1, logical block 2, async page read
[  284.353454][T15916] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.356688][T15916] Buffer I/O error on dev nbd1, logical block 3, async page read
[  284.357080][T18662] bond80: (slave bond81): Releasing backup interface
[  284.359240][T15916] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.365271][T15916] Buffer I/O error on dev nbd1, logical block 0, async page read
[  284.368455][T15916] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.371642][T15916] Buffer I/O error on dev nbd1, logical block 1, async page read
[  284.375038][T18662] bond82: (slave bond83): Releasing backup interface
[  284.376129][T15916] ldm_validate_partition_table(): Disk read failed.
[  284.382792][T15916] Dev nbd1: unable to read RDB block 0
[  284.386965][T15916]  nbd1: unable to read partition table
[  284.398386][T15916] ldm_validate_partition_table(): Disk read failed.
[  284.403552][T15916] Dev nbd1: unable to read RDB block 0
[  284.407200][T15916]  nbd1: unable to read partition table
[  284.411674][T18664] tipc: Resetting bearer <eth:syzkaller0>
[  284.460096][   T47] syz2: Port: 1 Link DOWN
[  284.479626][T18662] team0: Mode changed to "loadbalance"
[  284.488832][T18668] openvswitch: netlink: Missing key (keys=40, expected=80)
[  284.812531][T18684] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  284.815777][T18684] tipc: Enabled bearer <udp:syz2>, priority 10
[  284.950398][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  284.964449][T18694] bond0: (slave rose0): Error: Device can not be enslaved while up
[  284.996081][T18696] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  285.003623][T18696] syzkaller1: entered promiscuous mode
[  285.006049][T18696] syzkaller1: entered allmulticast mode
[  285.010056][T18696] syzkaller1: left promiscuous mode
[  285.013950][T18696] syzkaller1: left allmulticast mode
[  285.028225][T18695] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  285.090258][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  285.230476][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  285.380351][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  285.694398][T18759] 8021q: adding VLAN 0 to HW filter on device bond83
[  285.700943][T18759] bond82: (slave bond83): making interface the new active one
[  285.703605][T18759] bond82: (slave bond83): Enslaving as an active interface with an up link
[  285.709478][T18768] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  285.733614][T18767] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  285.773476][T18776] team0: entered promiscuous mode
[  285.787726][T18776] team0 (unregistering): left promiscuous mode
[  285.810460][ T5289] tipc: Node number set to 2619676993
[  286.146574][T18800] 8021q: adding VLAN 0 to HW filter on device bond85
[  286.158854][T18800] bond84: (slave bond85): making interface the new active one
[  286.163903][T18800] bond84: (slave bond85): Enslaving as an active interface with an up link
[  286.266525][T18812] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  286.704427][T18840] veth0_to_bond: entered allmulticast mode
[  286.752626][    C0] net_ratelimit: 4 callbacks suppressed
[  286.752642][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  286.816020][T18842] tipc: Disabling bearer <eth:team0>
[  286.819085][T18842] team0 (unregistering): Port device sit2 removed
[  286.915039][T18849] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  286.949103][T18848] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  286.985582][T18860] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  287.033175][T18859] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  287.418680][ T5289] lo speed is unknown, defaulting to 1000
[  287.497176][T18926] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  287.780324][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  287.917385][T18973] validate_nla: 16 callbacks suppressed
[  287.917396][T18973] netlink: 'syz.0.4230': attribute type 1 has an invalid length.
[  288.152508][T18994] __nla_validate_parse: 21 callbacks suppressed
[  288.152520][T18994] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4236'.
[  288.164983][T18994] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4236'.
[  288.168896][T18994] netlink: 'syz.0.4236': attribute type 5 has an invalid length.
[  288.175914][T18994] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4236'.
[  288.184961][T18994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4236'.
[  288.231319][T19001] netlink: 'syz.0.4238': attribute type 3 has an invalid length.
[  288.234568][T19001] netlink: 'syz.0.4238': attribute type 3 has an invalid length.
[  288.265456][T19007] netlink: 'syz.2.4239': attribute type 1 has an invalid length.
[  288.346584][T19016] macsec2: entered promiscuous mode
[  288.349269][T19016] team0: entered promiscuous mode
[  288.436497][T19020] lo speed is unknown, defaulting to 1000
[  288.439743][T19020] lo speed is unknown, defaulting to 1000
[  288.445027][T19020] lo speed is unknown, defaulting to 1000
[  288.491006][T19024] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  288.507658][T19024] Bluetooth: hci0: Opcode 0x080f failed: -22
[  288.727567][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4246'.
[  288.831172][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  288.928104][T19035] netlink: 'syz.0.4249': attribute type 1 has an invalid length.
[  289.860549][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  289.913610][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'.
[  289.917376][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'.
[  289.989449][T19053] ip6tnl3: entered promiscuous mode
[  289.992663][T19053] ip6tnl3: entered allmulticast mode
[  289.997173][T19053] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  290.020835][ T5211] Bluetooth: hci1: command 0x0405 tx timeout
[  290.094235][T19057] netlink: 'syz.1.4257': attribute type 1 has an invalid length.
[  290.133141][T19060] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4258'.
[  290.161999][T19066] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  290.266035][T19080] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4265'.
[  290.378125][T19097] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  290.467134][T19109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4274'.
[  290.502953][T19112] lo speed is unknown, defaulting to 1000
[  290.506104][T19112] lo speed is unknown, defaulting to 1000
[  290.509022][T19112] lo speed is unknown, defaulting to 1000
[  290.580435][ T5823] Bluetooth: hci0: command tx timeout
[  291.511583][T19138] netlink: 'syz.2.4283': attribute type 1 has an invalid length.
[  291.616695][T19149] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  291.622093][T19148] IPVS: stopping backup sync thread 19149 ...
[  291.832642][T19162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.868186][T19176] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  291.874392][T19176] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  291.940111][T19175] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  292.061993][T19189] netlink: 'syz.2.4301': attribute type 1 has an invalid length.
[  292.928192][T19209] netlink: 'syz.0.4309': attribute type 1 has an invalid length.
[  293.121316][T19217] lo speed is unknown, defaulting to 1000
[  293.124327][T19217] lo speed is unknown, defaulting to 1000
[  293.127157][T19217] lo speed is unknown, defaulting to 1000
[  293.145952][T19227] netlink: 'syz.2.4314': attribute type 11 has an invalid length.
[  293.277467][T19235] netlink: 'syz.2.4316': attribute type 1 has an invalid length.
[  293.392592][T19238] __nla_validate_parse: 12 callbacks suppressed
[  293.392605][T19238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4317'.
[  293.399933][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4317'.
[  293.513993][T19241] netlink: 'syz.2.4318': attribute type 11 has an invalid length.
[  293.565141][T19243] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4319'.
[  293.679106][T19250] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  293.752177][T19252] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  293.867922][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'.
[  293.875470][T19258] netlink: 'syz.0.4324': attribute type 15 has an invalid length.
[  293.879475][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'.
[  293.890215][T19258] netlink: 'syz.0.4324': attribute type 15 has an invalid length.
[  293.958982][T19264] netlink: 'syz.0.4326': attribute type 1 has an invalid length.
[  294.134437][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4327'.
[  294.247940][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4330'.
[  294.254932][T19279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4330'.
[  294.336843][T19283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4331'.
[  294.396903][T19291] netlink: 'syz.2.4334': attribute type 1 has an invalid length.
[  294.497147][T19301] netlink: 'syz.0.4338': attribute type 1 has an invalid length.
[  294.539631][T19303] 8021q: adding VLAN 0 to HW filter on device bond92
[  294.544029][T19303] bond91: (slave bond92): making interface the new active one
[  294.546907][T19303] bond91: (slave bond92): Enslaving as an active interface with an up link
[  294.577445][T19301] 8021q: adding VLAN 0 to HW filter on device bond93
[  294.582011][T19301] bond91: (slave bond93): Enslaving as a backup interface with an up link
[  294.715102][T19319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4340'.
[  294.794289][T19323] netlink: 'syz.0.4344': attribute type 1 has an invalid length.
[  294.895998][T19332] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003
[  295.574292][T19352] netlink: 'syz.2.4352': attribute type 1 has an invalid length.
[  295.615934][T19352] 8021q: adding VLAN 0 to HW filter on device bond91
[  295.621571][T19352] bond90: (slave bond91): making interface the new active one
[  295.625034][T19352] bond90: (slave bond91): Enslaving as an active interface with an up link
[  295.944043][T19373] 8021q: adding VLAN 0 to HW filter on device bond86
[  295.947349][T19373] bond85: (slave bond86): making interface the new active one
[  295.950100][T19373] bond85: (slave bond86): Enslaving as an active interface with an up link
[  296.060401][T19380] sctp: [Deprecated]: syz.1.4360 (pid 19380) Use of int in maxseg socket option.
[  296.060401][T19380] Use struct sctp_assoc_value instead
[  296.753476][T19393] 8021q: adding VLAN 0 to HW filter on device bond93
[  296.756687][T19393] bond92: (slave bond93): making interface the new active one
[  296.759561][T19393] bond92: (slave bond93): Enslaving as an active interface with an up link
[  296.864859][T19402] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  297.124499][T19421] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  297.156307][T19425] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  297.161412][T19425] syzkaller1: entered promiscuous mode
[  297.163545][T19425] syzkaller1: entered allmulticast mode
[  297.185159][T19424] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  297.199079][T19426] batman_adv: batadv0: Adding interface: ip6gretap2
[  297.202350][T19426] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  297.212881][T19426] batman_adv: batadv0: Interface activated: ip6gretap2
[  297.334543][T19432] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  297.956463][T19420] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  297.982843][T19447] openvswitch: netlink: IPv4 tunnel dst address is zero
[  298.052044][T19454] validate_nla: 4 callbacks suppressed
[  298.052055][T19454] netlink: 'syz.1.4384': attribute type 1 has an invalid length.
[  298.369867][T19487] netlink: 'syz.2.4395': attribute type 1 has an invalid length.
[  298.533751][T19500] __nla_validate_parse: 14 callbacks suppressed
[  298.533763][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4399'.
[  298.541895][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'.
[  298.657503][T19512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4404'.
[  298.861894][T19527] dvmrp0: entered allmulticast mode
[  298.975893][T19536] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  312.261744][  T127] block nbd2: Possible stuck request ffff888020613200: control (read@0,1024B). Runtime 30 seconds
[  312.265948][  T127] block nbd2: Possible stuck request ffff888020613400: control (read@1024,1024B). Runtime 30 seconds
[  312.269761][  T127] block nbd2: Possible stuck request ffff888020613600: control (read@2048,1024B). Runtime 30 seconds
[  312.273364][  T127] block nbd2: Possible stuck request ffff888020613800: control (read@3072,1024B). Runtime 30 seconds
[  318.165226][T19551] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4416'.
[  318.224116][T19560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.231618][T19559] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  318.408539][T19581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.412419][T19581] syzkaller0: entered promiscuous mode
[  318.414681][T19581] syzkaller0: entered allmulticast mode
[  318.422007][T19581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  318.435072][T19581] tipc: Resetting bearer <eth:syzkaller0>
[  318.439176][T19580] tipc: Resetting bearer <eth:syzkaller0>
[  318.448845][T19580] tipc: Disabling bearer <eth:syzkaller0>
[  318.565746][T19592] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4430'.
[  318.568792][T19592] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  318.571924][T19592] openvswitch: netlink: Duplicate key (type 0).
[  318.701239][T19597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4433'.
[  318.817096][T19599] bond95: entered promiscuous mode
[  318.818910][T19599] bond95: entered allmulticast mode
[  318.821348][T19599] 8021q: adding VLAN 0 to HW filter on device bond95
[  318.857599][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4435'.
[  318.886819][T19604] netlink: 'syz.0.4436': attribute type 1 has an invalid length.
[  318.917436][T19604] 8021q: adding VLAN 0 to HW filter on device bond97
[  318.920959][T19604] bond96: (slave bond97): making interface the new active one
[  318.924000][T19604] bond96: (slave bond97): Enslaving as an active interface with an up link
[  319.003538][T19613] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  319.069884][T19613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4439'.
[  319.140286][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4442'.
[  319.192636][T19628] netlink: 'syz.1.4444': attribute type 1 has an invalid length.
[  319.225517][T19628] 8021q: adding VLAN 0 to HW filter on device bond90
[  319.229095][T19628] bond89: (slave bond90): making interface the new active one
[  319.232740][T19628] bond89: (slave bond90): Enslaving as an active interface with an up link
[  319.270660][T19632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4445'.
[  319.322250][T19638] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  319.372181][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4447'.
[  319.547344][T19659] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  319.662025][T19647] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  319.723326][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4453'.
[  319.728912][T19668] netlink: 'syz.1.4452': attribute type 1 has an invalid length.
[  319.764821][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4453'.
[  319.786818][T19668] 8021q: adding VLAN 0 to HW filter on device bond92
[  319.791015][T19668] bond91: (slave bond92): making interface the new active one
[  319.793978][T19668] bond91: (slave bond92): Enslaving as an active interface with an up link
[  319.826577][T19672] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  319.992816][T19684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.996587][T19684] syzkaller0: entered promiscuous mode
[  319.998432][T19684] syzkaller0: entered allmulticast mode
[  320.281506][T19702] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  320.354559][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.357648][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.395384][T19717] nbd: illegal input index 65508
[  321.052774][T19765] netlink: 'syz.0.4484': attribute type 4 has an invalid length.
[  321.368390][T19769] rose0: left promiscuous mode
[  321.545116][T19789] vlan1: entered allmulticast mode
[  321.547127][T19789] veth1: entered allmulticast mode
[  321.549857][T19789] batman_adv: batadv0: Adding interface: vlan1
[  321.558818][T19789] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active
[  321.568851][T19789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.582573][T19788] tipc: Disabling bearer <eth:syzkaller0>
[  321.665625][T19804] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.668865][T19804] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.716334][T19804] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.722993][T19804] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.766142][T19804] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.770537][T19804] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.806385][T19804] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.812925][T19804] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.896135][ T5887] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.898927][ T5887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.909953][ T5887] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.912920][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.921264][ T5887] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.924018][ T5887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.932055][ T5887] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.934815][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.943594][T19801] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.946690][T19801] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.959763][T19827] netlink: 'syz.2.4508': attribute type 4 has an invalid length.
[  322.005286][T19801] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.008832][T19801] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.046924][T19830] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.055165][T19801] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.058274][T19801] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.064331][  T970] syz2: Port: 1 Link ACTIVE
[  322.106364][T19801] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.109628][T19801] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.058467][T19846] netlink: 'syz.2.4516': attribute type 1 has an invalid length.
[  323.082266][T19846] 8021q: adding VLAN 0 to HW filter on device bond97
[  323.085522][T19846] bond96: (slave bond97): making interface the new active one
[  323.088879][T19846] bond96: (slave bond97): Enslaving as an active interface with an up link
[  323.119144][T19850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.126303][T19850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  323.256496][T19861] net_ratelimit: 9 callbacks suppressed
[  323.256507][T19861] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  323.265280][T19861] __nla_validate_parse: 32 callbacks suppressed
[  323.265289][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4520'.
[  323.463843][T19872] lo speed is unknown, defaulting to 1000
[  323.466522][T19872] lo speed is unknown, defaulting to 1000
[  323.469048][T19872] lo speed is unknown, defaulting to 1000
[  323.475225][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.477835][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.617452][T19875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4525'.
[  323.622798][T19879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4525'.
[  323.630396][T19875] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4525'.
[  323.639257][T19879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4525'.
[  323.648060][T19875] bridge13: the hash_elasticity option has been deprecated and is always 16
[  323.655754][T19879] bridge14: the hash_elasticity option has been deprecated and is always 16
[  323.749976][T19886] netlink: 'syz.2.4526': attribute type 1 has an invalid length.
[  323.783615][T19886] 8021q: adding VLAN 0 to HW filter on device bond99
[  323.787340][T19886] bond98: (slave bond99): making interface the new active one
[  323.794572][T19886] bond98: (slave bond99): Enslaving as an active interface with an up link
[  323.829507][T19892] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  323.846125][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4528'.
[  323.957541][T19901] rose1: left promiscuous mode
[  324.003049][T19903] netlink: 'syz.2.4533': attribute type 1 has an invalid length.
[  324.079096][T19903] 8021q: adding VLAN 0 to HW filter on device bond101
[  324.105251][T19903] bond100: (slave bond101): making interface the new active one
[  324.108189][T19903] bond100: (slave bond101): Enslaving as an active interface with an up link
[  324.136272][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'.
[  324.219948][T19913] dvmrp8: entered allmulticast mode
[  324.243611][T19911] dvmrp8: left allmulticast mode
[  324.504576][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.817033][T19915] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  324.825518][T19915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'.
[  324.918074][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4540'.
[  324.943303][T19921] netlink: 'syz.2.4540': attribute type 5 has an invalid length.
[  324.947166][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4540'.
[  325.554549][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.558071][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.782769][T19929] netlink: 'syz.2.4543': attribute type 1 has an invalid length.
[  325.825361][T19929] 8021q: adding VLAN 0 to HW filter on device bond103
[  325.832616][T19929] bond102: (slave bond103): making interface the new active one
[  325.836217][T19929] bond102: (slave bond103): Enslaving as an active interface with an up link
[  325.851715][T19933] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  326.030569][T19951] netlink: 'syz.2.4551': attribute type 1 has an invalid length.
[  326.062044][T19951] 8021q: adding VLAN 0 to HW filter on device bond105
[  326.065531][T19951] bond104: (slave bond105): making interface the new active one
[  326.068867][T19951] bond104: (slave bond105): Enslaving as an active interface with an up link
[  326.095720][T19956] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  326.136173][T19958] netlink: 'syz.2.4553': attribute type 2 has an invalid length.
[  326.467744][T19990] netlink: 'syz.2.4562': attribute type 1 has an invalid length.
[  326.514699][T19990] 8021q: adding VLAN 0 to HW filter on device bond107
[  326.519354][T19990] bond106: (slave bond107): making interface the new active one
[  326.523582][T19990] bond106: (slave bond107): Enslaving as an active interface with an up link
[  326.653038][T20001] sctp: [Deprecated]: syz.2.4566 (pid 20001) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.653038][T20001] Use struct sctp_sack_info instead
[  326.686230][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  326.689732][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.704630][ T5691] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  326.708142][ T5691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.717543][ T5691] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  326.721698][ T5691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.731365][ T5691] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  326.738647][ T5691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.829791][T20014] netlink: 'syz.2.4571': attribute type 1 has an invalid length.
[  326.841229][T20012] netlink: 'syz.0.4570': attribute type 1 has an invalid length.
[  326.875545][T20014] bond108: (slave bridge16): making interface the new active one
[  326.878427][T20014] bond108: (slave bridge16): Enslaving as an active interface with an up link
[  326.904450][T20012] 8021q: adding VLAN 0 to HW filter on device bond99
[  326.907894][T20012] bond98: (slave bond99): making interface the new active one
[  326.911003][T20012] bond98: (slave bond99): Enslaving as an active interface with an up link
[  327.038803][T20035] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  327.201703][T20064] netlink: 'syz.2.4584': attribute type 1 has an invalid length.
[  327.267968][T20064] 8021q: adding VLAN 0 to HW filter on device bond110
[  327.273035][T20064] bond109: (slave bond110): making interface the new active one
[  327.276470][T20064] bond109: (slave bond110): Enslaving as an active interface with an up link
[  327.413128][   T57] block nbd1: Receive control failed (result -104)
[  327.705449][T20103] netlink: 'syz.0.4595': attribute type 1 has an invalid length.
[  327.737063][T20103] 8021q: adding VLAN 0 to HW filter on device bond101
[  327.743198][T20103] bond100: (slave bond101): making interface the new active one
[  327.746984][T20103] bond100: (slave bond101): Enslaving as an active interface with an up link
[  328.197123][T20132] lo speed is unknown, defaulting to 1000
[  328.199961][T20132] lo speed is unknown, defaulting to 1000
[  328.203152][T20132] lo speed is unknown, defaulting to 1000
[  328.364931][T20139] 8021q: adding VLAN 0 to HW filter on device bond112
[  328.369164][T20139] bond111: (slave bond112): making interface the new active one
[  328.373042][T20139] bond111: (slave bond112): Enslaving as an active interface with an up link
[  328.579979][T20152] net_ratelimit: 10 callbacks suppressed
[  328.579992][T20152] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  328.647256][T20156] __nla_validate_parse: 21 callbacks suppressed
[  328.647266][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4607'.
[  328.664571][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.667349][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.753654][T20166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4609'.
[  328.797029][T20169] syzkaller0: entered promiscuous mode
[  328.799530][T20169] syzkaller0: entered allmulticast mode
[  328.804949][T20168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.831031][T20168] tipc: Resetting bearer <eth:syzkaller0>
[  328.846037][T20168] tipc: Disabling bearer <eth:syzkaller0>
[  328.991866][T20181] 8021q: adding VLAN 0 to HW filter on device bond94
[  328.995728][T20181] bond93: (slave bond94): making interface the new active one
[  328.999144][T20181] bond93: (slave bond94): Enslaving as an active interface with an up link
[  329.029446][T20185] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  329.073761][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4614'.
[  329.108103][T20189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4615'.
[  329.114678][T20189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4615'.
[  329.120053][T20189] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4615'.
[  329.176696][T20196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4617'.
[  329.240610][T20197] validate_nla: 2 callbacks suppressed
[  329.240620][T20197] netlink: 'syz.1.4617': attribute type 25 has an invalid length.
[  329.245383][T20197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4617'.
[  329.629596][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'.
[  329.652303][T20205] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  329.698091][T20205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4621'.
[  329.714518][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.739006][T20209] netlink: 'syz.2.4622': attribute type 7 has an invalid length.
[  329.778570][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.782173][T20211] tap0: linktype set to 804
[  329.784617][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.787137][T20211] tap0: linktype set to 804
[  329.789440][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.792304][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.794650][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.796478][T20211] tap0: linktype set to 804
[  329.798220][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.800086][T20211] tap0: linktype set to 804
[  329.802001][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.804409][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.806402][T20211] tap0: linktype set to 804
[  329.808183][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.810062][T20211] tap0: linktype set to 804
[  329.813275][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.815618][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.817529][T20211] tap0: linktype set to 804
[  329.819277][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.821329][T20211] tap0: linktype set to 804
[  329.823112][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.824971][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.826891][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.828832][T20211] tap0: linktype set to 804
[  329.830777][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.832679][T20211] tap0: linktype set to 804
[  329.834469][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.836836][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.838744][T20211] tap0: linktype set to 804
[  329.840559][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.842467][T20211] tap0: linktype set to 804
[  329.844212][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.846400][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.848304][T20211] tap0: linktype set to 804
[  329.850054][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.852304][T20211] tap0: linktype set to 804
[  329.854311][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.856506][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.858430][T20211] tap0: linktype set to 804
[  329.860350][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.862299][T20211] tap0: linktype set to 804
[  329.864097][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.871191][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.873474][T20211] tap0: linktype set to 804
[  329.875602][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.877428][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.879709][T20211] tap0: linktype set to 804
[  329.882042][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.884251][T20211] tap0: linktype set to 804
[  329.886435][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.888259][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.890869][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.893067][T20211] tap0: linktype set to 804
[  329.895221][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.897319][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.899627][T20211] tap0: linktype set to 804
[  329.901926][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.904217][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.906575][T20211] tap0: linktype set to 804
[  329.908672][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.911052][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.913388][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.915400][T20211] tap0: linktype set to 804
[  329.917392][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.919284][T20211] tap0: linktype set to 804
[  329.922105][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.924576][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.926749][T20211] tap0: linktype set to 804
[  329.929107][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.933272][T20211] tap0: linktype set to 804
[  329.935637][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.938165][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.944334][T20211] tap0: linktype set to 804
[  329.946661][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.949163][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.952692][T20211] tap0: linktype set to 804
[  329.955069][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.957583][T20211] tap0: linktype set to 804
[  329.959881][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.962839][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.965601][T20211] tap0: linktype set to 804
[  329.967956][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.972104][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.974615][T20211] tap0: linktype set to 804
[  329.976809][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.979102][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.981338][T20211] tap0: linktype set to 804
[  329.983106][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.985383][T20211] tap0: tun_chr_ioctl cmd 1074025677
[  329.987285][T20211] tap0: linktype set to 804
[  329.989051][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.991590][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.993855][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.996119][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  329.998394][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  330.000873][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  330.003150][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  330.005390][T20210] tap0: tun_chr_ioctl cmd 1074025673
[  330.103488][T20218] netlink: 'syz.2.4625': attribute type 1 has an invalid length.
[  330.125929][T20221] sctp: [Deprecated]: syz.1.4624 (pid 20221) Use of struct sctp_assoc_value in delayed_ack socket option.
[  330.125929][T20221] Use struct sctp_sack_info instead
[  330.136831][T20218] 8021q: adding VLAN 0 to HW filter on device bond114
[  330.141629][T20218] bond113: (slave bond114): making interface the new active one
[  330.145974][T20218] bond113: (slave bond114): Enslaving as an active interface with an up link
[  330.275481][T20229] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  330.625092][T20252] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  330.693132][T20256] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  330.725713][T20258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.744491][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.747248][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.756692][T20290] netlink: 'syz.2.4646': attribute type 1 has an invalid length.
[  331.803522][T20290] 8021q: adding VLAN 0 to HW filter on device bond116
[  331.807360][T20290] bond115: (slave bond116): making interface the new active one
[  331.810840][T20290] bond115: (slave bond116): Enslaving as an active interface with an up link
[  331.829927][T20284] veth13: entered promiscuous mode
[  331.845124][T20295] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  331.858753][T20298] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  332.123744][T20329] batman_adv: batadv0: Adding interface: dummy0
[  332.126383][T20329] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  332.137673][T20329] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  332.300823][T20344] netlink: 'syz.0.4658': attribute type 1 has an invalid length.
[  332.337873][T20344] 8021q: adding VLAN 0 to HW filter on device bond103
[  332.343922][T20344] bond102: (slave bond103): making interface the new active one
[  332.347255][T20344] bond102: (slave bond103): Enslaving as an active interface with an up link
[  332.388932][T20354] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  332.401637][T20354] netlink: 'syz.0.4660': attribute type 10 has an invalid length.
[  332.404503][T20354] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  332.408786][T20354] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  332.415393][T20354] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  332.962748][T20368] 8021q: adding VLAN 0 to HW filter on device bond95
[  332.975661][T20368] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  332.979146][T20368] bond95: (slave macvlan2): Enslaving as an active interface with an up link
[  333.060705][T20371] ip6tnl7: entered promiscuous mode
[  333.062582][T20371] ip6tnl7: entered allmulticast mode
[  333.140755][T20375] netlink: 'syz.1.4668': attribute type 1 has an invalid length.
[  333.164407][T20375] 8021q: adding VLAN 0 to HW filter on device bond97
[  333.167802][T20375] bond96: (slave bond97): making interface the new active one
[  333.173006][T20375] bond96: (slave bond97): Enslaving as an active interface with an up link
[  333.345848][T20391] netlink: 'syz.2.4674': attribute type 8 has an invalid length.
[  333.428732][T20404] ip6tnl2: entered promiscuous mode
[  333.432528][T20404] ip6tnl2: entered allmulticast mode
[  333.555947][T20421] netlink: 'syz.2.4682': attribute type 1 has an invalid length.
[  333.614874][T20421] 8021q: adding VLAN 0 to HW filter on device bond118
[  333.618928][T20421] bond117: (slave bond118): making interface the new active one
[  333.622782][T20421] bond117: (slave bond118): Enslaving as an active interface with an up link
[  333.704599][T20441] net_ratelimit: 6 callbacks suppressed
[  333.704609][T20441] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  333.750375][T20441] __nla_validate_parse: 20 callbacks suppressed
[  333.750385][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'.
[  333.809834][T20452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4691'.
[  333.864484][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.867382][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.937345][T20463] netlink: 'syz.1.4695': attribute type 1 has an invalid length.
[  333.993367][T20463] bond98: (slave gretap3): making interface the new active one
[  333.997537][T20463] bond98: (slave gretap3): Enslaving as an active interface with an up link
[  334.004547][T20465] veth0: entered promiscuous mode
[  334.007102][T20464] veth0: left promiscuous mode
[  334.044817][T20470] xt_socket: unknown flags 0xd0
[  334.113028][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4703'.
[  334.192479][T20487] netlink: 'syz.2.4706': attribute type 11 has an invalid length.
[  334.195129][T20487] netlink: 'syz.2.4706': attribute type 11 has an invalid length.
[  334.198234][T20487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4706'.
[  334.301821][T20491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4708'.
[  334.381817][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4715'.
[  334.411180][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4716'.
[  334.430697][T20510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4717'.
[  334.574285][T20528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4724'.
[  334.595952][T20522] 8021q: VLANs not supported on ip_vti0
[  334.621091][T20533] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.647853][T20537] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4728'.
[  334.904501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.814553][T20610] netlink: 'syz.0.4752': attribute type 1 has an invalid length.
[  335.844274][T20610] 8021q: adding VLAN 0 to HW filter on device bond105
[  335.848495][T20610] bond104: (slave bond105): making interface the new active one
[  335.852233][T20610] bond104: (slave bond105): Enslaving as an active interface with an up link
[  335.893458][T20618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.899590][T20618] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.949226][T20617] tipc: Disabling bearer <eth:syzkaller0>
[  335.955585][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.958360][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.077561][T20637] netlink: 'syz.0.4761': attribute type 7 has an invalid length.
[  336.375129][T20662] netlink: 'syz.2.4771': attribute type 1 has an invalid length.
[  336.399718][T20662] 8021q: adding VLAN 0 to HW filter on device bond120
[  336.406891][T20662] bond119: (slave bond120): making interface the new active one
[  336.410397][T20662] bond119: (slave bond120): Enslaving as an active interface with an up link
[  336.516059][T20672] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  336.536511][T20671] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  336.627888][T20686] netlink: 'syz.0.4778': attribute type 3 has an invalid length.
[  336.687396][T20693] atomic_op ffff8881223da998 conn xmit_atomic 0000000000000000
[  336.717121][T20693] syzkaller0: entered promiscuous mode
[  336.718693][T20695] netlink: 'syz.2.4781': attribute type 1 has an invalid length.
[  336.719100][T20693] syzkaller0: entered allmulticast mode
[  336.740446][T20693] netlink: 'syz.0.4780': attribute type 11 has an invalid length.
[  336.765308][T20695] 8021q: adding VLAN 0 to HW filter on device bond122
[  336.768846][T20695] bond121: (slave bond122): making interface the new active one
[  336.771873][T20695] bond121: (slave bond122): Enslaving as an active interface with an up link
[  336.839824][T20701] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  336.978594][T20716] netlink: 'syz.2.4789': attribute type 1 has an invalid length.
[  336.985612][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.988362][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.027048][T20716] 8021q: adding VLAN 0 to HW filter on device bond124
[  337.031938][T20716] bond123: (slave bond124): making interface the new active one
[  337.035613][T20716] bond123: (slave bond124): Enslaving as an active interface with an up link
[  337.058969][T20729] sock: sock_timestamping_bind_phc: sock not bind to device
[  337.174771][T20737] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  337.856708][T20791] netlink: 'syz.1.4812': attribute type 1 has an invalid length.
[  337.883443][T20791] 8021q: adding VLAN 0 to HW filter on device bond100
[  337.887206][T20791] bond99: (slave bond100): making interface the new active one
[  337.890247][T20791] bond99: (slave bond100): Enslaving as an active interface with an up link
[  338.300915][T20825] netlink: 'syz.1.4821': attribute type 6 has an invalid length.
[  338.615562][T20845] netlink: 'syz.2.4827': attribute type 1 has an invalid length.
[  338.782714][T20855] net_ratelimit: 4 callbacks suppressed
[  338.782729][T20855] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  338.858364][T20865] __nla_validate_parse: 15 callbacks suppressed
[  338.858378][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'.
[  338.985121][T20876] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4836'.
[  338.988191][T20876] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4836'.
[  339.064777][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.068302][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.090287][T20883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4838'.
[  339.111730][T20881] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4836'.
[  339.156653][T20888] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  339.218232][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4840'.
[  339.269879][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'.
[  339.301648][T20893] pim6reg: entered allmulticast mode
[  339.304619][T20893] pim6reg: left allmulticast mode
[  339.467961][T20905] lo speed is unknown, defaulting to 1000
[  339.472773][T20905] lo speed is unknown, defaulting to 1000
[  339.476086][T20905] lo speed is unknown, defaulting to 1000
[  339.999141][T20916] tap0: tun_chr_ioctl cmd 1074025677
[  340.002030][T20916] tap0: linktype set to 0
[  340.080468][T20918] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  340.104673][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.151309][T20923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4851'.
[  340.340800][T20937] netlink: 'syz.1.4856': attribute type 83 has an invalid length.
[  340.382277][T20937] lo speed is unknown, defaulting to 1000
[  340.386058][T20937] lo speed is unknown, defaulting to 1000
[  340.389809][T20937] lo speed is unknown, defaulting to 1000
[  341.097720][T20958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4861'.
[  341.144486][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.147542][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.274742][T20966] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  341.809908][T20975] netlink: 'syz.2.4864': attribute type 4 has an invalid length.
[  341.893172][T20982] netlink: 'syz.0.4868': attribute type 1 has an invalid length.
[  341.944151][T20982] 8021q: adding VLAN 0 to HW filter on device bond107
[  341.957921][T20982] bond106: (slave bond107): making interface the new active one
[  341.963488][T20982] bond106: (slave bond107): Enslaving as an active interface with an up link
[  341.968797][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4871'.
[  341.991583][T20993] netlink: 'syz.2.4871': attribute type 15 has an invalid length.
[  342.147056][T20995] netlink: 'syz.1.4872': attribute type 4 has an invalid length.
[  342.184595][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.204725][T21021] netlink: 'syz.1.4880': attribute type 1 has an invalid length.
[  342.253938][T21021] 8021q: adding VLAN 0 to HW filter on device bond102
[  342.269601][T21021] bond101: (slave bond102): making interface the new active one
[  342.273473][T21021] bond101: (slave bond102): Enslaving as an active interface with an up link
[  342.335173][T21028] netlink: 'syz.0.4881': attribute type 15 has an invalid length.
[  342.351931][  T127] block nbd2: Possible stuck request ffff888020613200: control (read@0,1024B). Runtime 60 seconds
[  342.356616][  T127] block nbd2: Possible stuck request ffff888020613400: control (read@1024,1024B). Runtime 60 seconds
[  342.370570][  T127] block nbd2: Possible stuck request ffff888020613600: control (read@2048,1024B). Runtime 60 seconds
[  342.375445][  T127] block nbd2: Possible stuck request ffff888020613800: control (read@3072,1024B). Runtime 60 seconds
[  342.639461][T21059] netlink: 'syz.2.4891': attribute type 1 has an invalid length.
[  342.645979][T21057] netlink: 'syz.1.4890': attribute type 1 has an invalid length.
[  342.681491][T21057] 8021q: adding VLAN 0 to HW filter on device bond104
[  342.684767][T21057] bond103: (slave bond104): making interface the new active one
[  342.687572][T21057] bond103: (slave bond104): Enslaving as an active interface with an up link
[  343.128145][T21093] netlink: 'syz.2.4901': attribute type 1 has an invalid length.
[  343.173312][T21093] 8021q: adding VLAN 0 to HW filter on device bond127
[  343.178193][T21093] bond126: (slave bond127): making interface the new active one
[  343.182457][T21093] bond126: (slave bond127): Enslaving as an active interface with an up link
[  343.211340][T21097] netlink: 'syz.2.4902': attribute type 1 has an invalid length.
[  343.227292][T21097] bond128: entered promiscuous mode
[  343.229611][T21097] 8021q: adding VLAN 0 to HW filter on device bond128
[  343.244730][T21097] sctp: [Deprecated]: syz.2.4902 (pid 21097) Use of struct sctp_assoc_value in delayed_ack socket option.
[  343.244730][T21097] Use struct sctp_sack_info instead
[  343.259713][T21097] bond128: (slave bridge18): making interface the new active one
[  343.263051][T21097] bridge18: entered promiscuous mode
[  343.274603][T21097] bond128: (slave bridge18): Enslaving as an active interface with an up link
[  343.389733][T21104] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.478095][T21112] bridge0: port 1(erspan0) entered blocking state
[  343.483003][T21112] bridge0: port 1(erspan0) entered disabled state
[  343.485320][T21112] erspan0: entered allmulticast mode
[  343.488341][T21112] erspan0: entered promiscuous mode
[  343.498793][T21112] erspan0: left allmulticast mode
[  343.502905][T21112] erspan0: left promiscuous mode
[  343.505806][T21112] bridge0: port 1(erspan0) entered disabled state
[  343.572770][T21114] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  343.609350][T21117] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  343.870004][T21146] __nla_validate_parse: 14 callbacks suppressed
[  343.870019][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4920'.
[  343.923920][T21152] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4924'.
[  343.954649][T21156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4923'.
[  344.274518][    C0] net_ratelimit: 7 callbacks suppressed
[  344.274534][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.280041][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.314545][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.344618][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.348117][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.547128][ T5271] udevd[5271]: worker [17576] /devices/virtual/block/nbd2 is taking a long time
[  347.012530][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4930'.
[  347.134249][T21195] ip6tnl2: entered promiscuous mode
[  347.174462][T21199] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.178479][T21199] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.197750][T21201] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  347.222938][T21199] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.227276][T21199] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.235510][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4939'.
[  347.257908][T21203] 8021q: adding VLAN 0 to HW filter on device batadv3
[  347.263646][T21203] batadv3: entered promiscuous mode
[  347.266500][T21203] team0: Failed to send port change of device batadv3 via netlink (err -105)
[  347.270762][T21203] team0: Failed to send options change via netlink (err -105)
[  347.275520][T21203] team0: Port device batadv3 added
[  347.282023][T21199] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.286005][T21199] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.343672][T21199] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.347017][T21199] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.384606][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.388143][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.421429][T21213] validate_nla: 2 callbacks suppressed
[  347.421439][T21213] netlink: 'syz.1.4941': attribute type 12 has an invalid length.
[  347.426655][T21213] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4941'.
[  347.484977][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.488706][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.501014][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  347.504704][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.513867][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  347.518556][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.530787][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  347.533747][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.639624][T21229] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4945'.
[  347.645330][T21229] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4945'.
[  347.649050][T21229] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4945'.
[  347.653270][T21229] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4945'.
[  347.659234][T21228] netlink: 'syz.1.4945': attribute type 4 has an invalid length.
[  347.708438][T21232] syzkaller0: left promiscuous mode
[  347.714393][T21232] syzkaller0: left allmulticast mode
[  347.845507][T21238] netlink: 'syz.1.4948': attribute type 1 has an invalid length.
[  347.887542][T21238] 8021q: adding VLAN 0 to HW filter on device bond106
[  347.892820][T21238] bond105: (slave bond106): making interface the new active one
[  347.895481][T21238] bond105: (slave bond106): Enslaving as an active interface with an up link
[  348.054435][T21253] netlink: 'syz.1.4953': attribute type 21 has an invalid length.
[  348.149365][T21262] netlink: 'syz.1.4956': attribute type 1 has an invalid length.
[  348.179273][T21262] 8021q: adding VLAN 0 to HW filter on device bond108
[  348.185317][T21262] bond107: (slave bond108): making interface the new active one
[  348.188327][T21262] bond107: (slave bond108): Enslaving as an active interface with an up link
[  348.361862][T21288] netlink: 'syz.2.4966': attribute type 1 has an invalid length.
[  348.394879][T21288] 8021q: adding VLAN 0 to HW filter on device bond130
[  348.403827][T21288] bond129: (slave bond130): making interface the new active one
[  348.407694][T21288] bond129: (slave bond130): Enslaving as an active interface with an up link
[  348.411822][T21289] lo speed is unknown, defaulting to 1000
[  348.424554][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.432420][T21289] lo speed is unknown, defaulting to 1000
[  348.436692][T21289] lo speed is unknown, defaulting to 1000
[  348.659697][T21309] netlink: 'syz.0.4974': attribute type 1 has an invalid length.
[  348.762130][T21309] 8021q: adding VLAN 0 to HW filter on device bond109
[  348.767399][T21309] bond108: (slave bond109): making interface the new active one
[  348.770649][T21309] bond108: (slave bond109): Enslaving as an active interface with an up link
[  349.355486][T21344] netlink: 'syz.1.4986': attribute type 1 has an invalid length.
[  349.423963][T21344] 8021q: adding VLAN 0 to HW filter on device bond110
[  349.430844][T21344] bond109: (slave bond110): making interface the new active one
[  349.434605][T21344] bond109: (slave bond110): Enslaving as an active interface with an up link
[  349.464694][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.468373][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.508004][T21355] netlink: 'syz.1.4989': attribute type 1 has an invalid length.
[  349.514186][T21355] __nla_validate_parse: 35 callbacks suppressed
[  349.514198][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4989'.
[  349.535833][T21355] ip6_tunnel: non-ECT from fb80:0000:0000:0000:0000:0000:0000:00aa with DS=0xe
[  349.657441][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4992'.
[  349.667050][T21368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4992'.
[  349.667066][T21366] netlink: 'syz.1.4994': attribute type 21 has an invalid length.
[  349.747113][T21371] 8021q: adding VLAN 0 to HW filter on device bond112
[  349.750531][T21371] bond111: (slave bond112): making interface the new active one
[  349.753458][T21371] bond111: (slave bond112): Enslaving as an active interface with an up link
[  349.783457][T21378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4997'.
[  349.790558][T21378] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  349.795976][T21376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.811832][T21376] syzkaller0: entered promiscuous mode
[  349.814765][T21376] syzkaller0: entered allmulticast mode
[  349.860939][T21376] tipc: Resetting bearer <eth:syzkaller0>
[  349.889692][T21376] tipc: Resetting bearer <eth:syzkaller0>
[  349.904626][T21376] tipc: Disabling bearer <eth:syzkaller0>
[  349.964583][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5000'.
[  350.028182][T21386] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20002
[  350.225707][T21392] 8021q: adding VLAN 0 to HW filter on device bond114
[  350.229019][T21392] bond113: (slave bond114): making interface the new active one
[  350.232108][T21392] bond113: (slave bond114): Enslaving as an active interface with an up link
[  350.504498][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.872706][T21425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5013'.
[  351.365700][T21458] syzkaller0: left promiscuous mode
[  351.367880][T21458] syzkaller0: left allmulticast mode
[  351.424313][T21462] syzkaller0: entered promiscuous mode
[  351.426533][T21462] syzkaller0: entered allmulticast mode
[  351.554496][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.557841][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.195638][T21517] 8021q: adding VLAN 0 to HW filter on device bond132
[  352.200654][T21517] bond131: (slave bond132): making interface the new active one
[  352.204461][T21517] bond131: (slave bond132): Enslaving as an active interface with an up link
[  352.594630][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.598250][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.867059][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5050'.
[  353.082297][T21521] delete_channel: no stack
[  353.158250][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5058'.
[  353.337260][T21555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5060'.
[  353.498313][T20242] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  353.501223][T21565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5064'.
[  353.503676][T20242] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  353.512241][T20242] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  353.519485][T21564] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  353.527974][ T5691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  353.547409][T21564] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  353.624583][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.647993][T21577] validate_nla: 5 callbacks suppressed
[  353.648006][T21577] netlink: 'syz.0.5067': attribute type 1 has an invalid length.
[  353.684530][T21577] 8021q: adding VLAN 0 to HW filter on device bond111
[  353.689621][T21577] bond110: (slave bond111): making interface the new active one
[  353.693547][T21577] bond110: (slave bond111): Enslaving as an active interface with an up link
[  353.749811][T21585] geneve0: entered allmulticast mode
[  353.934838][T21594] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  353.959031][T21593] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  354.037332][T21596] netlink: ct family unspecified
[  354.078815][T21598] netlink: 'syz.2.5075': attribute type 1 has an invalid length.
[  354.119922][T21598] 8021q: adding VLAN 0 to HW filter on device bond134
[  354.125321][T21598] bond133: (slave bond134): making interface the new active one
[  354.128923][T21598] bond133: (slave bond134): Enslaving as an active interface with an up link
[  354.252227][T21606] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  354.310003][T21612] netlink: 'syz.2.5078': attribute type 1 has an invalid length.
[  354.312939][T21613] netlink: 'syz.2.5078': attribute type 1 has an invalid length.
[  354.313747][T21612] netlink: 'syz.2.5078': attribute type 2 has an invalid length.
[  354.318747][T21613] netlink: 'syz.2.5078': attribute type 2 has an invalid length.
[  354.655423][T21624] netlink: 'syz.1.5082': attribute type 1 has an invalid length.
[  354.664503][    C0] net_ratelimit: 1 callbacks suppressed
[  354.664512][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.669050][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.676606][T21627] sctp: [Deprecated]: syz.0.5083 (pid 21627) Use of int in max_burst socket option.
[  354.676606][T21627] Use struct sctp_assoc_value instead
[  354.703506][T21624] 8021q: adding VLAN 0 to HW filter on device bond116
[  354.707235][T21624] bond115: (slave bond116): making interface the new active one
[  354.711245][T21624] bond115: (slave bond116): Enslaving as an active interface with an up link
[  354.803137][T21635] geneve0: entered allmulticast mode
[  354.873587][T21641] IPVS: set_ctl: invalid protocol: 115 172.30.0.2:20003
[  354.923710][T21647] netlink: 'syz.0.5092': attribute type 1 has an invalid length.
[  354.936777][T21650] __nla_validate_parse: 4 callbacks suppressed
[  354.936791][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5090'.
[  354.998622][T21647] 8021q: adding VLAN 0 to HW filter on device bond113
[  355.010411][T21647] bond112: (slave bond113): making interface the new active one
[  355.014052][T21647] bond112: (slave bond113): Enslaving as an active interface with an up link
[  355.033989][T21658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5093'.
[  355.039247][T21658] netlink: 'syz.1.5093': attribute type 1 has an invalid length.
[  355.074712][T21658] 8021q: adding VLAN 0 to HW filter on device bond117
[  355.103154][T21652] bond117: (slave veth13): Enslaving as an active interface with a down link
[  355.174408][T21666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5096'.
[  355.203089][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5101'.
[  355.252178][T21682] netlink: 'syz.2.5102': attribute type 1 has an invalid length.
[  355.287506][T21688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5103'.
[  355.317611][T21682] 8021q: adding VLAN 0 to HW filter on device bond136
[  355.321164][T21682] bond135: (slave bond136): making interface the new active one
[  355.324263][T21682] bond135: (slave bond136): Enslaving as an active interface with an up link
[  355.413898][T21700] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  355.476718][T21707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5109'.
[  355.487819][T21689] veth0: entered promiscuous mode
[  355.534424][T21715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5111'.
[  355.542741][T21687] veth0: left promiscuous mode
[  355.655824][T21721] 8021q: adding VLAN 0 to HW filter on device bond119
[  355.666640][T21721] bond118: (slave bond119): making interface the new active one
[  355.671130][T21721] bond118: (slave bond119): Enslaving as an active interface with an up link
[  355.704528][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.778443][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5120'.
[  355.926206][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'.
[  355.978381][T21762] 8021q: adding VLAN 0 to HW filter on device bond115
[  355.984903][T21762] bond114: (slave bond115): making interface the new active one
[  355.988339][T21762] bond114: (slave bond115): Enslaving as an active interface with an up link
[  356.096386][T21787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5137'.
[  356.197423][T21794] 8021q: adding VLAN 0 to HW filter on device bond138
[  356.202000][T21794] bond137: (slave bond138): making interface the new active one
[  356.205274][T21794] bond137: (slave bond138): Enslaving as an active interface with an up link
[  356.489703][T21822] 8021q: adding VLAN 0 to HW filter on device bond140
[  356.495225][T21822] bond139: (slave bond140): making interface the new active one
[  356.499026][T21822] bond139: (slave bond140): Enslaving as an active interface with an up link
[  356.754503][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.758134][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.799872][T21845] syzkaller0: entered promiscuous mode
[  356.803806][T21845] syzkaller0: entered allmulticast mode
[  356.806442][T21844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.150092][T21871] syzkaller1: entered promiscuous mode
[  357.155204][T21871] syzkaller1: entered allmulticast mode
[  357.465088][T21898] tipc: Resetting bearer <eth:syzkaller0>
[  357.812194][T21912] lo speed is unknown, defaulting to 1000
[  357.815125][T21912] lo speed is unknown, defaulting to 1000
[  357.818292][T21912] lo speed is unknown, defaulting to 1000
[  357.864771][T21915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.236883][T21931] 8021q: adding VLAN 0 to HW filter on device bond121
[  358.242098][T21931] bond120: (slave bond121): making interface the new active one
[  358.249806][T21931] bond120: (slave bond121): Enslaving as an active interface with an up link
[  358.639260][T21955] lo speed is unknown, defaulting to 1000
[  358.654727][T21955] lo speed is unknown, defaulting to 1000
[  358.678914][T21955] lo speed is unknown, defaulting to 1000
[  358.812930][T21977] validate_nla: 9 callbacks suppressed
[  358.812941][T21977] netlink: 'syz.1.5197': attribute type 1 has an invalid length.
[  358.877802][T21977] 8021q: adding VLAN 0 to HW filter on device bond123
[  358.887261][T21977] bond122: (slave bond123): making interface the new active one
[  358.890780][T21977] bond122: (slave bond123): Enslaving as an active interface with an up link
[  358.934859][T21983] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  358.959772][T21965] netlink: 'syz.2.5188': attribute type 6 has an invalid length.
[  359.149728][T21990] netlink: 'syz.0.5203': attribute type 12 has an invalid length.
[  359.362819][T22009] lo: entered allmulticast mode
[  359.366124][T22009] lo: left allmulticast mode
[  359.558413][T22026] netlink: 'syz.2.5215': attribute type 1 has an invalid length.
[  359.659359][T22029] 8021q: adding VLAN 0 to HW filter on device bond142
[  359.664372][T22029] bond141: (slave bond142): making interface the new active one
[  359.669954][T22029] bond141: (slave bond142): Enslaving as an active interface with an up link
[  359.681178][T22031] vti1: entered promiscuous mode
[  359.689706][T22031] vti1: entered allmulticast mode
[  360.219258][T22075] netlink: 'syz.1.5226': attribute type 1 has an invalid length.
[  360.268929][T22079] __nla_validate_parse: 22 callbacks suppressed
[  360.268939][T22079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5227'.
[  360.282216][T22075] 8021q: adding VLAN 0 to HW filter on device bond125
[  360.285945][T22075] bond124: (slave bond125): making interface the new active one
[  360.289380][T22075] bond124: (slave bond125): Enslaving as an active interface with an up link
[  360.318969][T22081] IPVS: Error connecting to the multicast addr
[  360.359125][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5227'.
[  360.367818][T22092] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.566319][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5234'.
[  360.728886][T22112] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  360.769128][T22114] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  360.852708][T22119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5241'.
[  360.947545][T22123] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  360.951330][T22123] syzkaller1: entered promiscuous mode
[  360.953287][T22123] syzkaller1: entered allmulticast mode
[  360.966553][T22122] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  361.122842][T22131] netlink: 'syz.0.5246': attribute type 1 has an invalid length.
[  361.156118][T22131] 8021q: adding VLAN 0 to HW filter on device bond117
[  361.161878][T22131] bond116: (slave bond117): making interface the new active one
[  361.164816][T22131] bond116: (slave bond117): Enslaving as an active interface with an up link
[  361.166497][T22136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5247'.
[  361.201205][T22138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5248'.
[  361.267048][T22145] netlink: 'syz.0.5250': attribute type 83 has an invalid length.
[  361.325547][T22148] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  361.365387][T22154] netlink: 'syz.0.5254': attribute type 1 has an invalid length.
[  361.368246][T22154] netlink: 'syz.0.5254': attribute type 1 has an invalid length.
[  361.371872][T22154] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5254'.
[  361.376121][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5255'.
[  361.383440][T22154] ipvlan1: entered promiscuous mode
[  361.385560][T22154] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  361.419482][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'.
[  361.497253][T22179] openvswitch: netlink: Flow key attr not present in new flow.
[  361.556863][T22185] lo speed is unknown, defaulting to 1000
[  361.559634][T22185] lo speed is unknown, defaulting to 1000
[  361.562707][T22185] lo speed is unknown, defaulting to 1000
[  361.591220][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5264'.
[  362.077496][T22209] netlink: 'syz.0.5272': attribute type 1 has an invalid length.
[  362.125204][T22209] 8021q: adding VLAN 0 to HW filter on device bond119
[  362.128582][T22209] bond118: (slave bond119): making interface the new active one
[  362.131967][T22209] bond118: (slave bond119): Enslaving as an active interface with an up link
[  362.139611][T22147] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  362.829113][T22262] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  362.864623][T22261] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  363.088125][T22268] nbd: error processing sock list
[  363.090997][T22268] block nbd3: shutting down sockets
[  363.168446][T22276] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  363.190595][T22268] nbd3: detected capacity change from 0 to 127
[  363.301212][T22267] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  363.331852][   T57] block nbd3: Receive control failed (result -104)
[  363.599131][T22306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.039486][T22342] validate_nla: 9 callbacks suppressed
[  364.039496][T22342] netlink: 'syz.0.5313': attribute type 10 has an invalid length.
[  364.051434][T22342] geneve0: left allmulticast mode
[  364.060006][T22342] geneve0: entered promiscuous mode
[  364.066033][T22342] team0: Port device geneve0 added
[  364.086317][T22342] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  364.259197][T22360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  364.266626][T22362] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  364.370291][   T33] audit: type=1800 audit(1755219769.524:13): pid=22366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5321" name=449D06 dev="tmpfs" ino=8718 res=0 errno=0
[  365.319109][T22435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.341885][T22435] __nla_validate_parse: 21 callbacks suppressed
[  365.341899][T22435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5345'.
[  365.347921][T22435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5345'.
[  365.392476][T22437] netlink: 'syz.0.5346': attribute type 1 has an invalid length.
[  365.580404][T22439] netlink: 'syz.0.5347': attribute type 1 has an invalid length.
[  365.672631][T22447] dvmrp1: entered allmulticast mode
[  365.909494][T22465] netlink: 'syz.0.5354': attribute type 12 has an invalid length.
[  366.006147][T22469] netlink: 'syz.2.5355': attribute type 1 has an invalid length.
[  366.208343][T22479] bridge0: entered allmulticast mode
[  366.324511][T22486] lo speed is unknown, defaulting to 1000
[  366.328460][T22486] lo speed is unknown, defaulting to 1000
[  366.331964][T22486] lo speed is unknown, defaulting to 1000
[  366.424535][T22501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5366'.
[  366.527039][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  366.530404][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  366.533054][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  366.535415][  T127] block nbd3: Connection timed out, retrying (0/1 alive)
[  366.538378][  T127] block nbd3: Dead connection, failed to find a fallback
[  366.542390][  T127] block nbd3: shutting down sockets
[  366.544245][  T127] blk_print_req_error: 138 callbacks suppressed
[  366.544253][  T127] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.549480][  T127] buffer_io_error: 138 callbacks suppressed
[  366.549489][  T127] Buffer I/O error on dev nbd3, logical block 3, async page read
[  366.554510][  T127] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.557617][  T127] Buffer I/O error on dev nbd3, logical block 2, async page read
[  366.561753][  T127] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.565454][  T127] Buffer I/O error on dev nbd3, logical block 1, async page read
[  366.568071][  T127] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.572112][  T127] Buffer I/O error on dev nbd3, logical block 0, async page read
[  366.576062][T15916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.579054][T15916] Buffer I/O error on dev nbd3, logical block 0, async page read
[  366.581801][T15916] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.585062][T15916] Buffer I/O error on dev nbd3, logical block 1, async page read
[  366.587688][T15916] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.590727][T15916] Buffer I/O error on dev nbd3, logical block 2, async page read
[  366.593345][T15916] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.596403][T15916] Buffer I/O error on dev nbd3, logical block 3, async page read
[  366.599277][T15916] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.602367][T15916] Buffer I/O error on dev nbd3, logical block 0, async page read
[  366.605558][T15916] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  366.608837][T15916] Buffer I/O error on dev nbd3, logical block 1, async page read
[  366.613141][T15916] ldm_validate_partition_table(): Disk read failed.
[  366.616197][T15916] Dev nbd3: unable to read RDB block 0
[  366.618853][T15916]  nbd3: unable to read partition table
[  366.632441][T15916] ldm_validate_partition_table(): Disk read failed.
[  366.635764][T15916] Dev nbd3: unable to read RDB block 0
[  366.639277][T15916]  nbd3: unable to read partition table
[  366.776063][T22517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5369'.
[  366.939516][T22530] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20000
[  366.981883][T22530] netlink: 'syz.1.5372': attribute type 7 has an invalid length.
[  366.984992][T22530] netlink: 'syz.1.5372': attribute type 3 has an invalid length.
[  366.995139][T22530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5372'.
[  367.017277][T22524] lo speed is unknown, defaulting to 1000
[  367.032921][T22524] lo speed is unknown, defaulting to 1000
[  367.044067][T22524] lo speed is unknown, defaulting to 1000
[  367.332534][T22543] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5376'.
[  367.407322][T22545] netlink: 'syz.2.5377': attribute type 1 has an invalid length.
[  367.694130][T22557] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5381'.
[  367.703108][T22557] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5381'.
Connection to localhost closed by remote host.
[  368.473055][T22556] syz.0.5381: vmalloc error: size 2625536, failed to allocated page array size 5128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  368.479056][T22556] CPU: 0 UID: 0 PID: 22556 Comm: syz.0.5381 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  368.479069][T22556] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.479073][T22556] Call Trace:
[  368.479077][T22556]  <TASK>
[  368.479081][T22556]  dump_stack_lvl+0x189/0x250
[  368.479095][T22556]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.479103][T22556]  ? __pfx__printk+0x10/0x10
[  368.479113][T22556]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  368.479121][T22556]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  368.479130][T22556]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  368.479140][T22556]  warn_alloc+0x214/0x310
[  368.479150][T22556]  ? __pfx_warn_alloc+0x10/0x10
[  368.479161][T22556]  ? __get_vm_area_node+0x28f/0x300
[  368.479173][T22556]  ? pfifo_fast_init+0x10d/0x6b0
[  368.479185][T22556]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  368.479191][T22556]  ? trace_mm_page_alloc+0x3e/0x150
[  368.479211][T22556]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  368.479220][T22556]  ? rcu_is_watching+0x15/0xb0
[  368.479232][T22556]  ? pfifo_fast_init+0x10d/0x6b0
[  368.479241][T22556]  ? pfifo_fast_init+0x10d/0x6b0
[  368.479250][T22556]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  368.479262][T22556]  ? pfifo_fast_init+0x10d/0x6b0
[  368.479275][T22556]  pfifo_fast_init+0x10d/0x6b0
[  368.479287][T22556]  qdisc_create_dflt+0x13b/0x4e0
[  368.479299][T22556]  mq_init+0x2dc/0x660
[  368.479315][T22556]  ? __pfx_mq_init+0x10/0x10
[  368.479323][T22556]  ? qdisc_alloc+0x7a1/0xaa0
[  368.479335][T22556]  ? __pfx_mq_init+0x10/0x10
[  368.479342][T22556]  qdisc_create+0x7ac/0xea0
[  368.479355][T22556]  tc_modify_qdisc+0x1538/0x20e0
[  368.479370][T22556]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  368.479391][T22556]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  368.479400][T22556]  rtnetlink_rcv_msg+0x77c/0xb70
[  368.479413][T22556]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  368.479423][T22556]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  368.479433][T22556]  ? ref_tracker_free+0x63a/0x7d0
[  368.479441][T22556]  ? __asan_memcpy+0x40/0x70
[  368.479451][T22556]  ? __pfx_ref_tracker_free+0x10/0x10
[  368.479463][T22556]  netlink_rcv_skb+0x208/0x470
[  368.479475][T22556]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  368.479486][T22556]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  368.479501][T22556]  ? netlink_deliver_tap+0x2e/0x1b0
[  368.479515][T22556]  netlink_unicast+0x82f/0x9e0
[  368.479529][T22556]  ? __pfx_netlink_unicast+0x10/0x10
[  368.479539][T22556]  ? netlink_sendmsg+0x642/0xb30
[  368.479549][T22556]  ? skb_put+0x11b/0x210
[  368.479561][T22556]  netlink_sendmsg+0x805/0xb30
[  368.479576][T22556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.479589][T22556]  ? aa_sock_msg_perm+0x94/0x160
[  368.479600][T22556]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  368.479609][T22556]  ? __pfx_netlink_sendmsg+0x10/0x10
[  368.479620][T22556]  __sock_sendmsg+0x21c/0x270
[  368.479631][T22556]  ____sys_sendmsg+0x505/0x830
[  368.479642][T22556]  ? __pfx_____sys_sendmsg+0x10/0x10
[  368.479653][T22556]  ? import_iovec+0x74/0xa0
[  368.479666][T22556]  ___sys_sendmsg+0x21f/0x2a0
[  368.479675][T22556]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.479697][T22556]  ? __fget_files+0x2a/0x420
[  368.479704][T22556]  ? __fget_files+0x3a0/0x420
[  368.479716][T22556]  __x64_sys_sendmsg+0x19b/0x260
[  368.479724][T22556]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  368.479737][T22556]  ? rcu_is_watching+0x15/0xb0
[  368.479750][T22556]  ? do_syscall_64+0xbe/0x3b0
[  368.479763][T22556]  do_syscall_64+0xfa/0x3b0
[  368.479773][T22556]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.479783][T22556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.479790][T22556]  ? exc_page_fault+0x9f/0xf0
[  368.479801][T22556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.479808][T22556] RIP: 0033:0x7fe60a38ebe9
[  368.479816][T22556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.479822][T22556] RSP: 002b:00007fe60b11b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  368.479831][T22556] RAX: ffffffffffffffda RBX: 00007fe60a5b5fa0 RCX: 00007fe60a38ebe9
[  368.479836][T22556] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  368.479841][T22556] RBP: 00007fe60a411e19 R08: 0000000000000000 R09: 0000000000000000
[  368.479845][T22556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.479849][T22556] R13: 00007fe60a5b6038 R14: 00007fe60a5b5fa0 R15: 00007ffef2bfaa18
[  368.479861][T22556]  </TASK>
[  368.479864][T22556] Mem-Info:
[  368.639313][T22556] active_anon:2932 inactive_anon:124 isolated_anon:0
[  368.639313][T22556]  active_file:951 inactive_file:30734 isolated_file:0
[  368.639313][T22556]  unevictable:1768 dirty:98 writeback:0
[  368.639313][T22556]  slab_reclaimable:11550 slab_unreclaimable:176106
[  368.639313][T22556]  mapped:16483 shmem:2400 pagetables:1029
[  368.639313][T22556]  sec_pagetables:0 bounce:0
[  368.639313][T22556]  kernel_misc_reclaimable:0
[  368.639313][T22556]  free:159641 free_pcp:549 free_cma:0
[  368.660477][T22556] Node 0 active_anon:4104kB inactive_anon:448kB active_file:2024kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30360kB dirty:224kB writeback:0kB shmem:4668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12732kB pagetables:2200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  368.674742][T22556] Node 1 active_anon:7624kB inactive_anon:48kB active_file:1780kB inactive_file:118036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35572kB dirty:168kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12144kB pagetables:1848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  368.688079][T22556] Node 0 DMA free:5120kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  368.698256][T22556] lowmem_reserve[]: 0 814 814 814 814
[  368.700087][T22556] Node 0 DMA32 free:204804kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4104kB inactive_anon:448kB active_file:2024kB inactive_file:72kB unevictable:3536kB writepending:224kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:712kB local_pcp:324kB free_cma:0kB
[  368.720546][T22556] lowmem_reserve[]: 0 0 0 0 0
[  368.722238][T22556] Node 1 DMA32 free:364328kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:160kB free_cma:0kB
[  368.750284][T22556] lowmem_reserve[]: 0 0 854 854 854
[  368.751995][T22556] Node 1 Normal free:73292kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7596kB inactive_anon:48kB active_file:1780kB inactive_file:114976kB unevictable:3536kB writepending:168kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:1312kB local_pcp:328kB free_cma:0kB
[  368.765793][T22556] lowmem_reserve[]: 0 0 0 0 0
[  368.767774][T22556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 1*4096kB (U) = 5120kB
[  368.772858][T22556] Node 0 DMA32: 174*4kB (UM) 352*8kB (UME) 693*16kB (UME) 622*32kB (UME) 234*64kB (UME) 172*128kB (UME) 106*256kB (UM) 88*512kB (UME) 60*1024kB (UM) 0*2048kB 0*4096kB = 205128kB
[  368.778723][T22556] Node 1 DMA32: 308*4kB (UM) 295*8kB (UME) 268*16kB (UME) 292*32kB (UME) 251*64kB (UME) 226*128kB (UME) 199*256kB (UME) 171*512kB (UM) 160*1024kB (UME) 0*2048kB 0*4096kB = 364552kB
[  368.785469][T22556] Node 1 Normal: 471*4kB (UME) 925*8kB (UME) 648*16kB (UME) 507*32kB (UME) 136*64kB (UME) 41*128kB (UM) 18*256kB (UME) 9*512kB (UM) 8*1024kB (UME) 3*2048kB (M) 0*4096kB = 73380kB
[  368.792333][T22556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.795381][T22556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  368.798478][T22556] 32104 total pagecache pages
[  368.800090][T22556] 0 pages in swap cache
[  368.801769][T22556] Free swap  = 124268kB
[  368.803189][T22556] Total swap = 124996kB
[  368.804578][T22556] 786301 pages RAM
[  368.805818][T22556] 0 pages HighMem/MovableOnly
[  368.807388][T22556] 240546 pages reserved
[  368.808809][T22556] 0 pages cma reserved
[  369.628124][T22557] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  369.632086][T22557] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  369.635593][T22557] CPU: 1 UID: 0 PID: 22557 Comm: syz.0.5381 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  369.639945][T22557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.643287][T22557] RIP: 0010:klist_remove+0x14a/0x340
[  369.645060][T22557] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 db bc f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea da bc f6 49 8b 44 24 58 48 89 44 24 08
[  369.651443][T22557] RSP: 0000:ffffc90007547600 EFLAGS: 00010202
[  369.653763][T22557] RAX: 000000000000000b RBX: ffff888033fb0000 RCX: 0000000000000000
[  369.656601][T22557] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  369.659836][T22557] RBP: ffffc900075476e8 R08: ffffffff8f870583 R09: 1ffffffff1f0e0b0
[  369.663135][T22557] R10: dffffc0000000000 R11: fffffbfff1f0e0b1 R12: 0000000000000000
[  369.666017][T22557] R13: 1ffff1102445758c R14: ffff8881222bac60 R15: dffffc0000000000
[  369.668679][T22557] FS:  00007fe6085f66c0(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  369.671623][T22557] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  369.673813][T22557] CR2: 0000561cc0050a20 CR3: 000000000df38000 CR4: 00000000000006f0
[  369.676700][T22557] Call Trace:
[  369.678002][T22557]  <TASK>
[  369.679034][T22557]  ? __pfx_klist_remove+0x10/0x10
[  369.681075][T22557]  ? __pfx_kobject_move+0x10/0x10
[  369.683169][T22557]  ? get_device_parent+0x366/0x3a0
[  369.685270][T22557]  device_move+0x193/0x700
[  369.687125][T22557]  hci_conn_del_sysfs+0xb8/0x170
[  369.689173][T22557]  hci_conn_del+0x949/0xcf0
[  369.691013][T22557]  hci_conn_hash_flush+0x191/0x230
[  369.692975][T22557]  hci_dev_close_sync+0xaef/0x1330
[  369.694681][T22557]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  369.696540][T22557]  ? up_write+0x1c4/0x420
[  369.698021][T22557]  hci_unregister_dev+0x21a/0x510
[  369.699770][T22557]  vhci_release+0x80/0xd0
[  369.701228][T22557]  ? __pfx_vhci_release+0x10/0x10
[  369.702810][T22557]  __fput+0x44c/0xa70
[  369.704077][T22557]  task_work_run+0x1d4/0x260
[  369.705537][T22557]  ? __pfx_task_work_run+0x10/0x10
[  369.707436][T22557]  ? kmem_cache_free+0x18f/0x400
[  369.709218][T22557]  do_exit+0x6b5/0x22e0
[  369.710669][T22557]  ? cgroup_freezing+0x20/0x350
[  369.712590][T22557]  ? __pfx_do_exit+0x10/0x10
[  369.714147][T22557]  ? cgroup_freezing+0x20/0x350
[  369.715697][T22557]  ? cgroup_freezing+0x20/0x350
[  369.717423][T22557]  do_group_exit+0x21c/0x2d0
[  369.719041][T22557]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.720938][T22557]  get_signal+0x1286/0x1340
[  369.722436][T22557]  arch_do_signal_or_restart+0x9a/0x750
[  369.724499][T22557]  ? __x64_sys_sendmsg+0x230/0x260
[  369.726182][T22557]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  369.728181][T22557]  ? exit_to_user_mode_loop+0x40/0x110
[  369.729980][T22557]  exit_to_user_mode_loop+0x75/0x110
[  369.731593][T22557]  do_syscall_64+0x2bd/0x3b0
[  369.733198][T22557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.735184][T22557]  ? __switch_to_asm+0x39/0x70
[  369.737077][T22557]  ? __switch_to_asm+0x33/0x70
[  369.738855][T22557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.740915][T22557] RIP: 0033:0x7fe60a38ebe9
[  369.742319][T22557] Code: Unable to access opcode bytes at 0x7fe60a38ebbf.
[  369.744478][T22557] RSP: 002b:00007fe6085f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.747064][T22557] RAX: 00000000000000c0 RBX: 00007fe60a5b6090 RCX: 00007fe60a38ebe9
[  369.749927][T22557] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 000000000000000a
[  369.752687][T22557] RBP: 00007fe60a411e19 R08: 0000000000000000 R09: 0000000000000000
[  369.755453][T22557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.758364][T22557] R13: 00007fe60a5b6128 R14: 00007fe60a5b6090 R15: 00007ffef2bfaa18
[  369.761349][T22557]  </TASK>
[  369.762541][T22557] Modules linked in:
[  369.764479][T22557] ---[ end trace 0000000000000000 ]---
[  369.768887][T22557] RIP: 0010:klist_remove+0x14a/0x340
[  369.770795][T22557] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 db bc f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea da bc f6 49 8b 44 24 58 48 89 44 24 08
[  369.777707][T22557] RSP: 0000:ffffc90007547600 EFLAGS: 00010202
[  369.779842][T22557] RAX: 000000000000000b RBX: ffff888033fb0000 RCX: 0000000000000000
[  369.783812][T22557] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  369.786759][T22557] RBP: ffffc900075476e8 R08: ffffffff8f870583 R09: 1ffffffff1f0e0b0
[  369.789454][T22557] R10: dffffc0000000000 R11: fffffbfff1f0e0b1 R12: 0000000000000000
[  369.793254][T22557] R13: 1ffff1102445758c R14: ffff8881222bac60 R15: dffffc0000000000
[  369.795748][T22557] FS:  00007fe6085f66c0(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  369.798560][T22557] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  369.801737][T22557] CR2: 0000561cc0050a20 CR3: 000000000df38000 CR4: 00000000000006f0
[  369.804595][T22557] Kernel panic - not syncing: Fatal exception
[  369.807291][T22557] Kernel Offset: disabled
[  369.808679][T22557] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:02:54  Registers:
info registers vcpu 0

CPU#0
RAX=39e28463c1ea8800 RBX=ffffffff81969b18 RCX=39e28463c1ea8800 RDX=0000000000000001
RSI=ffffffff8be309e0 RDI=ffffffff81969b18 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561cc007f108 CR3=0000000022a36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff00000000ff00 0000000000000000 XMM05=0000000000000111 000000002f38002f
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff0000ff00 XMM09=00302d78742f7365 756575712f40022f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007546d90
R8 =ffff888108cd8237 R9 =1ffff1102119b046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958e4 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe6085f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561cc0050a20 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000021 0000000000032775
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=0000000000000021 0000000000347475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
