last executing test programs:

19.044429521s ago: executing program 1 (id=5396):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x900}, 0x94)

18.9728451s ago: executing program 1 (id=5398):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xd7, 0xc6, &(0x7f0000000000)="2bf49cf773c583595b0648d19bd236dacb617d449bb19d32d0d78945523af88d5af2e3acbf457c4437fb17be71a0a6bb4cfcb272504ab8c761140378d1b2f7d30fc7282a1082bf758a7d43d4ea03a5a9d2ad48096ccbdb66ca81da700dea94a3aa47fdbe955331374e7f73f434602528357a14c4272c61c2be116d834d7d84f1cbf43cb55a94d782255f98ff87824cfa7f396cc907a558be8f616d2c552486aaaa122b821c644aed2e3c39685204edbedb3df96f8d848cf8cf178f51e700d3bfed28d5b3fa2d7efa4a8d12af7471e7dec0ec939595301d", &(0x7f0000000100)=""/198, 0x9, 0x0, 0x88, 0x98, &(0x7f0000000200)="67827c8305f693dcd5ea8e47ace125328f0fd08cf1e24cfe672c5ad77bcc128777045b22349f18255aa92f0ae2c8d82b29636dbd2d68bf64cc9e19b7e1d27fa3a33c04586c8f8859ab5569a987c64fc29977117cb7222961d166655dfa4c5b83788348e225021d58ceb41358b9f812a6a51360e20281961f3c087acfa9eb8d2fe1357a3e0da919b7", &(0x7f00000002c0)="9bf3bc4657c461c985f61175927aa11030f0226d9e51521aa74c2b403378f49327d6132a04f85cd868ba6ed1cc3ef578359f846d6fa1ae8536f2a70c4b3c2deae0e5978d4ea48a00f929f5fc0858bf66b9eb7387c823bcffb1ab6f2dd4d78b9e7a3f626cec26c68af47b956d34036de977194703a82e3eabd6dfcf087fb5c620cdd322ac37e588133e1a0751b6f39c4e74abf57f31e3ecad", 0x1, 0x0, 0x400}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x6, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7fffffff}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x36, &(0x7f00000004c0)=""/54, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x4, 0x4a867649, 0x6c54}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000400)='selinux_audited\x00', r0, 0x0, 0x3}, 0x18)
r1 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000006c0)={0x1, 'veth1_vlan\x00', {}, 0xfffe})
r2 = socket$isdn(0x22, 0x3, 0x22)
ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000700)=0x80000000)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000780)={0x2, 0xfffffffb})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff)
getpeername$packet(r1, &(0x7f0000000840)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x80, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x8000}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xe}, @ETHTOOL_A_COALESCE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048051}, 0x884)
ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f00000009c0))
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000a00)=0x1)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a40)={0x800, {{0xa, 0x4e23, 0x7, @local, 0x7930}}, 0x1, 0x7, [{{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e20, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x47e}}, {{0xa, 0x4e20, 0x40, @mcast2, 0x9}}, {{0xa, 0x4e20, 0x4, @mcast1, 0x2}}, {{0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}}, {{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x410)
shutdown(r2, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000e80)=0x3ff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r0}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x1, 0x0, r7, 0x8, '\x00', r6, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='./file0\x00', 0x0, 0x18}, 0x18)
socketpair(0x3, 0x96f007a09d7847a7, 0x5, &(0x7f0000001080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000010c0)={<r10=>0x0, 0x4}, &(0x7f0000001100)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000001140)={r10, 0x3}, &(0x7f0000001180)=0x8)
setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f00000011c0)={@local, @remote, 0xffffffffffffffff, "73c550989730f8e6c40dafc5fe8175172dbf4052bca52ea991e203fc45242ec5", 0x6, 0x115fbce1, 0x55e, 0x2}, 0x3c)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000001200), &(0x7f0000001240)=0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000001280)={0x6, 'netpci0\x00', {0xa}, 0x5})
epoll_create1(0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000012c0)={0x0, 0xab6})
ioctl$EXT4_IOC_GETFSUUID(r9, 0x8008662c, &(0x7f0000001300))

18.913637598s ago: executing program 1 (id=5401):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034e507da4c02020200000a0406000802110000000000080035000f000000080026006c2e0000"], 0x44}}, 0x0)

18.913495067s ago: executing program 1 (id=5402):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

18.784298737s ago: executing program 1 (id=5406):
select(0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x8000000000000001})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
getpeername(r0, &(0x7f0000000080)=@sco={0x1f, @none}, &(0x7f0000000100)=0x80)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000))

18.613998286s ago: executing program 1 (id=5410):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000580)={0xfffffffd, "98c963d4d71988a78228817da582199194b06d7cc1c3c64a46655406c0464774db779b3536bca596e5ca90acca3f1c76a05e70806b36863ecbbcd57571adae421abec11301ed96b458c8a8a8d58c4001b619bc78591834dc235c23035ee6b3f8941c3c5e48c770038f1e9b708f5ae83fa0bfb547cdbe5e6c4541dd68fa26d4ef"})
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0xf}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xffffffffffffffed)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xc0}}, 0xf9b5a97fc4829811)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000010400000000000000000000000031f2ea4104a7399b325d391ccef028acceced14c4b4e72d59538970c5544a7cfe3dfd1593cfaffea4a3ecad5bb863bfd4022", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=r1], 0x54}}, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
socket(0x2b, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14)

18.553458194s ago: executing program 32 (id=5410):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000580)={0xfffffffd, "98c963d4d71988a78228817da582199194b06d7cc1c3c64a46655406c0464774db779b3536bca596e5ca90acca3f1c76a05e70806b36863ecbbcd57571adae421abec11301ed96b458c8a8a8d58c4001b619bc78591834dc235c23035ee6b3f8941c3c5e48c770038f1e9b708f5ae83fa0bfb547cdbe5e6c4541dd68fa26d4ef"})
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0xf}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xffffffffffffffed)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xc0}}, 0xf9b5a97fc4829811)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3}, 0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000010400000000000000000000000031f2ea4104a7399b325d391ccef028acceced14c4b4e72d59538970c5544a7cfe3dfd1593cfaffea4a3ecad5bb863bfd4022", @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=r1], 0x54}}, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
socket(0x2b, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14)

592.393849ms ago: executing program 0 (id=5806):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @generic={0x6, 0x2, 0x0, 0x6, 0x6}, @tail_call], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xbd, &(0x7f0000000100)=""/189, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x10001, 0x1f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xb}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x2, 0x9, 0x2, 0xfffffffffffffff4, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff60c7}, @call={0x85, 0x0, 0x0, 0x1c}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000540)=""/4096, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x1, 0xb, 0xb}], 0x10, 0x5}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r3, 0xc, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], <r5=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r4, r3, 0x6, 0x0, 0x0, @void, @value=r4, @void, @void, r5}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, r2, 0x29, 0x20, 0x0, @void, @void, @void, @value, r5}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001600)=[0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000001680)=[{}], 0x8, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0x81, 0x8, 0x8, &(0x7f0000001740)}}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000780)=ANY=[@ANYRESHEX=r7, @ANYRESHEX, @ANYRESDEC=r7, @ANYRES32, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="1b6a23ae80f655804a68a607093febe72845d86a04bd1ce2367ae74da1d0bf43c830e8924bb38fe70cc0d6a697a394390be8d9c175898efe5f32bd93bf1384aa8f5bfbf3f00d538fdd74815692cd23c8aa6bf1dcdfa37f7ab06a855ccdbb101ba2a8b640df66cbfd0d5c07d9279849850dced4f5060292ff703a4b1185057b480fa436d7161fe283a85be72eda734e23b95713c8ef62335304bfefbd3b6245d3c2d7b878dd06684c667c68f24874c19cad781a7d885e7c9d9ea18840c80b9936138e6f53886460e68a88293e6ef89ad251819fb41c6d289b3b78405813764f8d6a13071fd3e669d0"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r0, 0x21, 0x2008, r1, @value=r7, @void, @void, @void, r5}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0)

543.657496ms ago: executing program 0 (id=5808):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r1, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x20000080)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @empty, 0xffffffff}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0xfff)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48)
recvfrom(r8, &(0x7f0000000400)=""/186, 0xba, 0x10042, 0x0, 0x0)

542.117209ms ago: executing program 0 (id=5809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034e507da4c02020200000a04060008021100000000000800350000000040080026006c2e0000"], 0x44}}, 0x0)

464.341301ms ago: executing program 3 (id=5811):
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000800000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

404.450934ms ago: executing program 3 (id=5812):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="deb660c9fd25ed58ec79a0169ab88d07391b487bd062210ce8fab13333c5c77ac95f7deaca8e1236b11287dbda05b7ec85408f74cc68255e15a1cb28f9251a81a70471344cc2bffdc5ffd198ebc6e31eddef674f1f2559d83fd95fcba347ac2b2b", 0x61}, {&(0x7f0000000480)="266fe5bd216d2659b4b4d9dc051b0b27e30a3b68f52fb806ed1e19974b45fc7215dfa5f833ebdcb27c4bf5de1d27ccc39e3fc4cc33aa805b0a628ff0536bb1240b4269ed675079f431c578a12f044e69d6c4fa58f395516d7411ed7f8885d91f240cc3293390f7ed0d99905c87432ddf1260bbc51ac869af0f743244d78bd627d8b9d628d6917af4eb1124f4b767f003427988f1968ccfce3dde668fa2137311ab553dcca8a668f3bb707d31b7f0f2c11093f14012485f5d1e39401e57b4eb", 0xbf}, {&(0x7f0000000140)="6d08761425495fa0f2b4441ca54ca8e695a7075c1e2c3134a319c0b391fbc92a74bdc9e63d31104f164cdfa420cced85a2ef93450c24", 0x36}, {&(0x7f0000000180)="aec91f396dd7e432a2f0cce77554d7b507c349f07bf422ecc6bf49cd0fce7e55a78001d57b265ec13c99ce81b84ba3644a07877bdddf0edfedcbe5c6ffb52af5153bb55a4d138d28b430ca7f3a3e80ab005eaedcf31d9d216ad91f186c0797456f1a530f825c05eed474099cd9a073e6ea360fd5463335967905a437d584e693b82ddaf52ad230af92ba94e98e420187737929cb9a9cef23b2b5bcbf5acb0887f658c2bc07568b0d1a43c3937b9400a0104abb6c8076578b77efa54f7e94028e5d9e49e7c45fbc8d3b0885e74e1435736fd8093f", 0xd4}, {&(0x7f0000000540)="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", 0x114}, {&(0x7f0000000340)}, {&(0x7f0000000380)="035b43d8ff78cd21e1734a8a257bf28c986de3032d1089f8b90a312f3381eb26d92dc964e257b32179c5b0e0fa9d946a96fde23d3aeff4f0d2f1dadf2b4dd7dc06dc8a032eb1f11f44aab7fba62c93cb51e301af9430078c8280299624db918c3981bf", 0x63}], 0x7)

403.86797ms ago: executing program 0 (id=5813):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d0020000018000000000000ff0200000000000011000000000000014f194e2000189078040000000b0000000000010000000000"], 0x52)

403.611968ms ago: executing program 3 (id=5814):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
close(0x3)
unshare(0x24020400)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001400)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1d, 0xc, &(0x7f0000001480)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x5, 0xffffffffffffffa2, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x24, 0x58, 0x4ee4e6a52ff56541}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0dc0204226a02cc092d50d6d2437b6ea1c524e04ce5f24e2cfa9255a6235bb1db714f972717cd22580f292cae57b582b9c8cc2bade2681641387229a2", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf250300000020000780080002000300000008000200080000000c00040009000000000000007800048014000780080004000002000008000300000000002400078008000200e2860000080001001d000000080004000300000008000300000000021300010062726f6164636173742d6c696e6b000014000780080003001b1c000008000300ff0300001400078008000300cddb000008000400000000002400098008000200ff000000080002000400000008000200010000000800020037000000"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000040)=0x1ff, 0x4)
setsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f00000002c0)="0b032200e0ff25000200475400f6a13bb1000000080086dd480309f2c8cf4100f61c3e28c9ca32bd519e35353f5b5621583f8823b19b035f6b79eea56e00e7ae7b85b8df870365b03e5592dd3bd8baf2b19f15d24b3a155ce39d95578eaf9735aa01ad415b904cefd32ed0f880171330f28f3cb20b981bce1a0da463344171fdf987b01f6ff11aebfdaf46991df1e782b10e4fe77fa9e0356001e8a41b4fc15008297771127435d4407cd1c35cf3dc82b22feb2300892e70198365a790e8b0391628cee34e26b37d2179309d486c75da717ec10fc39a60524222c69bd6ccd4d5640689f9ce", 0xe5, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xffffffffffffff2b)
sendmsg$inet(r5, &(0x7f0000001440)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="4fe48da4c3f8ff6d030dca856210b0900d2f2c13464b8be4df38d570a55208fe955fcf070756ea8ef3d2c1fa3c9329c7925254d1462a62a47fc29c6a4e57c24dd255852dad7cc0ceea677cbece8ae98789940eb4d7630eb9466e77d284168fee2944cb08cf59f7ff108b1d16bb8ddb3bee12bc5e58b601064bcaa3829582042236eebbc041b96e826ef2b7786d5e60bd9672cec2d540679f9044f8674cfcaed1066bda6aaf46c97b665de7234bf9c9a06f9879e97a6ed7eeaa", 0xb9}, {&(0x7f0000000400)="0c7aefc63a46a34d8020ec8a687cf3a803d7892668754789efebb33d70115ded3070e8fb2538b0f57b7d968725ad3b87777ff1719150556c4649430ecdc891bd7c3dc9685746d41dfb766b18a23ade33e25550e9aecf8c56f3208a094f12a36d79abe7144ede9ee309c675e106ca63e82d9080b85970bd3d5986f7bfb80890dd143645ada174f761cf73e4b6eeace2424199935806be7f1b7a9eb3eb7b3c9c4d60789c7b0c3386a52846c1925aacd4b470605bb983c7bf7b1aae60c9a36fab0aac8b3e9453872fb99cade89f749ff9e651819f80b738360d5182c59c67741ada0d6420a8a4a27b997310880dcea36ac39d7e9e4bd4764bd529ae4c12be5c2742c1d57def8eb841720d873dec26318468fdd7a728241df8a38fea00375028c04b5f00c8f841f6cd339d9779ccd4825d7c1ff033e019abf8265c49b19dfe80f1843e977b0fea95aaf85368c267470f56823351a6ebe818411d6241fd20cd5bff83b10db842534a186f49c35ac6a77ad69d2a1fa4518a18162a1bcf3fc057e60880c7a446116d79bdd37a65990b0e81a255fb17cc5b221e9786582f0c84fbaf8769485653e33d94634314790bb7f946c2ff5d1009aaab3846ccf0b32aa1ca301d7907795ef11852cec6d2053c549b656ae79ed553d1e7a85875e4ff5168611009473d13ce71d63d66e4891250b003e432e864f6ecaa3cb35752fd82c9ce7c4575efd92d6dc78fa07f1a2e21ad5d9edc72e3cf9d106b014a179a280e8e88b6c9b41aeb02f9de17e0de3a5dfe6d6f2a08a12ea9bfbe5e6b0fb8a37305360910cdeaaa79cec23a4bf316a86c25c418fbe6a33c7e0738eaa7647f24662b566cae997863fc2218e1318c66c13e4fcb659cc103025b3a3421b89bd3085afc01cad70468060d131bca8a3b0e91a7b157656d936d8000b916d762c3e6041cbd7467d39f3f1e92c47f23a2f73c93fcc347afbed9e26abe993f02b2c9ea56649e825bca9cb33baa452558894a1c50926595306b2d184b0a8731b762d690284dcac5f45c2b427e1ee383f545de0928e8c9b53f1444524be1d06cd5305559e0823dfdcced9f3192610172f8dec2587f99be14247b50fae65035e7f18e4e1b99c88fea51cd49e71f6f0e3264f33104b34711ae0228b0af059b8b83b1174dee2fbc239ad5e344e2ae93ca676201e6a92bb3fc1304ac7b908728181a97b097c93f56b938837423286512fbf7c7a3e9d68caca4177c9e3202763aa44a3dfe2a30f5ac3e861c8e5d0c62022333751785ce719fd4c8d64c358188f741f4357682616adb594f55e55e17ab187bc8006d0dbb3a6cdf25bb772a22727039af673ce3149ed4fae4150abd5c947877db934ccb383419be6429d5a039de5b4f97af709f743820d225ed1674ade0ef50999f3120a90b8ee7d5d476fe803e95ea3fa614dd646157f54db0ef9cad9ba234b3a96993996d5a8df4f612af9e8ea36bab1d31258f4833c35fdf5498ca0160ae2700435d15ee9f05e385b6373185f4c2df190c4ba6e9b29979101332f7ed196afc59ef7d3177420dd49eb9152d46a57f75a4155939a6ae7dca8f4a226b6ab596e0a93730b1f8600416d660e706f8022266f811bb83fe9b3a2cce46524ced783482611ddc648df31aadb024308bb622c1829f85d0284177d6ded9a336dffb56b97c40288c2ace90a0714a3c899b95b350656f64ec312265c24cd355f08d1f94881ae1f4a2a552eda05f81d70dc0b7cfac98942e20d393301b883c2e3da747f1771921eb7e311bea7737938084f5ad990528fb621824c6c9024fa974b61d1303150ee19d507061259fa50c8ad2076c35e136667354e9fd0cdce8be92c6eb49d3c8c334684e7522aec9f4cb0c6de3d489926689d6d48663b865fa3fb1f9b54f6977b824f715748fb368d98e54667ed9be853f2caf485db4b53fdac13deba88f48177853676ed9d265c2a146e04409bb9f9c876ef853c97a874b56e3204706750634875929166ecb10493c557ef658e878fbe599af0c0c21b18eef90f506df1f81892383852efcdc3d8adb8a5533be081371502cd7f2cc8187c923e66d64eead90aa1709583b78dec67d3fea065766c7c3dfc6190b2498519174bceedee470c3db0221b019fc927368f9f1d571b0c59e89e5ac8fa44de90c7539cd1df197300d28610595081e5291a6eebec6d396298d4db37c4ac5b2ee455b09b5afcae7677fe310748332ab8803bb7006be5fcca446986a7833d4dc8695f4d4b70a40ba4dd325223198a980df144a8d39713e32374b3aa81ecd015c77cc850018c92b0101200e722fa8c048b6b741a936ec71dc794bfaf335a978f6b70d96c5a1f6deab456a6ac79ccbcc0e4169806ad10d1a51cdfb38e54d93a5d000216489594f8776e371527554d516e1834e2e862ca9a6234d849ef62e39ddbfd5aa59081a25adc09e749ef31a885d88ea2d869e9f84ce745df1d0f7a329c4dc3a1318f34b853d5244defc4641e4f670b28c6c3f24e01e6a9a92845da1a681423e094946d3940c50ab1c570525d51ccf1b79ace78409a78d2de35e8ed16a813a40b854f2c213b660b6be16689471ec6b05dce5bb8a8cbd8a9f362b7ca4a3a4063fb91e44ad34fc061396bdb28c63b205f8700d2c68378e3668e6d84d1d94b1ce46a9179a37ad275b463b60488abb1d72be9c6c2a0da29b326e360245d8a2fca945c2942a68c8b35c264d14bd289df7ed1865d78a91ae63c280cffcd150739f5371face7aa98306d0a03673f10a45a91960b3893e18adb50650a1f791a2031d7495388e08476a944eb2959c164995a7b6923b6cfa4ffb6ab77b3e10256213db26037278dc81bfccd5e964255751cd4033a74a5d5448ca7b953abdd9e2dff1f00291631a5bd01ae6fd891c1ca7e127d57d1f7c9324d128c8cb59bf8da832fcc7e851a243d0cdf26e963abe8e759829a5fa18063693ddc86a1c287a9ddc81a09585bc9650a1a969702d4d7a384d2dbea0367aa8b20f1a1fe5c2a49c7b6a4130b09b126daada4a59cfbe439148dee226b3045fed97d5610a4350e893eedd93506e0cb71aa522dad78a03b2524777c80b4e85ac01339be9c79557a2bfb88cf0fd7a7e830d3a8e95d168b195a5f12e69faf37f67bc8807ebe7b53e1bdadf91be0ca220e6e5b4a20743afb7265e13263a634bd42cd7e2c4f5b8460d9aac89d2c0c28b5ec428000ef02ea7b021e505adf12f221d9083dc49e99c1099d0224a73ebf69d40550cd4b6a4d0415f078d332db7f6d27351c0e94604773d338228124ae1bee7aa277885ae4a7fe9673ff7b3a8308f85b215d740e3559c66cb870ab5329f5c06df0e31f982191a1aaffb24c0dfc07810471128d67582c7d30bc0d2d7daf3af01de3fc3ee86a4267090defca1a13f5e00cb15bf542ee3f1e6fca2a22019486361f3bcb3df59e9176bfa0efefc824e7fbb73e99dd530ae97622939ddcfec1a6c128d3eca46e0d0e5cea8ee607144f0a30272ee9039a2c52407d0976ef20fc31bc83a297f57bfb41343fc797b236a4ddc7e60bc5210c145a3751dee28a3ecc8370c9196c1024a8da8156d5bae6ab270b8afa4c49bb391bc54f0277f1eb75520918294175efe86ccf06db1d0431354b99410fdf3df4bec635ad69101fe1fd631d46b68acdfc931b098c5f0c91e3f5cdf897579e69473d4aab43664a5501d16bc0cb689248db4c2a32171502fad6206ffdf90ae296b86424c95b0556dd406a0d1b07aa2aa2b84a68f68c55d28dc7ab801c92c205bd3e8bfae6df1c9506ca5d49d0746516e58902221518821bb3118b843ee5e79faf347bc2253349474acda7e23e305780a393e7e991fc4b0a3722bfdabbaa28c36f1da60ffb5a7734569cbb375a13e15df986a84fc95e34b61e04cd535761f2727c154b8caf8632b8f6858b6babbe8367a6274ea99cfa6276f359f6cf816bcb893c95ceb122200b82c133b5bafea3633b1fe2a4863250586cc704c214f1410ea519f66e96e822f888cafd5d1615bb5f6e3a881522f1212fcef14245a397da9973f8fa4beeaf7a6609c52f0ff1e6be839a2e6a264025164584aaafd0e46de29460c00d79d5fb4ba41737a204dfd9d1fe5bafd212a128ef4b8e3a102be97a324cc639471891dcd9c47853a265b77e9745399e181323f97d431c00315d66323ba5b29af3be5be881c0f2b7163b71549cd6caaf47561d73c0330b9358c9bf6332a16a1e0aec0466d2b84827b4c1facac99e24f24777f866f468670e70a0b11766d53d434c74e76e29285ed81f99439966adbdb061b3dd035f3722a8ceaa736762fd1d350932381fcf8df053e22bad80aa4fb83d9aa2cd1e0cbee189d582cfeb25c25c4eba1ef6d6bf69df5bf7f103c184f3a6aa85f1bfcb17ea904af1922addfbc7149f469c7f6a53000259301ec91460f3f5841da3267ff64020f060460b8ce10acd555785fb8f378e37601001e9fc97341a50a87a48ecc658a8586cfdae10d9b13c405ea8585e81ff6b602773492020bd1ab2cc62221e3bd6566c49706e4ec625ae70cb52be775fc7a81de1ad1e319acdfe9dd72de062fd94cbc8d786397a5f7f7d73036c2f688927004bfd55d4b71d6d54126873e290ccb5361fc334ee8d8cdf5b538e426ec783896f315bba81357c8dbac6456e99ffe044db7053a3d83971064cf23c33d9104c9671f040a0d8a3bee390b12cf2d4346ac9c51303bcd747b96daec5e39aae179531158e450cecd3cc73cbe2f6f9d8550b6587d4194b5875b4076fbbf60291460dc0e115d66d4de961637d4bdde03969ccda036c4fff9034efea209b42dec5467b790164a62b34bee01c1abff9edb85be7a4553c2225033b0b4c4e10cf4f526bd55f23a5a58303696047ebb4658199897e50f0bdb5cb1b13c9a4b6050eab019c8445ab857c4b672cd2604408a70b87d4bcd47257fed60b00d60b9e0c07bd192c0714cc7dddb7500b68bb2f5f95b4850eb407512077e6d01703d396ab2afa50bc653508e8758aa375c2c66d6376b23bec1a9f99a08ec1fcbcdb3f18be74a1471bc0e30be1abd4f865003ba5944849a7a9534839cac9f0141b551901ab9d3169a6ecb2f179e4fe77a0e5ee6fe64ddc0192700c3f862ef62443b909c70867de58017d6a4da77d6cd4bf1371b7d16fc305e07d3069afc049d4a0d68e98867e160ff8f7cd3de587fd804a749827cb3e1ffcd2056d02e6f776065a714c6ad4def0b467b5b6f04d3d35f6882ea1e6c4027f1a6a46759a1547d0610f2084d72250d4fbec8970aa20cc8eef7c17bf38d3a8252b07ecb5361bcb87c848279fb59b9ea29abf52e4348259d8c29234e05c467650a9ef84bf6d296b8bd839bca50b8df7ee0306fe1f7788a3c106f0d41e96530d5d189c92cba15258d3d9799b614738b635299ba3c2bd7b4d9cf3878ac9dcffdc650444b09cabe377d54f57e48dbeb8f067b230c053943720aeb72188b93b6a2f8fd2265c22c2b4bec38c04803131fe38aca3952bdf3d9b40b02b90d173d01c66f1ce484658daa14b459655b56063f41538e35286ff30ba50a8fd8394773fc579524a6ac2cce031a26f3549a8136e0b55ec2792131aeb47f3d459c2de3d2f51cea745bfdd3d8b099885abaa8f8e5ddcd693c5182b378b708285c9c262add0b5128a4ec8c68cecfa106cb3cf66384a8bb27d7ba670ee19ec370036b864425faf8946fe7263a82066b76d03ddde72f12b85c8bc7f3ea85512bc6ee53881a869710f91678157eecd2d53bee4c0a58a13950e0ee99cd24e411d9db000abd9ef79ee444e09d670161aac4", 0x1000}], 0x2, &(0x7f0000001400)}, 0x810)

314.43989ms ago: executing program 2 (id=5815):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x4}, 0x20)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0xfffffe6d, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x42}, 0x4000800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x71}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80)

242.346627ms ago: executing program 2 (id=5816):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xb, 0x3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4080)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket(0xa, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004851}, 0x44000010)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0810010000d30b7a885b607ad202"], 0xa)
r13 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r13, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac1e0c000000a9554e6d0900d61c3d", @ANYRES16=r0, @ANYBLOB="000400042000fcffffff0b00000008000300", @ANYRES32=0x0, @ANYBLOB="0800508004000600"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

242.109602ms ago: executing program 3 (id=5817):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00020400180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r3], 0x50}}, 0x2)

164.465947ms ago: executing program 0 (id=5818):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x4800)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000e9"], 0xa4}}, 0x0)

164.173404ms ago: executing program 3 (id=5819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000200000061138af6554e359e14000000000000001001000002"], 0x30}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000001100", @ANYRES32=r2, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e2200000400120008000400000800"], 0x54}}, 0x0)

163.822496ms ago: executing program 3 (id=5820):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) (async)
r3 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) (rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x3, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x400c004) (async)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002c}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000428bd7000ffdbdf250e07000008000600ffffff7fea6cb276477f9e8c596e8a72374ccdb9e2c4b3318a09e5ded9fbc2b4eeffcb1d39b988b0d6a5cc46149f8690e085d409cfd1586e2ef9f47104fdd12681fe216fcac82379ef904dc3247610c4ff351dc87a14f255957db5e102b1f7d741a05b8995300e6eb5720bf51a496be669f583"], 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0x48000) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) (async)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070600000000000000002d0000000a0001007770616e3100225c"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) (async, rerun: 64)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x30, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044000}, 0x4008004)
r11 = socket$packet(0x11, 0x2, 0x300) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', <r12=>0x0})
sendto$packet(r11, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r12, 0x1, 0x85, 0x6, @broadcast}, 0x14) (async)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r13, 0x0, 0x2, 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)

74.536216ms ago: executing program 2 (id=5821):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x13, 0xa, 0x801, 0x60000000, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x0)

74.404794ms ago: executing program 2 (id=5822):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "25af22"}})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0))
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "25af22"}}) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)) (async)

74.194036ms ago: executing program 0 (id=5823):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02"], 0xe0}], 0x1}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba350000ff870000000700ff020000000000000000000000000001"], 0xfdef)

1.16882ms ago: executing program 2 (id=5824):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20)
sendto$inet6(r0, 0x0, 0x0, 0x80, &(0x7f0000000100)={0xa, 0x4e23, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c)

0s ago: executing program 2 (id=5825):
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000900000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

kernel console output (not intermixed with test programs):

syz.2.2333'.
[  159.870879][ T5878] tipc: Subscription rejected, illegal request
[  159.906970][T12791] netlink: 'syz.2.2335': attribute type 1 has an invalid length.
[  160.323649][T12809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.329217][T12809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2342'.
[  160.332912][T12809] netlink: 'syz.2.2342': attribute type 2 has an invalid length.
[  160.335937][T12809] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2342'.
[  160.499051][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'.
[  160.800409][ T5879] tipc: Subscription rejected, illegal request
[  161.253079][T12897] dvmrp1: entered allmulticast mode
[  161.265588][T12897] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  161.269350][T12897] bridge4: entered promiscuous mode
[  161.319089][ T5878] tipc: Subscription rejected, illegal request
[  161.583627][ T5878] tipc: Subscription rejected, illegal request
[  161.666278][T12959] __nla_validate_parse: 2 callbacks suppressed
[  161.666288][T12959] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2383'.
[  161.676143][T12959] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2383'.
[  161.679930][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'.
[  161.684847][T12962] netlink: 'syz.1.2385': attribute type 1 has an invalid length.
[  161.688263][T12962] netlink: 'syz.1.2385': attribute type 1 has an invalid length.
[  161.700730][T12959] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  161.752030][T12963] netlink: 'syz.1.2385': attribute type 1 has an invalid length.
[  161.766741][T12963] 8021q: adding VLAN 0 to HW filter on device bond9
[  161.800217][T12974] nbd: illegal input index 16776192
[  161.806777][T12974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2390'.
[  161.850779][ T5878] tipc: Subscription rejected, illegal request
[  162.130923][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'.
[  162.388151][T13011] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2402'.
[  162.417685][T13015] RDS: rds_bind could not find a transport for ::ffff:172.20.20.54, load rds_tcp or rds_rdma?
[  162.709102][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'.
[  162.718745][ T5715] tipc: Subscription rejected, illegal request
[  163.095612][ T5878] tipc: Subscription rejected, illegal request
[  163.133245][T13050] mac80211_hwsim hwsim9 ;: renamed from wlan0
[  163.577330][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2431'.
[  163.580218][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2431'.
[  163.635508][ T5878] tipc: Subscription rejected, illegal request
[  163.640059][T13105] netlink: 'syz.2.2435': attribute type 1 has an invalid length.
[  163.644448][T13105] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2435'.
[  163.825488][T13129] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.972939][ T5715] tipc: Subscription rejected, illegal request
[  163.978055][T13146] netlink: 'syz.2.2446': attribute type 13 has an invalid length.
[  164.017100][T13146] 8021q: adding VLAN 0 to HW filter on device team0
[  164.024321][T13146] 0X: left allmulticast mode
[  164.026166][T13146] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  164.034278][   T24] lo speed is unknown, defaulting to 1000
[  164.043116][   T24] syz2: Port: 1 Link ACTIVE
[  164.274551][T13184] smc: net device bond0 applied user defined pnetid SYZ2
[  164.277390][T13184] smc: net device bond0 erased user defined pnetid SYZ2
[  164.431413][T13218] nbd: couldn't find a device at index 0
[  164.458036][ T5715] tipc: Subscription rejected, illegal request
[  165.399923][T13246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.404708][T13246] syzkaller0: entered promiscuous mode
[  165.408178][T13246] syzkaller0: entered allmulticast mode
[  165.422022][T13246] tipc: Resetting bearer <eth:syzkaller0>
[  165.434492][T13246] gretap1: entered allmulticast mode
[  165.438752][T13245] tipc: Resetting bearer <eth:syzkaller0>
[  165.450353][T13245] tipc: Disabling bearer <eth:syzkaller0>
[  165.697134][ T5879] tipc: Subscription rejected, illegal request
[  165.730885][T13282] validate_nla: 1 callbacks suppressed
[  165.730895][T13282] netlink: 'syz.2.2488': attribute type 15 has an invalid length.
[  165.795278][ T5715] tipc: Subscription rejected, illegal request
[  166.320887][ T5715] tipc: Subscription rejected, illegal request
[  166.342500][T13322] netlink: 'syz.1.2501': attribute type 4 has an invalid length.
[  166.342507][T13323] netlink: 'syz.1.2501': attribute type 4 has an invalid length.
[  166.344586][T13323] netlink: 'syz.1.2501': attribute type 4 has an invalid length.
[  166.345683][T13324] netlink: 'syz.1.2501': attribute type 4 has an invalid length.
[  166.375914][T13322] can: request_module (can-proto-0) failed.
[  166.379028][T13322] openvswitch: netlink: Flow key attr not present in new flow.
[  166.379035][T13323] openvswitch: netlink: Flow key attr not present in new flow.
[  166.411002][T13328] syzkaller1: entered promiscuous mode
[  166.413990][T13328] syzkaller1: entered allmulticast mode
[  166.696709][T13346] __nla_validate_parse: 13 callbacks suppressed
[  166.696722][T13346] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2509'.
[  166.714921][ T5878] tipc: Subscription rejected, illegal request
[  166.829392][T13367] netlink: 'syz.1.2517': attribute type 21 has an invalid length.
[  166.833783][T13367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2517'.
[  166.846894][T13369] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2518'.
[  166.854133][T13369] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2518'.
[  167.014580][ T5715] tipc: Subscription rejected, illegal request
[  167.055492][T13396] netlink: 'syz.0.2526': attribute type 1 has an invalid length.
[  167.084145][T13396] 8021q: adding VLAN 0 to HW filter on device bond4
[  167.090321][T13397] vlan1: entered promiscuous mode
[  167.093265][T13397] bond4: entered promiscuous mode
[  167.096027][T13397] vlan1: entered allmulticast mode
[  167.098227][T13397] bond4: entered allmulticast mode
[  167.123744][T13396] syzkaller1: entered promiscuous mode
[  167.126131][T13396] syzkaller1: entered allmulticast mode
[  167.683232][T13429] netlink: 'syz.0.2539': attribute type 1 has an invalid length.
[  167.703877][T13429] 8021q: adding VLAN 0 to HW filter on device bond5
[  167.710577][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'.
[  167.739518][T13432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2540'.
[  167.872765][T13443] IPv6: NLM_F_REPLACE set, but no existing node found!
[  168.324608][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'.
[  168.776413][T13450] pimreg: left allmulticast mode
[  168.780701][T13450] dvmrp1: left allmulticast mode
[  168.861983][ T5878] tipc: Subscription rejected, illegal request
[  168.913592][T13459] syzkaller1: entered promiscuous mode
[  168.915617][T13459] syzkaller1: entered allmulticast mode
[  168.947594][T13461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2550'.
[  169.128486][ T5878] tipc: Subscription rejected, illegal request
[  169.182185][T13480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2557'.
[  169.186400][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'.
[  169.514669][ T5878] tipc: Subscription rejected, illegal request
[  169.614919][T13508] netlink: 'syz.2.2568': attribute type 83 has an invalid length.
[  169.620293][T13507] netlink: 'syz.2.2568': attribute type 83 has an invalid length.
[  170.014533][ T5234] Bluetooth: hci1: command tx timeout
[  170.835322][T13621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  171.029299][T13636] vxcan1: entered allmulticast mode
[  171.065592][T13640] validate_nla: 1 callbacks suppressed
[  171.065602][T13640] netlink: 'syz.1.2617': attribute type 2 has an invalid length.
[  171.166799][ T5715] tipc: Subscription rejected, illegal request
[  171.177337][T13659] netlink: 'syz.1.2622': attribute type 1 has an invalid length.
[  171.221588][T13659] bond10: (slave vti1): The slave device specified does not support setting the MAC address
[  171.226358][T13659] bond10: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  171.239304][T13659] bond10: (slave vti1): making interface the new active one
[  171.250383][T13659] bond10: (slave vti1): Enslaving as an active interface with an up link
[  171.370891][T13679] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  171.424305][T13684] netlink: 'syz.1.2633': attribute type 1 has an invalid length.
[  171.447241][T13684] 8021q: adding VLAN 0 to HW filter on device bond11
[  171.466870][T13684] 8021q: adding VLAN 0 to HW filter on device bond11
[  171.469605][T13684] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address
[  171.474389][T13684] bond11: (slave vxcan5): Error -95 calling set_mac_address
[  171.527317][T13690] veth5: entered promiscuous mode
[  171.534843][T13690] bond11: (slave veth5): Enslaving as an active interface with a down link
[  171.547699][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  171.551624][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.759101][ T5879] tipc: Subscription rejected, illegal request
[  171.802663][T13726] __nla_validate_parse: 16 callbacks suppressed
[  171.802673][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2646'.
[  171.837296][T13730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2649'.
[  171.842063][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  171.845965][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  171.849591][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  171.855907][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  171.858251][T13732] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2650'.
[  171.864738][T13733] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2650'.
[  171.878482][T13732] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2650'.
[  171.889848][T13732] unsupported nlmsg_type 40
[  171.895713][T13733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2650'.
[  171.976065][T13739] lo speed is unknown, defaulting to 1000
[  171.979870][T13739] wg1 speed is unknown, defaulting to 1000
[  172.279116][ T5878] tipc: Subscription rejected, illegal request
[  172.306491][T13767] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  172.449826][T13778] netlink: 'syz.2.2666': attribute type 25 has an invalid length.
[  172.533161][T13780] netlink: 'syz.2.2667': attribute type 15 has an invalid length.
[  173.402148][T13806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  173.593294][T13832] nbd: must specify at least one socket
[  173.670739][ T5878] tipc: Subscription rejected, illegal request
[  173.690138][T13838] vlan0: entered promiscuous mode
[  173.694065][T13838] bridge0: entered promiscuous mode
[  173.721530][T13837] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  173.781431][T13854] openvswitch: netlink: Key type 29 is not supported
[  173.853088][T13867] nbd: must specify at least one socket
[  173.878072][   T12] tipc: Subscription rejected, illegal request
[  174.276823][T13922] nbd: must specify at least one socket
[  174.330097][ T5878] tipc: Subscription rejected, illegal request
[  174.601218][T13947] netlink: 'syz.2.2725': attribute type 6 has an invalid length.
[  174.685141][   T12] tipc: Subscription rejected, illegal request
[  174.963347][T13970] lo speed is unknown, defaulting to 1000
[  174.966064][T13970] wg1 speed is unknown, defaulting to 1000
[  175.461976][   T24] lo speed is unknown, defaulting to 1000
[  175.463991][   T24] syz2: Port: 1 Link DOWN
[  175.637281][T14000] netlink: 'syz.1.2742': attribute type 1 has an invalid length.
[  175.640664][T14002] : renamed from bond_slave_0
[  175.704089][T14008] nbd: must specify a size in bytes for the device
[  175.844044][T14019] netlink: 'syz.1.2750': attribute type 2 has an invalid length.
[  175.879811][T14021] sch_fq: defrate 0 ignored.
[  175.948058][T14026] batadv0: left promiscuous mode
[  176.146711][T14030] nbd: must specify a size in bytes for the device
[  176.182736][T14026] bond5: left promiscuous mode
[  176.184558][T14026] bond6: left promiscuous mode
[  176.229874][T14026] bond7: left promiscuous mode
[  176.235362][T14026] bond7: left allmulticast mode
[  176.308733][T14026] gretap1: left allmulticast mode
[  176.326448][T14026] veth5: left promiscuous mode
[  176.329182][T14026] vlan0: left promiscuous mode
[  176.331047][T14026] bridge0: left promiscuous mode
[  176.469178][T13936] Set syz1 is full, maxelem 65536 reached
[  176.490706][T14044] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  176.584270][T14058] nbd: must specify a size in bytes for the device
[  176.747997][T14067] bridge0: port 1(batadv1) entered blocking state
[  176.751007][T14067] bridge0: port 1(batadv1) entered disabled state
[  176.754605][T14067] batadv1: entered allmulticast mode
[  176.760850][T14067] batadv1: entered promiscuous mode
[  176.827002][T14073] __nla_validate_parse: 28 callbacks suppressed
[  176.827012][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2767'.
[  177.047315][ T5878] tipc: Subscription rejected, illegal request
[  177.143071][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'.
[  177.175170][T14110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.197063][   T12] tipc: Subscription rejected, illegal request
[  177.213082][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2782'.
[  177.243407][T14120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.246171][T14120] syzkaller0: entered promiscuous mode
[  177.248264][T14120] syzkaller0: entered allmulticast mode
[  177.259592][T14120] tipc: Resetting bearer <eth:syzkaller0>
[  177.262477][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  177.263573][T14120] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  177.265683][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  177.272087][T14119] tipc: Resetting bearer <eth:syzkaller0>
[  177.279658][T14119] tipc: Disabling bearer <eth:syzkaller0>
[  177.461961][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2790'.
[  177.491004][ T5878] tipc: Subscription rejected, illegal request
[  177.626527][T14158] tipc: Resetting bearer <eth:syzkaller0>
[  177.703017][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'.
[  177.706174][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'.
[  177.710086][T14170] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2801'.
[  177.718535][T14170] vlan3: entered allmulticast mode
[  177.720837][T14170] gretap0: entered allmulticast mode
[  177.933340][T14187] netlink: 'syz.2.2803': attribute type 1 has an invalid length.
[  177.976343][T14187] bond7: (slave vti0): The slave device specified does not support setting the MAC address
[  177.982167][T14187] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  177.994263][T14187] bond7: (slave vti0): making interface the new active one
[  178.015057][T14187] bond7: (slave vti0): Enslaving as an active interface with an up link
[  178.327961][T14233] vlan1: entered promiscuous mode
[  178.329793][T14233] syz_tun: entered promiscuous mode
[  178.793348][T14274] netlink: 'syz.2.2817': attribute type 10 has an invalid length.
[  178.796831][T14274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2817'.
[  178.800434][T14274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.986296][T14291] syzkaller0: entered allmulticast mode
[  178.990017][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  178.993989][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2824'.
[  178.996389][ T5879] tipc: Subscription rejected, illegal request
[  179.087872][T14307] bridge0: port 2(syz_tun) entered blocking state
[  179.098334][T14307] bridge0: port 2(syz_tun) entered disabled state
[  179.100697][T14307] syz_tun: entered allmulticast mode
[  179.106634][T14307] syz_tun: left allmulticast mode
[  179.111507][T14307] netlink: 'syz.2.2828': attribute type 10 has an invalid length.
[  179.906151][T14385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  180.039918][   T33] audit: type=1804 audit(1757199873.106:4): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2866" name="/newroot/926/cgroup.controllers" dev="tmpfs" ino=4705 res=1 errno=0
[  180.057257][   T33] audit: type=1800 audit(1757199873.106:5): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2866" name="cgroup.controllers" dev="tmpfs" ino=4705 res=0 errno=0
[  180.561255][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  181.186729][T14447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  181.550333][T14478] netlink: 'syz.1.2888': attribute type 3 has an invalid length.
[  181.601897][ T5878] tipc: Subscription rejected, illegal request
[  181.745332][T14488] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  181.762551][T14488] bond12: entered promiscuous mode
[  181.764314][T14488] bond12: entered allmulticast mode
[  181.766573][T14488] 8021q: adding VLAN 0 to HW filter on device bond12
[  181.799471][T14493] tipc: Enabling of bearer <udp:syz> rejected, max 3 bearers permitted
[  181.900544][T14495] syzkaller1: entered promiscuous mode
[  181.903077][T14495] syzkaller1: entered allmulticast mode
[  181.957871][T14500] __nla_validate_parse: 4 callbacks suppressed
[  181.957880][T14500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2898'.
[  182.208023][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2907'.
[  182.347097][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'.
[  182.678532][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2923'.
[  182.729449][T14576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.735325][T14576] syzkaller0: entered promiscuous mode
[  182.737302][T14576] syzkaller0: entered allmulticast mode
[  182.742718][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'.
[  182.745930][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'.
[  182.750499][T14576] tipc: Resetting bearer <eth:syzkaller0>
[  182.753980][T14576] netlink: 'syz.0.2922': attribute type 8 has an invalid length.
[  182.757367][T14575] tipc: Resetting bearer <eth:syzkaller0>
[  182.764972][T14575] tipc: Disabling bearer <eth:syzkaller0>
[  183.008359][T14593] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2928'.
[  183.173335][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2931'.
[  183.814327][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'.
[  183.824645][T14621] macvlan0: entered allmulticast mode
[  183.827256][T14621] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  183.893922][T14628] netlink: 'syz.2.2936': attribute type 3 has an invalid length.
[  184.139251][T14649] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2943'.
[  184.302480][T14656] sctp: [Deprecated]: syz.0.2945 (pid 14656) Use of int in maxseg socket option.
[  184.302480][T14656] Use struct sctp_assoc_value instead
[  184.314522][T14662] netlink: 'syz.2.2947': attribute type 5 has an invalid length.
[  184.417083][T14668] netlink: 'syz.0.2945': attribute type 10 has an invalid length.
[  184.434590][T14668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.443377][T14668] : (slave batadv0): Enslaving as an active interface with an up link
[  184.485972][T14674] netlink: 'syz.0.2951': attribute type 11 has an invalid length.
[  184.586762][T14683] netlink: 'syz.2.2955': attribute type 16 has an invalid length.
[  184.589611][T14683] netlink: 'syz.2.2955': attribute type 17 has an invalid length.
[  184.614856][T14683] tipc: Resetting bearer <eth:syzkaller0>
[  184.627919][T14685] IPv6: NLM_F_REPLACE set, but no existing node found!
[  185.239786][T14709] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  185.306628][T14711] nbd: must specify a size in bytes for the device
[  185.536802][ T5878] tipc: Subscription rejected, illegal request
[  185.650373][T14735] ip6gre2: entered allmulticast mode
[  185.748133][ T5715] tipc: Subscription rejected, illegal request
[  185.878442][   T12] tipc: Subscription rejected, illegal request
[  185.889540][T14770] netlink: 'syz.0.2987': attribute type 4 has an invalid length.
[  186.040580][T14783] netlink: 'syz.0.2991': attribute type 8 has an invalid length.
[  186.206565][T14797] netlink: 'syz.0.2995': attribute type 1 has an invalid length.
[  186.210099][T14797] netlink: 'syz.0.2995': attribute type 1 has an invalid length.
[  186.504278][T14820] lo speed is unknown, defaulting to 1000
[  186.508704][T14820] wg1 speed is unknown, defaulting to 1000
[  186.535603][T14825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.561347][T14825] tipc: Disabling bearer <eth:syzkaller0>
[  186.608365][T14830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.615814][T14830] syzkaller0: entered promiscuous mode
[  186.618309][T14830] syzkaller0: entered allmulticast mode
[  186.718869][T14831] 8021q: adding VLAN 0 to HW filter on device team0
[  186.724997][T14831] tipc: Resetting bearer <eth:team0>
[  186.728473][T14831] tipc: Resetting bearer <eth:team0>
[  186.732053][T14831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.189280][T14853] __nla_validate_parse: 47 callbacks suppressed
[  187.189292][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'.
[  187.196453][ T5715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  187.207574][T14853] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  187.445648][T14829] tipc: Resetting bearer <eth:syzkaller0>
[  187.467099][T14829] tipc: Disabling bearer <eth:syzkaller0>
[  187.728979][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3019'.
[  187.748498][T14883] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  187.760542][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3019'.
[  187.935553][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3024'.
[  188.000083][ T5878] tipc: Subscription rejected, illegal request
[  188.238061][T14929] 8021q: adding VLAN 0 to HW filter on device team0
[  188.247408][T14929] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  188.258011][   T10] lo speed is unknown, defaulting to 1000
[  188.263436][   T10] syz2: Port: 1 Link ACTIVE
[  188.326863][T14949] syzkaller0: entered promiscuous mode
[  188.329855][T14949] syzkaller0: entered allmulticast mode
[  188.333591][T14948] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.363235][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'.
[  188.363251][T14948] tipc: Resetting bearer <eth:syzkaller0>
[  188.388833][T14948] tipc: Disabling bearer <eth:syzkaller0>
[  188.438020][T14959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3042'.
[  188.438788][T14960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3043'.
[  188.442040][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'.
[  188.445829][T14960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.448863][T14959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3042'.
[  188.458254][T14960] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:19996
[  188.471235][T14959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3042'.
[  188.745505][T14981] : (slave dummy0): Releasing backup interface
[  188.748149][T14981] : (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  188.886015][T14994] lo: entered allmulticast mode
[  188.983904][T15004] validate_nla: 7 callbacks suppressed
[  188.983993][T15004] netlink: 'syz.2.3056': attribute type 3 has an invalid length.
[  189.052940][T15014] netlink: 'syz.1.3058': attribute type 1 has an invalid length.
[  189.090399][T15017] 8021q: VLANs not supported on gre0
[  189.476073][T15056] netlink: 'syz.2.3069': attribute type 10 has an invalid length.
[  190.158779][T15093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.169673][T15096] netlink: 'syz.0.3085': attribute type 1 has an invalid length.
[  190.190215][T15096] 8021q: adding VLAN 0 to HW filter on device bond6
[  190.233237][T15099] tipc: MTU too low for tipc bearer
[  190.349525][T15111] netlink: 'syz.1.3090': attribute type 1 has an invalid length.
[  190.456131][T15123] netlink: 'syz.2.3094': attribute type 12 has an invalid length.
[  190.594697][T15143] xfrm0: entered promiscuous mode
[  190.596769][T15143] xfrm0: entered allmulticast mode
[  190.707366][T15158] netlink: 'syz.2.3105': attribute type 10 has an invalid length.
[  190.973676][T15189] netlink: 'syz.2.3117': attribute type 3 has an invalid length.
[  191.020016][T15192] netlink: 'syz.0.3118': attribute type 1 has an invalid length.
[  191.277609][T15223] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  191.420582][T15241] 8021q: adding VLAN 0 to HW filter on device bond7
[  191.433976][T15241] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  191.437838][T15241] bond7: (slave macvlan0): Enslaving as a backup interface with a down link
[  191.443108][T15241] : (slave team0): Releasing backup interface
[  191.454146][T15241] : (slave batadv0): Releasing backup interface
[  191.478162][T15241] bond2: (slave gretap2): Releasing active interface
[  191.482357][T15241] batman_adv: batadv0: Removing interface: ipvlan0
[  191.493929][T15251] netlink: 'syz.0.3132': attribute type 1 has an invalid length.
[  191.506533][T15241] bond7: (slave macvlan0): Releasing backup interface
[  191.612304][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.851962][T15301] gretap0: entered promiscuous mode
[  191.854460][T15301] batadv_slave_1: entered promiscuous mode
[  191.856933][T15301] erspan0: entered promiscuous mode
[  191.863953][T15301] erspan0: left promiscuous mode
[  191.866311][T15301] gretap0: left promiscuous mode
[  191.873889][T15301] batadv_slave_1: left promiscuous mode
[  192.070240][T15318] wg1: entered promiscuous mode
[  192.078114][T15318] wg1: entered allmulticast mode
[  192.245203][T15321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  192.398196][T15337] __nla_validate_parse: 21 callbacks suppressed
[  192.398214][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'.
[  192.424910][T15337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3162'.
[  192.431773][T15336] delete_channel: no stack
[  192.829330][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3171'.
[  193.136467][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3178'.
[  193.475633][T15405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3185'.
[  193.747511][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'.
[  193.820246][T15433] 8021q: adding VLAN 0 to HW filter on device bond8
[  193.864474][T15433] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  193.872716][T15433] bond8: (slave macvlan1): Enslaving as a backup interface with a down link
[  193.894901][T15433] batadv1: left allmulticast mode
[  193.902083][T15433] batadv1: left promiscuous mode
[  193.903970][T15433] bridge0: port 1(batadv1) entered disabled state
[  193.908410][T15433] bond7: (slave vti0): Releasing backup interface
[  193.913794][T15433] bond8: (slave macvlan1): Releasing backup interface
[  193.978727][T15452] syzkaller1: entered promiscuous mode
[  193.980655][T15452] syzkaller1: entered allmulticast mode
[  194.054775][T15459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3204'.
[  194.070352][T15460] tipc: Enabled bearer <udp:syz2>, priority 6
[  194.334270][T15480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.503175][T15505] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3219'.
[  194.507411][T15506] validate_nla: 3 callbacks suppressed
[  194.507418][T15506] netlink: 'syz.1.3219': attribute type 26 has an invalid length.
[  194.601020][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3224'.
[  194.641870][T15515] block nbd3: server does not support multiple connections per device.
[  194.645983][T15515] block nbd3: shutting down sockets
[  194.707277][T15525] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3228'.
[  194.890592][T15537] netlink: 'syz.1.3233': attribute type 13 has an invalid length.
[  194.896680][T15537] netlink: 'syz.1.3233': attribute type 17 has an invalid length.
[  194.906114][T15537] tipc: Resetting bearer <eth:team0>
[  194.909235][T15537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.935543][T15537] lo speed is unknown, defaulting to 1000
[  194.938760][T15537] wg1 speed is unknown, defaulting to 1000
[  195.218775][T15557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.233774][T15557] syzkaller0: entered promiscuous mode
[  195.235947][T15557] syzkaller0: entered allmulticast mode
[  195.290990][T15557] tipc: Resetting bearer <eth:syzkaller0>
[  195.298798][T15556] tipc: Resetting bearer <eth:syzkaller0>
[  195.309406][T15556] tipc: Disabling bearer <eth:syzkaller0>
[  195.855954][T15611] netlink: 'syz.0.3253': attribute type 1 has an invalid length.
[  195.860104][T15613] netlink: 'syz.0.3253': attribute type 1 has an invalid length.
[  195.937751][T15611] openvswitch: netlink: Message has 4 unknown bytes.
[  195.988804][T15629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.035514][T15633] IPv6: sit3: Disabled Multicast RS
[  196.054100][T15638] netlink: 'syz.0.3264': attribute type 3 has an invalid length.
[  197.357790][T15672] netlink: 'syz.1.3271': attribute type 30 has an invalid length.
[  197.478048][T15683] __nla_validate_parse: 3 callbacks suppressed
[  197.478063][T15683] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3270'.
[  197.508956][T15685] vlan3: entered promiscuous mode
[  197.790580][T15705] can: request_module (can-proto-5) failed.
[  198.278833][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3292'.
[  198.329637][T15754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3296'.
[  198.619746][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3301'.
[  198.643762][T15780] 8021q: adding VLAN 0 to HW filter on device bond9
[  199.201320][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.287404][T15794] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3305'.
[  199.290530][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'.
[  199.293943][T15794] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3305'.
[  199.298657][T15794] netlink: 'syz.1.3305': attribute type 3 has an invalid length.
[  199.308640][T15794] netlink: 'syz.1.3305': attribute type 2 has an invalid length.
[  199.313262][T15794] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3305'.
[  199.405935][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3310'.
[  199.410568][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3310'.
[  200.131766][T15857] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20004
[  200.241544][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.479378][T15897] IPv6: Can't replace route, no match found
[  200.881258][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  201.289300][   T56] block nbd3: Receive control failed (result -104)
[  201.291409][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.665378][T15973] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  201.670174][T15973] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.907267][T15999] tap0: tun_chr_ioctl cmd 1074025676
[  201.909204][T15999] tap0: owner set to 0
[  202.132864][T16017] openvswitch: netlink: Duplicate or invalid key (type 0).
[  202.135930][T16017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.537180][T16040] __nla_validate_parse: 14 callbacks suppressed
[  202.537189][T16040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3391'.
[  202.539666][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'.
[  202.549676][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'.
[  202.608072][T16049] netlink: 'syz.1.3395': attribute type 11 has an invalid length.
[  202.946952][T16081] tap0: tun_chr_ioctl cmd 2148553947
[  203.328886][T16106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3414'.
[  203.737937][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3422'.
[  203.753937][T16125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3422'.
[  203.817403][T16125] netlink: 'syz.2.3422': attribute type 1 has an invalid length.
[  203.822332][T16125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3422'.
[  203.941777][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3428'.
[  203.979986][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3430'.
[  203.985327][T16150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.995157][T16150] syzkaller0: mtu less than device minimum
[  204.039739][T16154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'.
[  204.114137][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.124836][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.129868][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.134708][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.140057][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.144362][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.160252][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.174245][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  204.176861][T16161] netlink: 'syz.1.3433': attribute type 10 has an invalid length.
[  205.457702][T16263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.608229][T16271] syzkaller0: entered promiscuous mode
[  205.610746][T16271] syzkaller0: entered allmulticast mode
[  205.617700][T16270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.639001][T16271] tipc: Resetting bearer <eth:syzkaller0>
[  205.650441][T16271] tipc: Disabling bearer <eth:syzkaller0>
[  205.965418][T16294] : entered promiscuous mode
[  205.980431][T16296] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.115548][T16313] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  207.204842][T16399] tipc: Resetting bearer <eth:syzkaller0>
[  207.210275][T16399] tipc: Failed to remove unknown binding: 66,1,1/2746135636:3492822711/3492822713
[  207.216365][T16399] tipc: Failed to remove unknown binding: 66,1,1/2746135636:3492822711/3492822713
[  207.220256][T16399] tipc: Failed to remove unknown binding: 66,1,1/2746135636:3492822711/3492822713
[  207.442380][T16419] bridge8: port 1(bond10) entered blocking state
[  207.445076][T16419] bridge8: port 1(bond10) entered disabled state
[  207.447817][T16419] bond10: entered allmulticast mode
[  207.620606][T16437] Set syz1 is full, maxelem 65536 reached
[  207.744489][T16446] : entered promiscuous mode
[  208.161424][ T5234] Bluetooth: hci0: command tx timeout
[  208.341349][T16492] __nla_validate_parse: 213 callbacks suppressed
[  208.341397][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3540'.
[  208.589854][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'.
[  208.770169][T16526] netlink: 468 bytes leftover after parsing attributes in process `syz.2.3551'.
[  208.778217][T16530] openvswitch: netlink: Multiple metadata blocks provided
[  208.810903][T16532] delete_channel: no stack
[  208.817391][T16532] delete_channel: no stack
[  209.398881][T16592] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3573'.
[  209.494774][T16608] netlink: 'syz.0.3574': attribute type 11 has an invalid length.
[  209.507176][T16610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3577'.
[  209.526871][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3577'.
[  209.765295][T16631] nbd: must specify at least one socket
[  209.809621][T16633] nft_compat: unsupported protocol 0
[  209.862757][T16635] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  209.865997][T16635] team0: Device macvtap1 is already an upper device of the team interface
[  210.573203][T16641] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3588'.
[  210.810202][T16670] validate_nla: 30 callbacks suppressed
[  210.810212][T16670] netlink: 'syz.0.3599': attribute type 1 has an invalid length.
[  210.832276][T16670] 8021q: adding VLAN 0 to HW filter on device bond11
[  210.837285][T16670] Set syz1 is full, maxelem 65536 reached
[  210.946848][T16678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3600'.
[  211.963436][T16687] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  211.996967][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'.
[  212.019988][T16695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3607'.
[  212.104999][T16704] netlink: 'syz.0.3610': attribute type 2 has an invalid length.
[  212.108294][T16704] netlink: 'syz.0.3610': attribute type 8 has an invalid length.
[  212.209849][T16712] syzkaller1: entered promiscuous mode
[  212.212147][T16712] syzkaller1: entered allmulticast mode
[  212.246765][T16715] syzkaller0: entered promiscuous mode
[  212.248698][T16715] syzkaller0: entered allmulticast mode
[  212.254925][T16714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.267543][T16714] tipc: Resetting bearer <eth:syzkaller0>
[  212.280336][T16714] tipc: Disabling bearer <eth:syzkaller0>
[  212.910027][T16760] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode
[  212.987471][T16787] netlink: 'syz.0.3639': attribute type 1 has an invalid length.
[  213.053262][T16796] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  213.056271][T16796] netlink: 'syz.0.3642': attribute type 58 has an invalid length.
[  213.370617][T16812] __nla_validate_parse: 39 callbacks suppressed
[  213.370626][T16812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3648'.
[  213.379307][T16807] can: request_module (can-proto-0) failed.
[  213.384990][T16807] openvswitch: netlink: IP tunnel dst address not specified
[  213.566415][T16822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3650'.
[  213.796213][T16851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.799743][T16851] syzkaller0: entered promiscuous mode
[  213.802693][T16851] syzkaller0: entered allmulticast mode
[  213.818786][T16851] tipc: Resetting bearer <eth:syzkaller0>
[  213.826106][T16850] tipc: Resetting bearer <eth:syzkaller0>
[  213.835772][T16850] tipc: Disabling bearer <eth:syzkaller0>
[  214.106325][T16877] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3671'.
[  214.203807][T16886] netlink: 'syz.1.3673': attribute type 1 has an invalid length.
[  214.388487][   T33] audit: type=1800 audit(1757199907.456:6): pid=16896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3676" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6528 res=0 errno=0
[  214.621399][T16912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3683'.
[  214.702275][T16920] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  214.765149][T16928] netlink: 'syz.2.3688': attribute type 1 has an invalid length.
[  214.806113][T16931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3689'.
[  214.860047][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3690'.
[  214.976881][T16947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3696'.
[  215.155536][T16952] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  215.285520][T16954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3699'.
[  215.415947][T16961] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000
[  216.078224][T16993] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.3713'.
[  216.132626][T17000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3715'.
[  216.269376][T17016] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  216.592242][T17038] delete_channel: no stack
[  216.596621][T17038] xt_limit: Overflow, try lower: 271964/0
[  216.697928][T17050] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  216.701708][T17050] syzkaller0: refused to change device tx_queue_len
[  216.766493][T17047] netlink: 'syz.0.3730': attribute type 2 has an invalid length.
[  217.038450][T17073] netlink: 'syz.0.3739': attribute type 1 has an invalid length.
[  217.068945][T17073] netlink: 'syz.0.3739': attribute type 11 has an invalid length.
[  217.073283][T17073] netlink: 'syz.0.3739': attribute type 41 has an invalid length.
[  217.187889][T17091] 8021q: adding VLAN 0 to HW filter on device bond14
[  217.191575][T17091] bond13: (slave bond14): Enslaving as an active interface with an up link
[  217.198693][T17091] bond13 (unregistering): (slave bond14): Releasing backup interface
[  217.204810][T17091] bond13 (unregistering): Released all slaves
[  217.402441][T17106] vlan1: entered promiscuous mode
[  217.404942][T17106] vlan1: entered allmulticast mode
[  217.407568][T17106] hsr_slave_1: entered allmulticast mode
[  217.778900][T17128] tipc: Resetting bearer <eth:team0>
[  218.223167][T17177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.227470][T17177] tipc: Resetting bearer <eth:syzkaller0>
[  218.264726][T17182] netlink: 'syz.2.3770': attribute type 1 has an invalid length.
[  218.267884][T17179] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  218.383195][T17200] __nla_validate_parse: 10 callbacks suppressed
[  218.383205][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3776'.
[  218.394192][T17200] erspan0: entered promiscuous mode
[  218.429193][T17204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.527453][T17219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3782'.
[  218.811336][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  219.326511][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'.
[  219.327464][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3786'.
[  219.329969][T17232] openvswitch: netlink: Missing key (keys=40, expected=100)
[  219.337869][T17231] openvswitch: netlink: Missing key (keys=40, expected=100)
[  219.424127][T17242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3792'.
[  219.458676][T17240] bond0: entered promiscuous mode
[  219.460290][T17247] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3793'.
[  219.465646][T17240] batadv_slave_0: entered promiscuous mode
[  219.472027][T17240] batadv0: entered promiscuous mode
[  219.474421][T17240] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  219.477858][T17240] hsr1: entered allmulticast mode
[  219.479591][T17240] bond0: entered allmulticast mode
[  219.481811][T17240] batadv_slave_0: entered allmulticast mode
[  219.483785][T17240] batadv0: entered allmulticast mode
[  219.487751][T17240] bond0: left promiscuous mode
[  219.489853][T17240] batadv_slave_0: left promiscuous mode
[  219.493686][T17240] batadv0: left promiscuous mode
[  219.638618][T17269] netlink: 'syz.1.3798': attribute type 10 has an invalid length.
[  219.646301][T17269] team0: Cannot enslave team device to itself
[  219.790224][T17287] netlink: 'syz.2.3805': attribute type 1 has an invalid length.
[  219.822114][T17287] 8021q: adding VLAN 0 to HW filter on device bond11
[  219.826776][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3802'.
[  219.829211][T17293] pimreg: left allmulticast mode
[  219.829719][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3802'.
[  219.855438][T17287] bond11: (slave gretap2): making interface the new active one
[  219.859866][T17287] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  219.874276][T17294] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge
[  219.875462][ T5715] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.884841][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.887873][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.893575][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.977476][T17303] delete_channel: no stack
[  219.995580][T17302] delete_channel: no stack
[  220.130685][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3819'.
[  220.273347][T17350] netlink: 464 bytes leftover after parsing attributes in process `syz.0.3825'.
[  220.555969][   T12] tipc: Subscription rejected, illegal request
[  220.745444][T17396] netlink: 'syz.0.3840': attribute type 4 has an invalid length.
[  220.933619][T17414] netlink: 'syz.2.3847': attribute type 8 has an invalid length.
[  220.950086][T17419] netlink: 'syz.2.3847': attribute type 8 has an invalid length.
[  221.236976][   T33] audit: type=1800 audit(1757199914.306:7): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3858" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=6266 res=0 errno=0
[  221.543496][T17475] lo speed is unknown, defaulting to 1000
[  221.547347][T17475] wg1 speed is unknown, defaulting to 1000
[  221.678186][T17488] vlan2: entered allmulticast mode
[  221.680577][T17488] batadv_slave_1: entered allmulticast mode
[  221.787683][T17495] tap1: tun_chr_ioctl cmd 1074025675
[  221.790124][T17495] tap1: persist disabled
[  221.881370][T17508] bridge: RTM_NEWNEIGH with invalid state 0x2c
[  222.694321][T17540] mac80211_hwsim hwsim6 ;: renamed from wlan0
[  222.822236][T17548] validate_nla: 3 callbacks suppressed
[  222.822246][T17548] netlink: 'syz.0.3887': attribute type 1 has an invalid length.
[  222.829758][T17548] batadv_slave_0: entered promiscuous mode
[  222.837001][T17545] batadv_slave_0: left promiscuous mode
[  223.099731][T17571] netlink: 'syz.0.3896': attribute type 1 has an invalid length.
[  223.525616][T17613] __nla_validate_parse: 16 callbacks suppressed
[  223.525626][T17613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3909'.
[  223.683638][T17628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3915'.
[  223.745590][T17639] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 4, id = 0
[  223.869395][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3921'.
[  223.879820][T17646] netlink: zone id is out of range
[  223.883975][T17646] netlink: zone id is out of range
[  223.886241][T17646] netlink: zone id is out of range
[  223.888639][T17646] netlink: zone id is out of range
[  223.891060][T17646] netlink: zone id is out of range
[  223.895263][T17646] netlink: zone id is out of range
[  223.905902][T17646] netlink: zone id is out of range
[  223.908333][T17646] netlink: zone id is out of range
[  223.910634][T17646] netlink: zone id is out of range
[  223.914764][T17646] netlink: zone id is out of range
[  223.966116][T17653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3923'.
[  224.237896][T17680] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  224.247114][T17680] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.336924][T17694] unknown channel width for channel at 909000KHz?
[  224.396059][T17700] netlink: 'syz.1.3938': attribute type 4 has an invalid length.
[  224.410200][T17700] netlink: 'syz.1.3938': attribute type 4 has an invalid length.
[  224.448586][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'.
[  224.514195][T17706] 8021q: adding VLAN 0 to HW filter on device bond13
[  224.667144][T17726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3946'.
[  224.777502][T17733] netlink: 'syz.1.3948': attribute type 12 has an invalid length.
[  225.612234][T17757] syzkaller1: entered promiscuous mode
[  225.614639][T17757] syzkaller1: entered allmulticast mode
[  225.626051][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3955'.
[  225.649756][T17749] lo speed is unknown, defaulting to 1000
[  225.655164][T17762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3956'.
[  225.662852][T17749] wg1 speed is unknown, defaulting to 1000
[  225.710377][T17766] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3957'.
[  225.730254][T17768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3958'.
[  225.885931][T17787] netlink: 'syz.2.3962': attribute type 1 has an invalid length.
[  225.933993][T17786] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  225.941291][T17786] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  226.013248][T17794] netlink: 'syz.1.3967': attribute type 1 has an invalid length.
[  226.581231][T17843] vlan3: entered allmulticast mode
[  226.583463][T17843] veth1: entered allmulticast mode
[  226.997678][T17868] netlink: 'syz.0.3988': attribute type 1 has an invalid length.
[  227.248105][T17895] syzkaller0: entered promiscuous mode
[  227.252473][T17895] syzkaller0: entered allmulticast mode
[  227.827797][T17926] sctp: [Deprecated]: syz.0.4007 (pid 17926) Use of int in max_burst socket option deprecated.
[  227.827797][T17926] Use struct sctp_assoc_value instead
[  228.013314][T17942] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  228.020091][T17942] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  228.140984][T17955] netlink: 'syz.0.4017': attribute type 21 has an invalid length.
[  228.144783][T17955] netlink: 'syz.0.4017': attribute type 5 has an invalid length.
[  228.554529][T17995] __nla_validate_parse: 19 callbacks suppressed
[  228.554538][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4029'.
[  228.587842][T17986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4026'.
[  229.089972][T18044] : entered promiscuous mode
[  229.272445][T18062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4050'.
[  229.288905][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4052'.
[  229.292627][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4052'.
[  229.363506][T18062] lo speed is unknown, defaulting to 1000
[  229.369063][T18062] wg1 speed is unknown, defaulting to 1000
[  229.476633][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4056'.
[  229.714141][T18081] netlink: 428 bytes leftover after parsing attributes in process `syz.2.4058'.
[  229.992813][T18094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4062'.
[  230.109252][T18102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4064'.
[  230.603854][T18158] dvmrp8: entered allmulticast mode
[  230.607260][T18157] dvmrp8: left allmulticast mode
[  230.622331][T18161] netlink: 'syz.2.4080': attribute type 5 has an invalid length.
[  230.654299][T18163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4081'.
[  230.816749][T18177] lo speed is unknown, defaulting to 1000
[  230.819296][T18177] wg1 speed is unknown, defaulting to 1000
[  231.053574][T18199] delete_channel: no stack
[  231.059065][T18205] net_ratelimit: 11 callbacks suppressed
[  231.059073][T18205] openvswitch: netlink: Message has 20 unknown bytes.
[  231.064829][T18205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.265558][T18220] netlink: 'syz.2.4100': attribute type 1 has an invalid length.
[  231.268919][T18220] netlink: 'syz.2.4100': attribute type 11 has an invalid length.
[  231.373196][T18232] xfrm0: left promiscuous mode
[  231.375281][T18232] xfrm0: left allmulticast mode
[  231.722186][T18248] tipc: Can't bind to reserved service type 2
[  231.845611][T18260] netlink: 'syz.1.4112': attribute type 62 has an invalid length.
[  232.057604][T18283] dvmrp0: entered allmulticast mode
[  232.165154][T18303] Bluetooth: MGMT ver 1.23
[  232.167593][T18302] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  232.240380][T18307] syzkaller1: entered promiscuous mode
[  232.243864][T18307] syzkaller1: entered allmulticast mode
[  232.506327][T18325] syzkaller1: entered allmulticast mode
[  232.779505][T18337] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  233.092701][T18346] netlink: 'syz.0.4144': attribute type 3 has an invalid length.
[  233.435333][T18350] netlink: 'syz.0.4145': attribute type 12 has an invalid length.
[  233.698036][T18354] __nla_validate_parse: 11 callbacks suppressed
[  233.698052][T18354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4147'.
[  233.731233][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'.
[  233.915055][T18356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4148'.
[  234.131881][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4150'.
[  234.406487][T18369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4152'.
[  234.661712][T18375] netlink: 'syz.0.4155': attribute type 7 has an invalid length.
[  235.084641][T18387] netlink: 'syz.0.4157': attribute type 23 has an invalid length.
[  235.356088][T18393] syzkaller0: entered promiscuous mode
[  235.357942][T18393] syzkaller0: entered allmulticast mode
[  235.474838][T18398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4160'.
[  236.016621][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4161'.
[  237.040250][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4169'.
[  237.193200][T18440] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  237.267318][T18444] netlink: 'syz.0.4173': attribute type 1 has an invalid length.
[  237.276521][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4173'.
[  237.288884][T18444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4173'.
[  237.318744][T18444] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  237.324758][T18444] gretap3: entered promiscuous mode
[  237.614509][T18474] netlink: 'syz.0.4182': attribute type 21 has an invalid length.
[  237.876368][T18485] netlink: 'syz.2.4186': attribute type 3 has an invalid length.
[  237.929462][T18491] vlan3: entered promiscuous mode
[  237.935058][T18491] bond0: entered promiscuous mode
[  238.115613][T18501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.148046][T18515] netlink: 'syz.0.4196': attribute type 3 has an invalid length.
[  238.948745][T18553] __nla_validate_parse: 9 callbacks suppressed
[  238.948754][T18553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4209'.
[  239.132237][T18557] netlink: 'syz.2.4211': attribute type 3 has an invalid length.
[  239.200704][T18564] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4212'.
[  239.212284][T18564] batadv0: entered promiscuous mode
[  239.214347][T18564] batadv0: entered allmulticast mode
[  239.342027][T18564] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4212'.
[  239.345666][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4212'.
[  239.349406][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4212'.
[  239.355997][T18564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4212'.
[  239.461626][T18571] netlink: 'syz.1.4216': attribute type 1 has an invalid length.
[  239.486489][T18571] bond13: (slave geneve3): Opening slave failed
[  239.547410][T18571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4216'.
[  239.674593][T18595] lo speed is unknown, defaulting to 1000
[  239.680749][T18595] wg1 speed is unknown, defaulting to 1000
[  239.738885][T18600] netlink: 'syz.1.4225': attribute type 10 has an invalid length.
[  239.749818][T18600] team0: Port device dummy0 added
[  239.759232][T18600] netlink: 'syz.1.4225': attribute type 10 has an invalid length.
[  239.763777][T18600] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  239.772916][T18600] team0: Failed to send options change via netlink (err -105)
[  239.776301][T18600] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  239.783364][T18600] team0: Port device dummy0 removed
[  239.790337][T18600] dummy0: entered allmulticast mode
[  239.793882][T18600] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  240.933148][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4235'.
[  240.987133][T18644] netlink: 364 bytes leftover after parsing attributes in process `syz.2.4237'.
[  240.991061][T18644] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  241.298489][T18661] 8021q: adding VLAN 0 to HW filter on device bond13
[  241.303079][T18661] bond0: (slave bond13): Enslaving as an active interface with a down link
[  241.310519][T18666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.315747][T18666] syzkaller0: entered promiscuous mode
[  241.318302][T18666] syzkaller0: entered allmulticast mode
[  241.331470][T18666] tipc: Resetting bearer <eth:syzkaller0>
[  241.335258][T18665] tipc: Resetting bearer <eth:syzkaller0>
[  241.343917][T18665] tipc: Disabling bearer <eth:syzkaller0>
[  241.458192][T18672] team0: Mode changed to "activebackup"
[  241.462256][T18672] vlan0: entered promiscuous mode
[  241.464419][T18672] bridge0: entered promiscuous mode
[  241.579236][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'.
[  241.583586][T18680] Unsupported xt match
[  241.583596][T18680] unable to load match
[  242.563961][T18697] lo speed is unknown, defaulting to 1000
[  242.567668][T18697] wg1 speed is unknown, defaulting to 1000
[  242.870058][T18726] netlink: 'syz.0.4267': attribute type 7 has an invalid length.
[  243.399618][T18786] netlink: 'syz.2.4286': attribute type 83 has an invalid length.
[  252.823732][T18805] can: request_module (can-proto-0) failed.
[  252.826535][T18805] openvswitch: netlink: IP tunnel dst address not specified
[  252.830797][T18808] netlink: 'syz.1.4293': attribute type 10 has an invalid length.
[  252.844695][T18805] can: request_module (can-proto-0) failed.
[  252.847285][T18805] openvswitch: netlink: IP tunnel dst address not specified
[  252.850227][T18805] __nla_validate_parse: 6 callbacks suppressed
[  252.850234][T18805] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4292'.
[  252.860339][T18808] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  252.877340][T18808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4293'.
[  253.112251][T18843] lo speed is unknown, defaulting to 1000
[  253.116697][T18843] wg1 speed is unknown, defaulting to 1000
[  253.154030][T18841] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  253.395615][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4309'.
[  253.395715][T18868] lo speed is unknown, defaulting to 1000
[  253.409362][T18868] wg1 speed is unknown, defaulting to 1000
[  253.413872][ T5234] Bluetooth: hci2: link tx timeout
[  253.415817][ T5234] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  253.448162][T18875] xt_policy: neither incoming nor outgoing policy selected
[  253.515395][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4308'.
[  254.477290][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4318'.
[  254.480346][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'.
[  254.768245][T18929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4325'.
[  255.010046][T18941] bond0: (slave dummy0): Releasing backup interface
[  255.015790][T18941] dummy0: left allmulticast mode
[  255.194009][T18952] netlink: 'syz.1.4334': attribute type 3 has an invalid length.
[  255.232982][T18954] syzkaller1: entered promiscuous mode
[  255.235357][T18954] syzkaller1: entered allmulticast mode
[  255.239545][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'.
[  255.281357][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  255.320979][T18960] netlink: 'syz.2.4338': attribute type 1 has an invalid length.
[  255.326212][T18960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4338'.
[  255.377487][T18962] bond0: Device is already in use.
[  255.445091][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  255.571469][T18984] syzkaller1: entered promiscuous mode
[  255.573354][T18984] syzkaller1: entered allmulticast mode
[  255.694658][T18999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4351'.
[  255.697786][T18999] openvswitch: netlink: Flow key attr not present in new flow.
[  255.914549][T19021] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  256.176625][T19059] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  256.320763][T19062] siw: device registration error -23
[  256.495331][T19090] netlink: 'syz.1.4376': attribute type 4 has an invalid length.
[  256.504613][T19091] openvswitch: netlink: IP tunnel dst address not specified
[  256.606833][T19096] netlink: 'syz.1.4379': attribute type 3 has an invalid length.
[  257.431658][T19137] netlink: 'syz.2.4390': attribute type 3 has an invalid length.
[  257.635690][T19156] netlink: 'syz.0.4397': attribute type 3 has an invalid length.
[  257.686103][T19162] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  257.825213][T19176] tipc: MTU too low for tipc bearer
[  257.885846][T19183] netlink: 'syz.1.4407': attribute type 1 has an invalid length.
[  258.000161][T19191] veth11: entered promiscuous mode
[  258.039259][T19198] __nla_validate_parse: 12 callbacks suppressed
[  258.039272][T19198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4412'.
[  258.045107][T19198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4412'.
[  258.048125][T19198] netlink: 'syz.1.4412': attribute type 2 has an invalid length.
[  258.173596][T19210] netlink: 'syz.1.4416': attribute type 3 has an invalid length.
[  258.253090][T19212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4417'.
[  258.400248][T19226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4421'.
[  258.490671][T19236] netlink: 'syz.1.4424': attribute type 10 has an invalid length.
[  258.497432][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4424'.
[  258.543607][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4427'.
[  258.575940][T19245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4428'.
[  258.790976][T19266] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4433'.
[  258.836096][T19263] syzkaller0: entered promiscuous mode
[  258.838594][T19263] syzkaller0: entered allmulticast mode
[  258.859932][ T5715] syzkaller0: tun_net_xmit 70
[  258.870208][T19263] syzkaller0: tun_chr_ioctl cmd 1074025677
[  258.875348][T19263] syzkaller0: Linktype set failed because interface is up
[  258.881666][T19263] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4435'.
[  259.139946][T19303] netlink: 'syz.2.4447': attribute type 3 has an invalid length.
[  259.166766][T19306] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4448'.
[  259.173735][T19306] netlink: 'syz.1.4448': attribute type 13 has an invalid length.
[  259.176886][T19306] netlink: 'syz.1.4448': attribute type 17 has an invalid length.
[  259.190474][T19306] 8021q: adding VLAN 0 to HW filter on device team0
[  259.193890][T19306] tipc: Resetting bearer <eth:team0>
[  259.196253][T19306] tipc: Resetting bearer <eth:team0>
[  259.199248][T19306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.748342][T19333] netlink: 'syz.0.4458': attribute type 3 has an invalid length.
[  259.753482][   T57] block nbd4: Receive control failed (result -104)
[  260.327624][T19393] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  260.353654][T19393] bond15: entered promiscuous mode
[  260.356038][T19393] bond15: entered allmulticast mode
[  260.358642][T19393] 8021q: adding VLAN 0 to HW filter on device bond15
[  260.456407][T19405] netlink: 'syz.2.4484': attribute type 2 has an invalid length.
[  260.472007][T19407] IPv6: sit4: Disabled Multicast RS
[  260.543773][T19417] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  260.615559][T19427] netlink: 'syz.1.4492': attribute type 3 has an invalid length.
[  260.698057][T19437] lo speed is unknown, defaulting to 1000
[  260.700669][T19437] wg1 speed is unknown, defaulting to 1000
[  260.737931][T19437] Bluetooth: MGMT ver 1.23
[  260.868048][T19456] lo speed is unknown, defaulting to 1000
[  260.870640][T19456] wg1 speed is unknown, defaulting to 1000
[  260.958911][T19463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  260.965181][T19463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  261.290743][T19485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.697824][T19520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.806240][T19529] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  262.585522][T19586] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  262.877458][T19603] tipc: New replicast peer: 255.255.255.255
[  262.880384][T19603] tipc: Enabled bearer <udp:syz2>, priority 6
[  262.966986][T19610] validate_nla: 6 callbacks suppressed
[  262.967000][T19610] netlink: 'syz.2.4551': attribute type 1 has an invalid length.
[  263.218788][T19626] netlink: 'syz.0.4556': attribute type 3 has an invalid length.
[  263.292778][T19628] __nla_validate_parse: 21 callbacks suppressed
[  263.292788][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4557'.
[  263.400587][T19650] netlink: 'syz.1.4565': attribute type 3 has an invalid length.
[  263.570828][T19672] bond0: option resend_igmp: invalid value (6225920)
[  263.575125][T19672] bond0: option resend_igmp: allowed values 0 - 255
[  263.578365][T19672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4572'.
[  263.583938][T19672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4572'.
[  263.610414][T19678] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  263.619911][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4573'.
[  263.648628][T19684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4575'.
[  263.705411][T19684] netlink: 'syz.0.4575': attribute type 1 has an invalid length.
[  263.708038][T19684] netlink: 'syz.0.4575': attribute type 1 has an invalid length.
[  263.717413][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4577'.
[  263.723017][T19691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4577'.
[  263.733666][T19695] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4578'.
[  263.737405][T19695] 0X: renamed from caif0
[  263.746401][T19695] 0X: entered allmulticast mode
[  263.748257][T19695] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  263.827230][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4581'.
[  263.831218][T19706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4582'.
[  263.886703][T19715] batadv_slave_1: entered promiscuous mode
[  263.891055][T19715] batadv_slave_1: left promiscuous mode
[  263.987220][T19738] netlink: 'syz.2.4593': attribute type 20 has an invalid length.
[  263.990519][T19738] netlink: 'syz.2.4593': attribute type 20 has an invalid length.
[  263.991575][   T10] tipc: Node number set to 1460574571
[  264.021710][T19742] netlink: 'syz.1.4594': attribute type 3 has an invalid length.
[  264.107019][T19754] netlink: 'syz.1.4600': attribute type 5 has an invalid length.
[  264.137667][T19759] netlink: del zone limit has 4 unknown bytes
[  264.139930][T19751] lo speed is unknown, defaulting to 1000
[  264.144134][T19751] wg1 speed is unknown, defaulting to 1000
[  264.157470][T19762] netlink: 'syz.2.4601': attribute type 21 has an invalid length.
[  264.321757][T19777] nbd5: detected capacity change from 0 to 127
[  264.329176][T19751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  264.336564][T19751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  264.344884][   T57] block nbd5: Receive control failed (result -104)
[  264.388859][T19786] can: request_module (can-proto-0) failed.
[  264.394456][T19786] openvswitch: netlink: IP tunnel dst address not specified
[  264.447951][T19795] .70: renamed from hsr0
[  264.451015][T19795] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  264.456721][T19795] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  264.460140][T19795] .70: entered allmulticast mode
[  264.463199][T19795] hsr_slave_0: entered allmulticast mode
[  264.465082][T19795] hsr_slave_1: entered allmulticast mode
[  264.467583][T19795] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  264.541627][T19799] syzkaller0: entered promiscuous mode
[  264.544012][T19799] syzkaller0: entered allmulticast mode
[  266.755226][T19880] IPVS: length: 250 != 8
[  267.065761][T19920] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.128542][T19920] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.176131][T19920] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.285279][T19920] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  267.379108][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  267.388206][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  267.401542][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.404235][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.635934][T19967] batadv1: entered promiscuous mode
[  267.637735][T19967] batadv1: entered allmulticast mode
[  267.690938][ T1115] block nbd5: Connection timed out, retrying (0/1 alive)
[  267.695374][ T1115] block nbd5: Connection timed out, retrying (0/1 alive)
[  267.698325][ T1115] block nbd5: Connection timed out, retrying (0/1 alive)
[  267.701340][ T1115] block nbd5: Connection timed out, retrying (0/1 alive)
[  267.705042][ T1115] block nbd5: Dead connection, failed to find a fallback
[  267.708912][ T1115] block nbd5: shutting down sockets
[  267.712199][ T1115] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.716899][ T1115] Buffer I/O error on dev nbd5, logical block 3, async page read
[  267.720531][ T1115] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.724555][ T1115] Buffer I/O error on dev nbd5, logical block 2, async page read
[  267.728525][ T1115] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.733080][ T1115] Buffer I/O error on dev nbd5, logical block 1, async page read
[  267.737621][ T1115] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.742024][ T1115] Buffer I/O error on dev nbd5, logical block 0, async page read
[  267.746257][T18846] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.750647][T18846] Buffer I/O error on dev nbd5, logical block 0, async page read
[  267.754446][T18846] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.758420][T18846] Buffer I/O error on dev nbd5, logical block 1, async page read
[  267.764347][T18846] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.772422][T18846] Buffer I/O error on dev nbd5, logical block 2, async page read
[  267.775676][T19980] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20000
[  267.779366][T18846] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.791217][T18846] Buffer I/O error on dev nbd5, logical block 3, async page read
[  267.794574][T18846] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.798498][T18846] Buffer I/O error on dev nbd5, logical block 0, async page read
[  267.805535][T18846] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  267.809494][T18846] Buffer I/O error on dev nbd5, logical block 1, async page read
[  267.817412][T18846] ldm_validate_partition_table(): Disk read failed.
[  267.822475][T18846] Dev nbd5: unable to read RDB block 0
[  267.826642][T18846]  nbd5: unable to read partition table
[  267.838927][T18846] ldm_validate_partition_table(): Disk read failed.
[  267.843228][T18846] Dev nbd5: unable to read RDB block 0
[  267.847683][T18846]  nbd5: unable to read partition table
[  267.998044][T20007] validate_nla: 4 callbacks suppressed
[  267.998054][T20007] netlink: 'syz.0.4677': attribute type 8 has an invalid length.
[  268.078525][T20011] netlink: 'syz.0.4679': attribute type 21 has an invalid length.
[  268.082421][T20011] netlink: 'syz.0.4679': attribute type 22 has an invalid length.
[  268.085073][T20011] netlink: 'syz.0.4679': attribute type 23 has an invalid length.
[  268.087695][T20011] netlink: 'syz.0.4679': attribute type 25 has an invalid length.
[  268.090399][T20011] netlink: 'syz.0.4679': attribute type 26 has an invalid length.
[  268.358113][T20030] _Z`Ԁ@S!: entered promiscuous mode
[  268.361530][T20030] netlink: 'syz.0.4684': attribute type 4 has an invalid length.
[  268.364680][T20030] netlink: 'syz.0.4684': attribute type 4 has an invalid length.
[  268.597888][T20044] __nla_validate_parse: 27 callbacks suppressed
[  268.597900][T20044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4686'.
[  268.604666][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4686'.
[  268.608635][T20044] netlink: 'syz.0.4686': attribute type 7 has an invalid length.
[  268.644090][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4687'.
[  268.700527][T20049] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4688'.
[  268.889045][T20061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4691'.
[  269.027461][T20073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.039250][T20073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4696'.
[  269.097419][T20080] netlink: 'syz.2.4698': attribute type 3 has an invalid length.
[  269.346668][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4706'.
[  269.347806][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4706'.
[  269.392459][T20105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4708'.
[  269.436439][T20111] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4709'.
[  270.035752][T20169] delete_channel: no stack
[  272.321250][ T5234] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  272.506105][T20340] IPVS: Unknown mcast interface: macvlan1
[  272.589598][T20346] lo speed is unknown, defaulting to 1000
[  272.592537][T20346] wg1 speed is unknown, defaulting to 1000
[  272.783394][T20355] openvswitch: netlink: Key type 16152 is out of range max 32
[  273.207419][T20373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.519911][T20400] validate_nla: 14 callbacks suppressed
[  273.519926][T20400] netlink: 'syz.0.4797': attribute type 3 has an invalid length.
[  273.576427][T20405] tipc: Resetting bearer <eth:syzkaller0>
[  273.579076][T20405] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  273.583463][T20405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.621002][T20410] netlink: 'syz.0.4802': attribute type 1 has an invalid length.
[  273.950507][T20435] __nla_validate_parse: 34 callbacks suppressed
[  273.950520][T20435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4810'.
[  273.964641][T20437] openvswitch: netlink: IP tunnel dst address not specified
[  273.996237][T20439] netlink: 'syz.2.4812': attribute type 10 has an invalid length.
[  273.999597][T20439] veth0_macvtap: left promiscuous mode
[  274.003025][T20439] team0: Device veth0_macvtap failed to register rx_handler
[  274.665437][T20448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4816'.
[  274.669188][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'.
[  274.746841][T20464] netlink: 'syz.2.4820': attribute type 1 has an invalid length.
[  274.768954][T20464] 8021q: adding VLAN 0 to HW filter on device bond14
[  274.940086][T20483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4825'.
[  274.945350][T20483] netlink: 'syz.2.4825': attribute type 1 has an invalid length.
[  274.953643][T20483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4825'.
[  274.957337][T20483] netlink: 'syz.2.4825': attribute type 1 has an invalid length.
[  275.024821][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4830'.
[  275.038302][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4830'.
[  275.043327][T20505] netlink: 'syz.1.4830': attribute type 7 has an invalid length.
[  275.067947][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4833'.
[  275.179160][T20521] netlink: 'syz.1.4836': attribute type 1 has an invalid length.
[  275.510123][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4849'.
[  275.516187][   T33] audit: type=1107 audit(1757199968.586:8): pid=20553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*K~e4cE>z0FoPԺ3k]Ҁq901ueY\b=~G=D=6'
[  275.553903][T20557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4850'.
[  275.637870][T20563] tipc: Failed to remove unknown binding: 66,1,1/2746135636:526345632/526345634
[  275.694946][T20568] tipc: Failed to remove unknown binding: 66,1,1/2746135636:526345632/526345634
[  275.707917][T20568] tipc: Failed to remove unknown binding: 66,1,1/2746135636:526345632/526345634
[  275.782529][T20572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.785123][T20572] syzkaller0: entered promiscuous mode
[  275.787028][T20572] syzkaller0: entered allmulticast mode
[  275.792522][T20572] tipc: Resetting bearer <eth:syzkaller0>
[  275.797723][T20571] tipc: Resetting bearer <eth:syzkaller0>
[  275.808521][T20571] tipc: Disabling bearer <eth:syzkaller0>
[  275.965590][T20580] tipc: Resetting bearer <eth:team0>
[  275.984319][T20580] bond0: (slave batadv_slave_0): Releasing backup interface
[  275.990121][T20580] batadv_slave_0: left allmulticast mode
[  275.998849][T20580] bond5: (slave bond6): Releasing backup interface
[  276.009667][T20580] bond8: left allmulticast mode
[  276.015629][T20580] bond8: left promiscuous mode
[  276.020758][T20580] bridge0: port 1(bond8) entered disabled state
[  276.086083][T20580] bond10: (slave vti1): Releasing backup interface
[  276.090853][T20580] bond11: (slave veth5): Releasing active interface
[  276.227682][T20585] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  276.489714][T20596] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  276.815040][T20635] netlink: 'syz.2.4880': attribute type 83 has an invalid length.
[  276.872407][T20645] netlink: 'syz.2.4883': attribute type 1 has an invalid length.
[  276.980173][T20653] tipc: Enabling <eth:lo> not permitted
[  276.983665][T20653] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  277.534675][T20676] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  277.938054][T20696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.941236][T20696] syzkaller0: entered promiscuous mode
[  277.943374][T20696] syzkaller0: entered allmulticast mode
[  277.955304][T20697] tipc: Resetting bearer <eth:syzkaller0>
[  277.958151][T20695] tipc: Resetting bearer <eth:syzkaller0>
[  277.965534][T20695] tipc: Disabling bearer <eth:syzkaller0>
[  278.282154][T20728] lo speed is unknown, defaulting to 1000
[  278.286684][T20728] wg1 speed is unknown, defaulting to 1000
[  278.594963][T20753] validate_nla: 1 callbacks suppressed
[  278.595006][T20753] netlink: 'syz.1.4918': attribute type 6 has an invalid length.
[  279.058154][T20810] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.090638][T20816] __nla_validate_parse: 27 callbacks suppressed
[  279.090648][T20816] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4937'.
[  279.145513][T20810] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.156626][T20823] netlink: 'syz.2.4939': attribute type 1 has an invalid length.
[  279.164057][T20823] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4939'.
[  279.172915][T20825] netlink: 'syz.2.4939': attribute type 1 has an invalid length.
[  279.173269][T20827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4938'.
[  279.178926][T20825] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4939'.
[  279.205470][T20810] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.226039][T20833] netlink: 'syz.2.4941': attribute type 10 has an invalid length.
[  279.230547][T20833] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  279.234796][T20833] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  279.242867][T20833] tipc: Resetting bearer <eth:syzkaller0>
[  279.246671][T20810] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.275831][T20837] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4942'.
[  279.322277][T18803] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.339393][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.347705][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.358939][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.590958][T20866] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  279.732866][T20880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4958'.
[  279.852494][T20891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  280.388491][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4965'.
[  280.828296][T20907] vxcan1: entered allmulticast mode
[  280.895653][T20923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4968'.
[  280.955811][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4971'.
[  281.046239][T20937] tap0: tun_chr_ioctl cmd 1074025680
[  281.054681][T20937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.063580][T20942] netlink: 'syz.0.4976': attribute type 3 has an invalid length.
[  281.066685][T20937] D: renamed from syzkaller0
[  281.074212][T20937] tipc: Disabling bearer <eth:syzkaller0>
[  281.116681][T20950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4978'.
[  281.218954][T20966] netlink: 'syz.0.4984': attribute type 3 has an invalid length.
[  281.546263][T21008] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[  281.602505][ T5234] Bluetooth: hci0: command tx timeout
[  281.754707][T21029] netlink: 'syz.0.5008': attribute type 1 has an invalid length.
[  281.763867][T21027] block nbd6: server does not support multiple connections per device.
[  281.768038][T21027] block nbd6: shutting down sockets
[  281.821888][T21034] syz.2.5009: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  281.827603][T21034] CPU: 1 UID: 0 PID: 21034 Comm: syz.2.5009 Not tainted syzkaller #0 PREEMPT(full) 
[  281.827613][T21034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.827617][T21034] Call Trace:
[  281.827621][T21034]  <TASK>
[  281.827624][T21034]  dump_stack_lvl+0x189/0x250
[  281.827638][T21034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.827647][T21034]  ? __pfx__printk+0x10/0x10
[  281.827657][T21034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  281.827666][T21034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  281.827675][T21034]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  281.827683][T21034]  warn_alloc+0x214/0x310
[  281.827697][T21034]  ? __pfx_warn_alloc+0x10/0x10
[  281.827710][T21034]  ? __get_vm_area_node+0x28f/0x300
[  281.827720][T21034]  ? packet_set_ring+0x6f4/0x2350
[  281.827733][T21034]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  281.827774][T21034]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  281.827787][T21034]  ? alloc_pages_mpol+0x3cd/0x4a0
[  281.827797][T21034]  ? packet_set_ring+0x6f4/0x2350
[  281.827807][T21034]  vzalloc_noprof+0xb2/0xf0
[  281.827816][T21034]  ? packet_set_ring+0x6f4/0x2350
[  281.827826][T21034]  packet_set_ring+0x6f4/0x2350
[  281.827843][T21034]  ? __pfx_packet_set_ring+0x10/0x10
[  281.827860][T21034]  ? _copy_from_user+0x94/0xb0
[  281.827871][T21034]  packet_setsockopt+0xc5a/0x12c0
[  281.827881][T21034]  ? __pfx_packet_setsockopt+0x10/0x10
[  281.827892][T21034]  ? __lock_acquire+0xab9/0xd20
[  281.827904][T21034]  ? aa_sk_perm+0x81e/0x950
[  281.827917][T21034]  ? __pfx_aa_sk_perm+0x10/0x10
[  281.827927][T21034]  ? __fget_files+0x2a/0x420
[  281.827933][T21034]  ? aa_sock_opt_perm+0xff/0x1b0
[  281.827940][T21034]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  281.827948][T21034]  ? __pfx_packet_setsockopt+0x10/0x10
[  281.827958][T21034]  do_sock_setsockopt+0x17c/0x1b0
[  281.827969][T21034]  __x64_sys_setsockopt+0x13f/0x1b0
[  281.827979][T21034]  do_syscall_64+0xfa/0x3b0
[  281.827988][T21034]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.827995][T21034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.828001][T21034]  ? exc_page_fault+0x9f/0xf0
[  281.828009][T21034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.828015][T21034] RIP: 0033:0x7fbda258ebe9
[  281.828022][T21034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.828028][T21034] RSP: 002b:00007fbda3488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  281.828036][T21034] RAX: ffffffffffffffda RBX: 00007fbda27c5fa0 RCX: 00007fbda258ebe9
[  281.828041][T21034] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000049
[  281.828045][T21034] RBP: 00007fbda2611e19 R08: 000000000000001c R09: 0000000000000000
[  281.828049][T21034] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  281.828053][T21034] R13: 00007fbda27c6038 R14: 00007fbda27c5fa0 R15: 00007ffd52966678
[  281.828064][T21034]  </TASK>
[  281.828067][T21034] Mem-Info:
[  281.929710][T21034] active_anon:6319 inactive_anon:0 isolated_anon:0
[  281.929710][T21034]  active_file:1576 inactive_file:38312 isolated_file:0
[  281.929710][T21034]  unevictable:1768 dirty:107 writeback:0
[  281.929710][T21034]  slab_reclaimable:10439 slab_unreclaimable:98754
[  281.929710][T21034]  mapped:18533 shmem:2508 pagetables:1054
[  281.929710][T21034]  sec_pagetables:0 bounce:0
[  281.929710][T21034]  kernel_misc_reclaimable:0
[  281.929710][T21034]  free:249034 free_pcp:17749 free_cma:0
[  281.944142][T21034] Node 0 active_anon:16272kB inactive_anon:0kB active_file:3608kB inactive_file:145132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40572kB dirty:204kB writeback:0kB shmem:4808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7108kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  281.954240][T21034] Node 1 active_anon:9004kB inactive_anon:0kB active_file:2696kB inactive_file:8116kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33560kB dirty:224kB writeback:0kB shmem:5224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6080kB pagetables:1840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  281.966341][T21034] Node 0 DMA free:13380kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:740kB local_pcp:304kB free_cma:0kB
[  281.978247][T21034] lowmem_reserve[]: 0 811 811 811 811
[  281.980553][T21034] Node 0 DMA32 free:149856kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16200kB inactive_anon:0kB active_file:3608kB inactive_file:145132kB unevictable:3536kB writepending:204kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:38712kB local_pcp:16948kB free_cma:0kB
[  281.993911][T21034] lowmem_reserve[]: 0 0 0 0 0
[  281.995896][T21034] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  282.008316][T21034] lowmem_reserve[]: 0 0 854 854 854
[  282.010550][T21034] Node 1 Normal free:374284kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9004kB inactive_anon:0kB active_file:2696kB inactive_file:8116kB unevictable:3536kB writepending:224kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32020kB local_pcp:15796kB free_cma:0kB
[  282.024391][T21034] lowmem_reserve[]: 0 0 0 0 0
[  282.026393][T21034] Node 0 DMA: 26*4kB (UM) 18*8kB (UM) 15*16kB (UM) 9*32kB (U) 3*64kB (UM) 3*128kB (UM) 1*256kB (U) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 13384kB
[  282.033304][T21034] Node 0 DMA32: 390*4kB (UE) 852*8kB (UME) 550*16kB (UE) 386*32kB (UME) 102*64kB (UME) 123*128kB (UME) 53*256kB (UM) 33*512kB (UM) 34*1024kB (UME) 6*2048kB (UM) 5*4096kB (UM) = 149848kB
[  282.040691][T21034] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  282.047307][T21034] Node 1 Normal: 473*4kB (UM) 662*8kB (UME) 544*16kB (UME) 510*32kB (UME) 466*64kB (UME) 163*128kB (UME) 64*256kB (UM) 39*512kB (UME) 19*1024kB (UM) 7*2048kB (UM) 54*4096kB (UM) = 374228kB
[  282.055174][T21034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  282.058940][T21034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  282.065193][T21034] 42396 total pagecache pages
[  282.067150][T21034] 0 pages in swap cache
[  282.068897][T21034] Free swap  = 124996kB
[  282.070612][T21034] Total swap = 124996kB
[  282.072534][T21034] 786301 pages RAM
[  282.074099][T21034] 0 pages HighMem/MovableOnly
[  282.076203][T21034] 241348 pages reserved
[  282.077952][T21034] 0 pages cma reserved
[  282.094353][T21048] netlink: 'syz.0.5012': attribute type 3 has an invalid length.
[  282.259550][T21068] netlink: 'syz.1.5019': attribute type 4 has an invalid length.
[  282.311515][T21076] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  282.326628][T21084] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  282.518350][T21109] netlink: 'syz.1.5033': attribute type 3 has an invalid length.
[  282.754352][T21138] batadv1: entered promiscuous mode
[  283.424108][T21195] erspan0: left promiscuous mode
[  283.436774][ T5715] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.442659][ T5715] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.450646][ T5715] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.454392][ T5715] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.744153][T18803] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  283.748138][T18803] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  283.771368][  T971] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  283.840734][T21235] validate_nla: 3 callbacks suppressed
[  283.840766][T21235] netlink: 'syz.1.5065': attribute type 7 has an invalid length.
[  283.845696][T21235] netlink: 'syz.1.5065': attribute type 8 has an invalid length.
[  284.137555][T21263] __nla_validate_parse: 20 callbacks suppressed
[  284.137564][T21263] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5073'.
[  284.271397][T21268] nbd6: detected capacity change from 0 to 127
[  284.280356][   T57] block nbd6: Receive control failed (result -104)
[  284.338650][T21274] netlink: 'syz.0.5076': attribute type 3 has an invalid length.
[  284.397572][T21281] netlink: 'syz.2.5078': attribute type 11 has an invalid length.
[  284.401251][  T971] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  284.517996][T21291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5081'.
[  284.522230][T21291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5081'.
[  284.525863][T21291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5081'.
[  284.663235][T21298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5084'.
[  284.722189][  T971] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  284.886799][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5086'.
[  284.994984][T21313] netlink: 'syz.1.5088': attribute type 3 has an invalid length.
[  285.424855][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5094'.
[  285.548882][T21347] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  285.673049][T21356] !: renamed from dummy0
[  285.778666][T21370] lo speed is unknown, defaulting to 1000
[  285.783301][T21370] wg1 speed is unknown, defaulting to 1000
[  285.823151][T21379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'.
[  285.977809][T21388] vlan0: entered promiscuous mode
[  285.980025][T21388] bond2: entered promiscuous mode
[  285.984859][   T33] audit: type=1800 audit(1757199979.056:9): pid=21388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5106" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8433 res=0 errno=0
[  286.145871][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5111'.
[  286.624346][T21441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5119'.
[  286.650032][T21443] netlink: 'syz.2.5121': attribute type 3 has an invalid length.
[  286.744344][T21456] openvswitch: netlink: Flow key attr not present in new flow.
[  286.915523][T21476] netlink: 'syz.2.5132': attribute type 3 has an invalid length.
[  287.122273][T21502] netlink: 'syz.1.5142': attribute type 3 has an invalid length.
[  287.604781][   T61] block nbd6: Connection timed out, retrying (0/1 alive)
[  287.607715][   T61] block nbd6: Connection timed out, retrying (0/1 alive)
[  287.610639][   T61] block nbd6: Connection timed out, retrying (0/1 alive)
[  287.613703][   T61] block nbd6: Connection timed out, retrying (0/1 alive)
[  287.616642][   T61] block nbd6: Dead connection, failed to find a fallback
[  287.619657][   T61] block nbd6: shutting down sockets
[  287.623967][   T61] blk_print_req_error: 138 callbacks suppressed
[  287.623979][   T61] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.630824][   T61] buffer_io_error: 138 callbacks suppressed
[  287.630833][   T61] Buffer I/O error on dev nbd6, logical block 3, async page read
[  287.636697][   T61] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.640261][   T61] Buffer I/O error on dev nbd6, logical block 2, async page read
[  287.645566][   T61] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.649164][   T61] Buffer I/O error on dev nbd6, logical block 1, async page read
[  287.653262][   T61] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.656839][   T61] Buffer I/O error on dev nbd6, logical block 0, async page read
[  287.660118][T20756] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.664132][T20756] Buffer I/O error on dev nbd6, logical block 0, async page read
[  287.667326][T20756] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.670931][T20756] Buffer I/O error on dev nbd6, logical block 1, async page read
[  287.674665][T20756] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.678301][T20756] Buffer I/O error on dev nbd6, logical block 2, async page read
[  287.681763][T20756] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.685433][T20756] Buffer I/O error on dev nbd6, logical block 3, async page read
[  287.688675][T20756] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.692539][T20756] Buffer I/O error on dev nbd6, logical block 0, async page read
[  287.695811][T20756] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.699431][T20756] Buffer I/O error on dev nbd6, logical block 1, async page read
[  287.704617][T20756] ldm_validate_partition_table(): Disk read failed.
[  287.709496][T20756] Dev nbd6: unable to read RDB block 0
[  287.713287][T20756]  nbd6: unable to read partition table
[  287.720308][T20756] ldm_validate_partition_table(): Disk read failed.
[  287.724444][T20756] Dev nbd6: unable to read RDB block 0
[  287.728895][T20756]  nbd6: unable to read partition table
[  287.814781][T21565] netlink: 'syz.2.5162': attribute type 3 has an invalid length.
[  287.971708][T21581] netlink: 'syz.0.5169': attribute type 32 has an invalid length.
[  288.081223][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  288.870583][T21652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.876071][T21652] syzkaller0: entered promiscuous mode
[  288.878231][T21652] syzkaller0: entered allmulticast mode
[  288.905456][T21652] tipc: Resetting bearer <eth:syzkaller0>
[  288.909816][T21651] tipc: Resetting bearer <eth:syzkaller0>
[  288.935372][T21651] tipc: Disabling bearer <eth:syzkaller0>
[  289.055496][T21674] netlink: 'syz.2.5197': attribute type 1 has an invalid length.
[  289.088999][T21674] bond16 (unregistering): Released all slaves
[  289.436221][T21722] netlink: 'syz.0.5212': attribute type 1 has an invalid length.
[  289.439504][T21722] __nla_validate_parse: 20 callbacks suppressed
[  289.439512][T21722] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5212'.
[  289.453420][T21724] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.457985][T21724] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  289.460656][T21724] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  289.464307][T21724] tipc: Resetting bearer <eth:syzkaller0>
[  289.502767][T21729] netlink: 'syz.1.5215': attribute type 1 has an invalid length.
[  289.539636][T21734] IPVS: set_ctl: invalid protocol: 98 172.20.20.63:20000
[  289.605048][T21741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5220'.
[  289.655596][T21746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.661752][T21746] syzkaller0: entered promiscuous mode
[  289.670059][T21746] syzkaller0: entered allmulticast mode
[  289.675389][T21751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5223'.
[  289.679309][T21751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5223'.
[  289.700779][T21751] tipc: Resetting bearer <eth:team0>
[  289.703441][T21751] team0: entered promiscuous mode
[  289.705693][T21751] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  289.739859][T21746] tipc: Resetting bearer <eth:syzkaller0>
[  289.745146][T21746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5221'.
[  289.748526][T21746] nbd: must specify a size in bytes for the device
[  289.759498][T21744] tipc: Resetting bearer <eth:syzkaller0>
[  289.793942][T21744] tipc: Disabling bearer <eth:syzkaller0>
[  289.860763][T21760] netlink: 'syz.1.5226': attribute type 8 has an invalid length.
[  289.903705][T21774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5231'.
[  289.946692][T21778] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5230'.
[  289.950488][T21778] ..0: renamed from hsr0
[  289.955120][T21778] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  289.958799][T21778] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.962758][T21778] ..0: entered allmulticast mode
[  289.964407][T21778] hsr_slave_0: entered allmulticast mode
[  289.966193][T21778] hsr_slave_1: entered allmulticast mode
[  289.968756][T21778] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  290.040195][T21785] lo speed is unknown, defaulting to 1000
[  290.044370][T21785] wg1 speed is unknown, defaulting to 1000
[  290.182689][T21798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5238'.
[  290.216978][T21799] bond16 (unregistering): Released all slaves
[  290.320870][T21807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5239'.
[  290.356740][T21810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5241'.
[  291.575683][T21894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.963903][T21937] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  292.236743][T21961] syzkaller1: entered promiscuous mode
[  292.238960][T21961] syzkaller1: entered allmulticast mode
[  292.325575][T21971] syzkaller0: entered promiscuous mode
[  292.327911][T21971] syzkaller0: entered allmulticast mode
[  292.333122][T21970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.350149][T21970] tipc: Resetting bearer <eth:syzkaller0>
[  292.366299][T21970] tipc: Disabling bearer <eth:syzkaller0>
[  292.479388][T21988] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  292.486463][T21988] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  292.769419][T22012] netlink: 'syz.2.5298': attribute type 10 has an invalid length.
[  292.880342][T22027] policy can only be matched on NF_INET_PRE_ROUTING
[  292.880353][T22027] unable to load match
[  293.024552][T22043] sctp: [Deprecated]: syz.2.5307 (pid 22043) Use of int in maxseg socket option.
[  293.024552][T22043] Use struct sctp_assoc_value instead
[  293.142503][T22048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.145666][T22046] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.154032][T22045] tipc: Resetting bearer <eth:syzkaller0>
[  294.138526][T22045] tipc: Disabling bearer <eth:syzkaller0>
[  294.368145][T22091] netlink: 'syz.1.5322': attribute type 1 has an invalid length.
[  294.394526][T22091] 8021q: adding VLAN 0 to HW filter on device bond16
[  294.697933][T22109] netlink: 'syz.1.5328': attribute type 32 has an invalid length.
[  294.700968][T22112] netlink: 'syz.1.5328': attribute type 32 has an invalid length.
[  295.178398][T22123] __nla_validate_parse: 23 callbacks suppressed
[  295.185886][T22123] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5331'.
[  296.881200][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  297.248309][T22149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5336'.
[  297.269118][T22148] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5338'.
[  297.315834][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5340'.
[  297.319134][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5340'.
[  297.323184][T22161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5341'.
[  297.446545][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5344'.
[  297.456391][T22176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5343'.
[  297.471843][T22181] bond0: Device is already in use.
[  297.510086][T22187] lo speed is unknown, defaulting to 1000
[  297.526991][T22187] wg1 speed is unknown, defaulting to 1000
[  297.729283][T22202] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.956533][T22232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5357'.
[  298.005353][T22234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5358'.
[  298.547837][T22287] lo speed is unknown, defaulting to 1000
[  298.552339][T22287] wg1 speed is unknown, defaulting to 1000
[  298.952902][T22312] can: request_module (can-proto-0) failed.
[  298.957283][T22312] netlink: 'syz.2.5381': attribute type 13 has an invalid length.
[  298.960269][T22312] netlink: 'syz.2.5381': attribute type 11 has an invalid length.
[  298.965668][T22312] openvswitch: netlink: Flow actions attr not present in new flow.
[  299.105409][T22324] lo speed is unknown, defaulting to 1000
[  299.109852][T22324] wg1 speed is unknown, defaulting to 1000
[  299.827580][T22375] netlink: 'syz.1.5402': attribute type 1 has an invalid length.
[  299.870439][T22375] 8021q: adding VLAN 0 to HW filter on device bond17
[  300.190452][T22399] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  300.193252][T22402] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  300.365349][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.370003][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.375189][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.378165][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.388987][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.410906][T22415] __nla_validate_parse: 11 callbacks suppressed
[  300.410919][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5416'.
[  300.423967][T22415] chnl_net:caif_netlink_parms(): no params data found
[  300.436939][T22412] lo speed is unknown, defaulting to 1000
[  300.440554][T22412] wg1 speed is unknown, defaulting to 1000
[  300.594552][T22412] chnl_net:caif_netlink_parms(): no params data found
[  300.657623][T22431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5420'.
[  300.736229][T22412] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.738990][T22412] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.743002][ T2205] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  300.746560][T22412] bridge_slave_0: entered allmulticast mode
[  300.749719][T22412] bridge_slave_0: entered promiscuous mode
[  300.755858][T22412] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.758586][T22412] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.762622][T22412] bridge_slave_1: entered allmulticast mode
[  300.774517][T22412] bridge_slave_1: entered promiscuous mode
[  300.848566][T22412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.880600][T22412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.929018][T22412] team0: Port device team_slave_0 added
[  300.944119][T22412] team0: Port device team_slave_1 added
[  300.991308][T22464] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5428'.
[  301.004547][T22412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.008086][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.020395][T22412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.026462][T22412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.028760][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.037538][T22412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.097935][T22412] hsr_slave_0: entered promiscuous mode
[  301.100355][T22412] hsr_slave_1: entered promiscuous mode
[  301.325910][T22412] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  301.338360][T22412] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  301.345847][T22412] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  301.354038][T22412] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  301.448393][T22412] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.460855][T22412] 8021q: adding VLAN 0 to HW filter on device team0
[  301.480647][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.483619][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.490582][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.493157][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.619601][T22412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.656565][T22412] veth0_vlan: entered promiscuous mode
[  301.664202][T22412] veth1_vlan: entered promiscuous mode
[  301.682007][T22412] veth0_macvtap: entered promiscuous mode
[  301.687486][T22412] veth1_macvtap: entered promiscuous mode
[  301.697462][T22412] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.707622][T22412] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.713718][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.716774][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.720078][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.723654][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.732174][T22531] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.5446'.
[  301.762844][ T2205] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  301.777309][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.782447][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.799951][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.803800][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.836055][T22533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5411'.
[  302.401553][ T5234] Bluetooth: hci1: command tx timeout
[  302.530697][T22557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5455'.
[  302.793496][T22578] syzkaller1: entered promiscuous mode
[  302.795861][T22578] syzkaller1: entered allmulticast mode
[  303.427771][T22588] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5462'.
[  303.446638][T22588] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5462'.
[  303.684466][T22604] netlink: 'syz.0.5467': attribute type 1 has an invalid length.
[  303.710526][T22607] sctp: [Deprecated]: syz.3.5468 (pid 22607) Use of int in maxseg socket option.
[  303.710526][T22607] Use struct sctp_assoc_value instead
[  303.820955][T22613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5471'.
[  303.936190][T22621] syzkaller1: entered promiscuous mode
[  303.944375][T22621] syzkaller1: entered allmulticast mode
[  303.993091][T22622] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5474'.
[  304.199151][T22643] tipc: Started in network mode
[  304.200920][T22643] tipc: Node identity 92fde7ff9a4, cluster identity 4711
[  304.203756][T22643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.206258][T22643] syzkaller0: entered promiscuous mode
[  304.208097][T22643] syzkaller0: entered allmulticast mode
[  304.236278][T22643] tipc: Resetting bearer <eth:syzkaller0>
[  304.239570][T22642] tipc: Resetting bearer <eth:syzkaller0>
[  304.251066][T22642] tipc: Disabling bearer <eth:syzkaller0>
[  304.481453][ T5234] Bluetooth: hci1: command tx timeout
[  305.068758][T22725] vlan3: entered promiscuous mode
[  305.070534][T22725] bond0: entered promiscuous mode
[  305.433201][T22762] siw: device registration error -23
[  305.438446][T22763] __nla_validate_parse: 9 callbacks suppressed
[  305.438458][T22763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5513'.
[  305.450620][T22763] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5513'.
[  305.582041][T22772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5515'.
[  305.840559][T22790] netlink: 'syz.3.5518': attribute type 1 has an invalid length.
[  305.850337][T22790] vlan2: entered allmulticast mode
[  305.852469][T22790] macvtap0: entered allmulticast mode
[  305.854539][T22790] veth0_macvtap: entered allmulticast mode
[  305.898566][T22792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5518'.
[  306.034241][T22798] lo speed is unknown, defaulting to 1000
[  306.036849][T22798] wg1 speed is unknown, defaulting to 1000
[  306.071892][T22806] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5523'.
[  306.238750][T22821] lo speed is unknown, defaulting to 1000
[  306.241853][T22821] wg1 speed is unknown, defaulting to 1000
[  306.296965][T22824] vlan4: entered promiscuous mode
[  306.298767][T22824] vlan4: entered allmulticast mode
[  306.301589][T22828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5532'.
[  306.337110][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5529'.
[  306.481262][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  306.558794][T22839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5534'.
[  306.561667][ T5234] Bluetooth: hci1: command tx timeout
[  306.568800][T22839] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  306.756467][T22860] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5542'.
[  306.788540][T22863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5543'.
[  306.829416][T22865] dvmrp1: entered allmulticast mode
[  306.833312][T22865] dvmrp1: left allmulticast mode
[  307.261978][T22915] syzkaller0: refused to change device tx_queue_len
[  307.327572][T22923] netlink: 'syz.0.5561': attribute type 5 has an invalid length.
[  308.145988][T22989] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  308.149225][T22989] openvswitch: netlink: Duplicate key (type 0).
[  308.153347][T22988] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  308.156388][T22988] openvswitch: netlink: Duplicate key (type 0).
[  308.206134][T22993] lo speed is unknown, defaulting to 1000
[  308.215965][T22995] vlan3: entered promiscuous mode
[  308.219689][T22995] vlan3: entered allmulticast mode
[  308.222615][T22993] wg1 speed is unknown, defaulting to 1000
[  308.236195][T22997] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  308.297273][T22999] tipc: Enabled bearer <eth:gre0>, priority 10
[  308.372730][   T57] block nbd7: Receive control failed (result -104)
[  308.464419][T23008] lo speed is unknown, defaulting to 1000
[  308.467029][T23008] wg1 speed is unknown, defaulting to 1000
[  308.572344][T23021] vlan2: entered promiscuous mode
[  308.574190][T23021] vlan2: entered allmulticast mode
[  308.576019][T23021] hsr_slave_1: entered allmulticast mode
[  308.642780][ T5234] Bluetooth: hci1: command tx timeout
[  308.986145][T23058] tipc: Resetting bearer <eth:syzkaller0>
[  309.346391][T23087] TC_ACT_REPEAT abuse ?
[  309.352045][T23087] TC_ACT_REPEAT abuse ?
[  309.355969][T23087] TC_ACT_REPEAT abuse ?
[  309.358742][T23086] TC_ACT_REPEAT abuse ?
[  309.366893][T23086] TC_ACT_REPEAT abuse ?
[  309.614153][T23126] netlink: 'syz.3.5624': attribute type 1 has an invalid length.
[  309.662188][T23126] 8021q: adding VLAN 0 to HW filter on device bond1
[  309.706700][T23126] vlan2: entered promiscuous mode
[  309.708427][T23126] bond1: entered promiscuous mode
[  309.710196][T23126] vlan2: entered allmulticast mode
[  309.713201][T23126] bond1: entered allmulticast mode
[  309.730666][T23126] bond1: (slave gretap1): making interface the new active one
[  309.733854][T23126] gretap1: entered promiscuous mode
[  309.735674][T23126] gretap1: entered allmulticast mode
[  309.738050][T23126] TC_ACT_REPEAT abuse ?
[  309.740142][T23126] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  309.766677][T23126] syz.3.5624 (23126) used greatest stack depth: 18536 bytes left
[  309.815238][T23145] sctp: [Deprecated]: syz.3.5628 (pid 23145) Use of int in max_burst socket option deprecated.
[  309.815238][T23145] Use struct sctp_assoc_value instead
[  309.887230][T23153] netlink: 'syz.2.5630': attribute type 1 has an invalid length.
[  310.681353][T23247] __nla_validate_parse: 29 callbacks suppressed
[  310.681365][T23247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5649'.
[  310.798693][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5652'.
[  310.873777][T23263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5654'.
[  310.896382][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5654'.
[  311.046447][T23277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5658'.
[  311.168673][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5657'.
[  311.182771][T23293] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5657'.
[  311.217040][T23295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5663'.
[  311.238531][T23295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5663'.
[  311.242332][T23295] tipc: Disabling bearer <udp:syz2>
[  311.431354][T23316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5668'.
[  311.948896][T23365] netlink: 'syz.3.5678': attribute type 10 has an invalid length.
[  312.009539][T23365] 8021q: adding VLAN 0 to HW filter on device team0
[  312.032362][T23365] bond0: (slave team0): Enslaving as an active interface with an up link
[  312.473520][T23342] delete_channel: no stack
[  312.846923][T23441] lo speed is unknown, defaulting to 1000
[  312.849573][T23441] wg1 speed is unknown, defaulting to 1000
[  313.025001][  T971] lo speed is unknown, defaulting to 1000
[  313.026970][  T971] syz2: Port: 1 Link DOWN
[  313.302924][T23487] lo speed is unknown, defaulting to 1000
[  313.305945][T23487] wg1 speed is unknown, defaulting to 1000
[  313.523490][  T971] net_ratelimit: 25 callbacks suppressed
[  313.523500][  T971] TC_ACT_REPEAT abuse ?
[  313.842387][    C0] TC_ACT_REPEAT abuse ?
[  313.929785][T23538] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.091779][ T5878] TC_ACT_REPEAT abuse ?
[  314.093564][ T5878] TC_ACT_REPEAT abuse ?
[  314.161386][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  314.354802][T23564] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  314.447824][T23572] netlink: 'syz.3.5732': attribute type 6 has an invalid length.
[  314.811641][   T10] TC_ACT_REPEAT abuse ?
[  314.832235][ T5878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  314.836224][ T5878] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  314.861691][ T2205] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  314.881955][    C0] TC_ACT_REPEAT abuse ?
[  314.961394][ T2205] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  315.061363][ T2205] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  315.251960][   T12] TC_ACT_REPEAT abuse ?
[  315.256411][   T12] TC_ACT_REPEAT abuse ?
[  315.609116][T23602] netlink: 'syz.2.5744': attribute type 4 has an invalid length.
[  315.747231][T23613] __nla_validate_parse: 10 callbacks suppressed
[  315.747249][T23613] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5747'.
[  315.776997][T23615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5748'.
[  315.777512][T23616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5748'.
[  315.934821][T23637] IPv6: Can't replace route, no match found
[  315.960295][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5756'.
[  315.977111][T23638] netlink: 'syz.0.5750': attribute type 1 has an invalid length.
[  316.183306][T23655] syzkaller0: entered promiscuous mode
[  316.185827][T23655] syzkaller0: entered allmulticast mode
[  316.382285][ T5878] TC_ACT_REPEAT abuse ?
[  316.716300][T23659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5762'.
[  316.994887][T23682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5770'.
[  317.004454][T23682] netlink: 'syz.0.5770': attribute type 20 has an invalid length.
[  317.007577][T23682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5770'.
[  317.025422][T23682] netlink: 'syz.0.5770': attribute type 20 has an invalid length.
[  317.063897][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5772'.
[  317.067376][T23690] delete_channel: no stack
[  317.114919][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5774'.
[  317.123815][T23695] lo speed is unknown, defaulting to 1000
[  317.154464][T23699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5777'.
[  317.178168][T23702] syzkaller1: entered promiscuous mode
[  317.180078][T23702] syzkaller1: entered allmulticast mode
[  317.320617][T23718] xt_HMARK: spi-set and port-set can't be combined
[  317.459822][T23731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.463290][T23731] syzkaller0: entered promiscuous mode
[  317.465148][T23731] syzkaller0: entered allmulticast mode
[  317.481016][T23731] tipc: Resetting bearer <eth:syzkaller0>
[  317.492955][T23727] tipc: Resetting bearer <eth:syzkaller0>
[  317.503212][T23727] tipc: Disabling bearer <eth:syzkaller0>
[  318.207725][T23800] lo speed is unknown, defaulting to 1000
[  318.213289][T23800] wg1 speed is unknown, defaulting to 1000
[  318.507284][T23822] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  318.534484][T23829] netlink: 'syz.0.5818': attribute type 1 has an invalid length.
[  318.573853][T23829] 8021q: adding VLAN 0 to HW filter on device bond18
[  318.577571][T23835] tipc: New replicast peer: 255.255.255.255
[  318.579819][T23835] tipc: Enabled bearer <udp:syz2>, priority 6
[  318.596728][T23829] veth5: entered promiscuous mode
[  318.604426][T23829] bond18: (slave veth5): Enslaving as an active interface with an up link
[  318.625671][T18803] net_ratelimit: 220 callbacks suppressed
[  318.625679][T18803] TC_ACT_REPEAT abuse ?
[  318.636840][T18803] TC_ACT_REPEAT abuse ?
[  318.738924][T23855] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  318.742771][T23855] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  318.746309][T23855] CPU: 1 UID: 0 PID: 23855 Comm: syz.2.5826 Not tainted syzkaller #0 PREEMPT(full) 
[  318.749610][T23855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.752819][T23855] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  318.754807][T23855] Code: 18 00 74 08 4c 89 ef e8 ed 64 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ea 63 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c1 64 01 f8 4d 89 2e 41 80 3c 1f 00
[  318.761224][T23855] RSP: 0018:ffffc900069570e8 EFLAGS: 00010246
[  318.763196][T23855] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  318.765731][T23855] RDX: ffffc900070b9000 RSI: 000000000000046b RDI: 000000000000046c
[  318.768315][T23855] RBP: ffff8881051b0030 R08: ffff8881082ed640 R09: 0000000000000002
[  318.771239][T23855] R10: 000000000000000a R11: 0000000000000002 R12: ffff8881051b16a8
[  318.773864][T23855] R13: ffff8881051b0028 R14: 0000000000000000 R15: 1ffff11020a362d6
[  318.776448][T23855] FS:  00007fbda34886c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  318.779322][T23855] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  318.781416][T23855] CR2: 000000110c3007b9 CR3: 000000011b97a000 CR4: 00000000000006f0
[  318.783943][T23855] Call Trace:
[  318.785015][T23855]  <TASK>
[  318.785996][T23855]  xfrm_state_insert+0x54/0x60
[  318.787571][T23855]  ipcomp4_init_state+0x673/0xb20
[  318.789255][T23855]  __xfrm_init_state+0xa76/0x13f0
[  318.790928][T23855]  ? __xfrm_init_state+0x7ef/0x13f0
[  318.792656][T23855]  xfrm_add_sa+0x2f5b/0x4070
[  318.794195][T23855]  ? __pfx_xfrm_add_sa+0x10/0x10
[  318.795763][T23855]  ? apparmor_capable+0x137/0x1b0
[  318.797473][T23855]  ? __nla_parse+0x40/0x60
[  318.798983][T23855]  xfrm_user_rcv_msg+0x7a3/0xab0
[  318.800653][T23855]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  318.802470][T23855]  ? __pfx___mutex_trylock_common+0x10/0x10
[  318.804367][T23855]  ? rcu_is_watching+0x15/0xb0
[  318.805956][T23855]  ? trace_contention_end+0x39/0x120
[  318.807657][T23855]  ? __mutex_lock+0x335/0x1350
[  318.809231][T23855]  netlink_rcv_skb+0x208/0x470
[  318.810788][T23855]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  318.812572][T23855]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  318.814344][T23855]  ? netlink_deliver_tap+0x2e/0x1b0
[  318.816053][T23855]  xfrm_netlink_rcv+0x79/0x90
[  318.817573][T23855]  netlink_unicast+0x82f/0x9e0
[  318.819162][T23855]  ? __pfx_netlink_unicast+0x10/0x10
[  318.820890][T23855]  ? netlink_sendmsg+0x642/0xb30
[  318.822526][T23855]  ? skb_put+0x11b/0x210
[  318.823958][T23855]  netlink_sendmsg+0x805/0xb30
[  318.825553][T23855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.827339][T23855]  ? aa_sock_msg_perm+0xf1/0x1d0
[  318.829021][T23855]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  318.830783][T23855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  318.832524][T23855]  __sock_sendmsg+0x21c/0x270
[  318.834113][T23855]  ____sys_sendmsg+0x505/0x830
[  318.835742][T23855]  ? __pfx_____sys_sendmsg+0x10/0x10
[  318.837511][T23855]  ? import_iovec+0x74/0xa0
[  318.839054][T23855]  ___sys_sendmsg+0x21f/0x2a0
[  318.840633][T23855]  ? __pfx____sys_sendmsg+0x10/0x10
[  318.842372][T23855]  ? __fget_files+0x2a/0x420
[  318.843928][T23855]  ? __fget_files+0x3a0/0x420
[  318.845488][T23855]  __x64_sys_sendmsg+0x19b/0x260
[  318.847152][T23855]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  318.848958][T23855]  ? rcu_is_watching+0x15/0xb0
[  318.850548][T23855]  ? do_syscall_64+0xbe/0x3b0
[  318.852132][T23855]  do_syscall_64+0xfa/0x3b0
[  318.853653][T23855]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.855387][T23855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.857409][T23855]  ? exc_page_fault+0x9f/0xf0
[  318.858999][T23855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.860958][T23855] RIP: 0033:0x7fbda258ebe9
[  318.862438][T23855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.869019][T23855] RSP: 002b:00007fbda3488038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  318.871780][T23855] RAX: ffffffffffffffda RBX: 00007fbda27c5fa0 RCX: 00007fbda258ebe9
[  318.874322][T23855] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  318.876831][T23855] RBP: 00007fbda2611e19 R08: 0000000000000000 R09: 0000000000000000
[  318.879344][T23855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  318.882189][T23855] R13: 00007fbda27c6038 R14: 00007fbda27c5fa0 R15: 00007ffd52966678
[  318.883892][T23865] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.885061][T23855]  </TASK>
[  318.885067][T23855] Modules linked in:
[  318.885380][T23855] ---[ end trace 0000000000000000 ]---
[  318.891722][T23855] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  318.893777][T23855] Code: 18 00 74 08 4c 89 ef e8 ed 64 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ea 63 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c1 64 01 f8 4d 89 2e 41 80 3c 1f 00
[  318.900660][T23855] RSP: 0018:ffffc900069570e8 EFLAGS: 00010246
[  318.903012][T23855] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  318.905779][T23855] RDX: ffffc900070b9000 RSI: 000000000000046b RDI: 000000000000046c
[  318.908805][T23855] RBP: ffff8881051b0030 R08: ffff8881082ed640 R09: 0000000000000002
[  318.911879][T23855] R10: 000000000000000a R11: 0000000000000002 R12: ffff8881051b16a8
[  318.914801][T23855] R13: ffff8881051b0028 R14: 0000000000000000 R15: 1ffff11020a362d6
[  318.917532][T23855] FS:  00007fbda34886c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  318.920446][T23855] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  318.922824][T23855] CR2: 000000110c3007b9 CR3: 000000011b97a000 CR4: 00000000000006f0
[  318.925453][T23855] Kernel panic - not syncing: Fatal exception in interrupt
[  318.928769][T23855] Kernel Offset: disabled
[  318.930417][T23855] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:06:51  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11008c47ac9 RBX=ffff88804623d648 RCX=ffff88801f711cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900069a7c10 RSP=ffffc900069a7a40
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900069a7b4c R11=fffff52000d34f72
R12=dffffc0000000000 R13=ffff88803c8f7380 R14=ffff88803c8f7390 R15=ffffc900069a7b20
RIP=ffffffff820b0967 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556a0c9500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556a0c97d0 CR3=0000000029b3a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f75d1012e53
XMM06=0000000000000000 00007f75d1012e4d XMM07=0000000000000000 00007f75d1012e61
XMM08=0000000000000000 00007f75d1012ee7 XMM09=0000000000000000 00007f75d1012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=00000000000015e1 RDI=00000000000015e2 RBP=00000000000003f9 RSP=ffffc90006956870
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbda34886c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3007b9 CR3=000000011b97a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ff000035bac61800 00fc003a98010097
XMM02=0100000000000000 00000000000002ff XMM03=000700000087ff00 0035bac6180000fc
XMM04=00007f9ab9cfd100 00007f9ab9197460 XMM05=00007f9ab9197478 00007f9ab91974c0
XMM06=00007f9ab91974b8 00007f9ab91974b0 XMM07=00007f9ab91974a8 00007f9ab91974a0
XMM08=0000000000000000 00007f9ab9012ee7 XMM09=0000000000000000 00007f9ab9012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
