last executing test programs:

1.852447329s ago: executing program 0 (id=4794):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x121342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rcu_utilization\x00', r4}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000200000000000020"], 0x48)
socket(0x1, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000100)="866ac6839ca725a49d658addbe191d3645a79b79e71c930373ac62a02768f61b8fd2b7a2c15c93c990cb4e3bd431f4b2af02e2380becf3ceb569a63885ff987593d121615bb99cd43abb4ebaefa27517edf7b731c16275975b", 0x59}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
shutdown(r0, 0x1)

1.082450487s ago: executing program 1 (id=4805):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$inet(0x2b, 0x801, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r3 = socket(0x1e, 0x1, 0x0)
shutdown(r3, 0x2) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000240000000000000000214000000020a010100000000000000000000000a140000001100010000000000000000000000000a"], 0x70}, 0x1, 0x0, 0x0, 0x4040000}, 0xb40723e7585b6569) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='target_cmd_complete\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) (async)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
socket(0x10, 0x803, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r5)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt(r7, 0x6, 0x0, 0x0, &(0x7f0000000000))
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)

1.081003948s ago: executing program 1 (id=4807):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0xe, 0x1}, {0x6, 0x5471bee6}, {0x3, 0x5}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x5f, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x52, 0x0, 0x1, 0x4ceff6ba}, 0x28)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xb4}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)
accept(r1, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r10 = socket$kcm(0x2, 0x1, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b9c034166c0a802a", "32dc7db097b6bc773d7a0f3a945bba38", "34ca3bc9", "2959b0d1c7d3e5d3"}, 0x28)
writev(r11, &(0x7f00000008c0)=[{&(0x7f00000002c0)="ec", 0x1}, {0x0}], 0x2)
close(r11)
sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9})

1.079841156s ago: executing program 2 (id=4808):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000), 0x8)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x380000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c)
socket$isdn_base(0x22, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa00"/197], 0x23c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x29, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1880}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r5 = socket(0x10, 0x800, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e24000000440040000000002d2d000000000000004c37160000200002"], 0x6c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r5)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000740)={<r7=>0x0, 0xe00, "693219c9ce2d58cf7d4972ee681893ac1d1db99601e1b24391ccb162a0858d58548b9401c3257b8c84c603cef6978bf8ba9c475ea51d564a45e88d607782ffd0574073183b638eb55a6198edf12319dcbcf9856741ee13469584bfd5ba7f57b1e63f46e62db5ef2ddb9434052b4a4984d7193fe6eecf97539d2fdb2f1ca982100b9993d0420fe81bcfaedd7cf2c7b9bafea2cad8cc2788cda202675cc5235105aed165bdb3888452c23ff635221df3fee5debca923843ff6a5c354d388baf74cac1945be087999064d1ab6a77d56e96af66ecc6478b6d00290bb6f21e0b4db7d5b88b1eb9c7f144f1638ac9ea4e7bbf271b00ed8ebd54055eac9ab97342410bda34157dd1ad69911d6a3e461ba61763896614eec306f47e1b0dcf8d494e6b73d99a4ad852385151c0441d5dabab11740cda28c0e5c0e340dc42a669d255adce344bc502cba67898e050700db1639e0511aca2e09088faf4420bdf487fc43c0ff0c3aaaa3cf9d93818fe8a93faf652bca986674424f038e1972df01811a16ea81e81752960fdac57a97ac464ebc1fc03a79650addd8381c8de9e4bbd6f8de780fa824ac1a9ebe44bba3226dfba3c4f041b1339cc6d73de15228892a00a651a3732da6adaae1a1ac74c4432c6f7b9ee8abf785b6e6292ec7b8095a0038c8108c02cbfd5f583497b76df50a586d5d8da9f56299dfc4f260e457a76e121677fab17154a0251fbf9ff8240d164ec6dc9a24d43b1f87e32e0b43113cc625df2abe803ff870c29b625e2a8ce344c143b5efefa84ae18e0dfc80fd7b604f2e018e0d5eb71b54b32d96137bdf27cda36d9dee6400f980819ea957085090e74e8be64a1549833493fd36605e2d8e93ab5ca08fefdd1cc5d1ab8581e0244d414b4ac43cbe7f552c673868cb9012e075adf819a60fa41e3076f7b465250a62250dbed0bcf0187aec7e454067ee77ee81d1acfa12ba34082d8cee08b205d93f62f8277afa76d780f719c97cc76bbce75d8e554bf0d57b8c6d8c9b7a79f54aa39f734918feaef4458b56f8f611499766e6d7f3ff81ca8ba595d52c80bc65596f5d671d91af9357c6c757924c77b2a7969da335336bf89750104a48a4fe969de762ead681d4e6d0ed80dd905cc712902cf26ea336142976adc5d43a523360bb485266a1f7916c4b30fbcc2a8d10d014b40cedd3e949ffd067292c9f02d66866a9d365d891aeab0741505d9c754369def3744809ec5c82ababd120c36d7d420e0a8667404257cd8982ca4bf4309b9de565231c06fcdc7d8b22e13bc3479cd8543d4713d252f68a53616e5c305f3df32a12630123f8b10d0be3a9f586d4f0ab0e34e208cef0ba11c76fb2d05b8b9b3394c2e9a1a88da6c40f3ef53a69cd0ae0de9ce8dea96c3572bd93df049c763ff48df7eaed2f68d938275a4f682f31129e327b22bdd0d1779172b051b074eac477087bdc590ae282f0448a638e2fcf2ec9db30c19e4986d7df263dfdba2bea51725ae114d165756a80dd56a46706be24801beb2c2a36b3c316f4730d1d09d209a056c6a0c0c32ea086cfe40fbfbf8a72677782c62365cd9bbb53708c49eb3efafb757cf79a4172b583e626c8348ca7b854a5a4195472c86c9c7b1c6d6d8322980a2552cbca1d2f3200176b10d847752e16fe359424aa135b9398e0d60fd2d6c37b0022e1b4b1c1b6f683d4e30d0688678e841260eee76d0dfa913f76a72ce7321d39a2e03fa95ee0972e8c405e56dd6cc081d60d3365e44b261a3ba52da2345e1dc1544ae1f8507bda90ed09d6b8019c4a57b204a8beec59f2b314d895a8961f8a8db44dceb7e28cac9a9f3c3fb826ef9eb76a7404d4055859703ba42d0af63beab038bf16e93a5c526b94ca9935a4df9c15f9545de963235ec568ac9d5d1808bbe701c21f2ab87e4ebc8a493a9dc538630fb42dbd5173c1f84d963ca20c363c19fe1425fc57d1c6320c63bbd5eee9d598e3d766ce1b165885706604589153ba49809712bd8a86f1e24a40f0a8bfb683535277b86cc1ae9c7d3013373a65584542cb0a22670ef4132bfbc20c7511a93f2924d387b945606cbe37d4317f8249f14582f95a6ada43f0b9a5625f3a14a9294127c0092082002b6919f8d8358ef17a5226a4f214304262d749fc7769753e0db25a08671c33efdacf3bff4a3a35f6f5c75cbab327a06ffa64d55c0a5f6998422ebf70bc1bbf72f3531c4d7098cb54598460a10c1c917ac9679766750dfb15d71987991768831fac1ae64b98660f75986c9300e784c6c29c4bb915d1dcce70b63a3609bf93f1a14af0fe0e3abd24623d40deec0e38a0d3630583b0256b723a00184abfb36f832eb0ec700a1ee6bf3f5c2f79f7a9cc43869636db15ce0a17b5d4d534adc249704e9de656575df97ac856da19f2387c9a62346b6240d3f7c4d7bfbcc4912e8835a9af669c880bf8b40ca4b5a51c6ec92bfae352e40008be273a9e97ea9b4dcd3246df6bd513cfe35cacb44e93f38a2750b40042d429d020abbd087987bac99d278bd5fab71f0b4a4038b90dd53bbc19dde9e55ea31e0c51c29d8479d9bda89a95ae6a8ba34b0336469cb67bd09faf65799f0922e05cabc6753814db5a6ed57201dda1e3a33d9418425933986dd17a0fb8fff93d08ef215168abbfef1e97a8a6701fb44f6091aa7972edfb44ef84d876757d4ee4903b4df3e31400f4ab53f0e23df82dd44128de3062ad25b15009d69daadf811c813aa3548b9fdc7229ce55923067e55c9e88b22b221f71bbd7f7cdec01ef9c59709f92fbbfb22b668e46b089ef5c5b81029ee2df2e01f1bed1ea8e8559fbdbbcca575efae289a4888d0cea8ae0838054b9e8599912e1831f2efc59d85323292aacc6bb8f99dfff06c64c5f4bd5ed3131560c633678f0ffd384aa22d7913bb6d1bcc4941df37f61dee15df402794aa81d33d59d8e9bb3e20673332782de866710ee038518e070ddde3cdac03166a509231bb8923ab7f08a3a804d8205b463b5eae01ba709564f0c8ea0d5eeadff93cf343d522a57475e721ba9d2bf49166a8389ac6af11412b41bbab4ab9f97e969d06a3201d319483d986195b76f825d0760c53bb736d94639c7ac4a677259bc57f967671aa1b2c9240b6f7211521b55ccb29e727064819cd95aa8c5968abe8e4cdf9b68ab5cb65dfdf30a539d7f505d5362de32270a54192e193b7d855a11b30ae84cc6e93e1d393eb91e8036d92e1076ba5c6987f3704fe6b6b8cdf146ca27f1097f8109c03658f0ba19f9fec8faae0a5994722903280e37adc464b232578140a1525ac8bc4929983407fb4f2620fd5d9c8c1e3b94c5c9394acca2c10159c9bef23d23bee6e2c494be71d1c60111e567e7dd4decd83df8bf6911f54aeaaa908a5d6d09eb66e741105ce1ca5defcc97e4f2735349a4ecf4ccd84cd9526d55f880f527d5b0a137b1c830ec5a63111937f28bb1c7ddc849515c18f3cf6a2a7060feeb0403cfcf783379d1357dc5772b59b6940157896b0a5e88142a071bb8c33b0a1c122f1de9d66e971d492c9d0dff3cdd3070d6b69f3fca5ef19f5d437fbc498b28a30711586c023edf6a44532204f035276986693dc9bc16b0e3ecd5c90995f5d359e41cb3168fc0a18eaf9bdd48b9c34b7a1e130580e983574860aa88b857098c5c335508312afff57faff3378c535cfc6caab8c29ed3ce20c213e5d906a47db1567577d5a6a64d5979c9fb99547df3e89e04df4d80c1c49b85bd3112d7ff17993eeab122512ef792edbb18227be6475b1a319e085967a2ef3e3ebf5f691640022548f1d83fa0d7d24b8000d54bdc6091e42b5ac881a78fa66cc61a9478be4016a6695a188039db9799415270ded315e8cb20aad826c73f08720a6c7376be28ebd25481e0b368d1a4befdc765ce2dbf94c87d2031fc8b8a51d1f5cb35f6690d476272aacfe77d63bf8757cdc6dcc4aa51635b3deb9ea6c9eb2ad2b6addf5bea9c8e84281c07edc88522f53ff11fd6479345c9489d4fefe9686725395a6c94995fb3257aca637ddd8eaae5dffbe60cb9e8bf843daa2260433a73050904eb963ba8c356e8d5fcdd8ceca0f8ec13ea7d5ed91bdd69e7248c5d05276b10c5c04687726aa8c416a5717cde9483862cc0e259ab0c67eed93089dcbcf7a0ee70a3bc8799b6e3eee732f19ca9ea8e65df5dc6b3cc2061ddb6a179eba4740c815a9f0ace9db5a2113c8d1666007833c82c79e0a61e639242971040a3ed8de32bfd00683182f2b6869219362421d2d0fa380b5bb19b3e1bf86ed57f401d7d106a1c5d4f23e669791e58e3c4bb76ab3407e46ce9f4be0f403af4214495578ff2813d27dbafaf55322bb51e1778fe69f04ae20795f0ebf418ef327b8f01f28d3ead022c29f25ac362b21f0be70c33940433399649c40a3669c5ba95c16e7cecee659c4472355defd1dcaaac6140ae7fc7270df420bda52f2c93b192128d70d976c1f6a9df50b7be37917f77e52eebb4c248587e849101907ead440029c8c53e3f0c3f83ca6fb5de617020042f7e5c6bead77ac3ffb9f4446ea68cba00125ebdcf686c83da7809429736835ceed2656e6fa6d6d792f26ca295ef92fe52b1ebbeaa459f2b9179e40815b593c608d291a9a605a7e347c44cb490bfe0fabb25625f9230634f4b5ed6e42ff4370ead518b9d7ee5b6f9bde10811c441a000726b283cc6c87fa3ac009b286958ba2dfcdc2f98e2625f113cc37ad0000a517c5e1fea09d563c0a02f80c24075f9a39b4c34bfef54a37c30ecbdbbd7e494aeab9639de2860392aa2a391277ce039ac38f981f6d3b9b44260efc398b82cbc7a51764c6b8036750768debd4c2a58499b9f5a98b0651867e0ccf173968006d4e16f604d9511ee1cb5ec17e444270b4810c1ddb772ab1e3af24b3db22f3a1c0c9380476af26174efc311ffa87c4a2c44a36a47ecb357a9e352e9e2b493e7ac7f5b0fbaf4f9d07e35671c5f045d1567ab94047a30466e45d60682853d864cf7efe51ca3c4ca319716a8646be17a30a278f1d2966510f0c5718d2902187f38c1e696b0fa51c6981ed884c0c75b96aa23"}, &(0x7f0000000040)=0xe08)
bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r7, 0x1b3}, 0x8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa0c009078000b0300450000000000000000000000e0000001e000000282851884c0f2cc62b936b942ee7c991d76f6af745cac653aad9f82590b6cfa5e"], 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)

962.877112ms ago: executing program 2 (id=4809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000002010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)

959.693864ms ago: executing program 0 (id=4810):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
unshare(0x6a040000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd"], 0x0) (async)
r0 = socket(0x8, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000)) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x501, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28000011}, 0x84) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='GPL\x00', 0xe, 0xff7, &(0x7f0000000280)=""/4087, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000500)=0x81, 0x4)

959.412572ms ago: executing program 2 (id=4811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

957.782592ms ago: executing program 2 (id=4812):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4001af83, &(0x7f0000000840)=0x204)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x52, 0xffffffffffffffff, &(0x7f00000003c0)=0x16)
sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810)
recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[])
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xffff}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x3, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000000)=""/158, &(0x7f00000000c0)=0x9e)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0xb6, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000007bcd587a2bfd86dd6ecc920a008011fffe800000000000000000000000000023ff0200000000000000000000000000012c0e00000000000007080000400200010300c910fe8000000000000000000000000000bb040102c910fe880000000000000000000000000001071d5a7418375bdcefa5fcb34b395a79b1e86d48a4c4ec188fb07c940ed84f011e9af3e4017dad5e1eec35701b9e04f40edc7197611bec968af17c4c8d76ea4e224e21000890782429acec999cac606b244cda2cb703a0669e92c720bfa2c065a6e002ade11704b723ca84060c4632dec8a4d3deba36a4f423030c8dbd178a97e5f1092284a52c9a6217cbe1b923466bb344f09c9782c92495fb05cadac4c43124d2e8ba18e42a29239e07e6b5c0bb538973bde9"], 0x0)
socket$kcm(0x10, 0x2, 0x4)

915.726691ms ago: executing program 0 (id=4813):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, <r7=>0xffffffffffffffff}, 0x4) (async)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f0000001a40)="fa", 0x1}], 0x2, 0x1) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xe, 0x7, 0xe, 0x10012, r7, 0x3, '\x00', 0x0, r8, 0x5, 0x1, 0x4, 0x5}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r9, 0x0, &(0x7f00000005c0)=""/67}, 0x20)
r10 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="027670"], 0x3) (async)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r13 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r14=>0x0})
connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) (async)
sendmsg$can_bcm(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x1, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x20000091) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

913.17622ms ago: executing program 0 (id=4814):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r7=>0x0})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x10)
bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r7, 0x1c}, 0x10)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x29, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x2], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)

852.902686ms ago: executing program 2 (id=4815):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000030801020000000000000040050000030900010073797a31000000000900010073797a310000000005000300060000001c00048008000140"], 0x58}, 0x1, 0x0, 0x0, 0x24010080}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8080)
close(r1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={<r6=>0x0, 0x23, "b381892f1b604c6f683ec3b2d6ab74eb61a5e2ed634313a45ffe7aaf2b614480723d0e"}, &(0x7f0000000100)=0x2b)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000240)={r6, 0x7fff}, &(0x7f0000000280)=0x8)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, 0xffffffffffffffff, 0x0)
r8 = socket$caif_seqpacket(0x25, 0x5, 0x3)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x2000000, 0x2c112, r8, 0x6ad99000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000480)={0x1, 0x3, 0x1000, 0x90, &(0x7f00000002c0)="9fec60c2fc87e4c9260adbe3822bbbf35e75fce42ad97a3acfd0e1a8af2b8d2972306d5ff20ca8a0e410900b740ddb67322bb60a7d8d9fa7c63876480346b6010ac8db7b284d8ece8820ccbd5423b185b2c266799871f346dd9bc5d5cab3ca787bd9aba6002ceaae30d79dad35540557cf5fa285bedcefe96d734dfc0c872bcd1bcb91413f260ff09478a7e3a960042a", 0xf6, 0x0, &(0x7f0000000380)="ac08372bade93dceeec8d1bfc981fc96e9a70527417285cf36a11214caf1a2f321462e489e245cf343fd1c05836671a2d4e371e01306d8e8730b6265b86afba3b245691ce4ed00e2521a8e8d1a5c985a4a3ae52fbc35f1e337479b54aebde57faba47f4f67105088c06ce8a62a3dfc5e2614e332c993199fb34a25af9773e96f9daaac8e7d549ae16806dbb6a750c577f1a12a224552653fa24a31d5330fa61552cd028b6b47bbee238639ac63aec9c33dbd02c0b3488db9a6764b85e72b58cb773df6b1a7ea33e13fd326ef6853a0f4577d068ca8d1e82bd6c3233734661f883d4277490efbe1e5b59ba6b5b04954c4f05ad5b6b4ff"})

772.622123ms ago: executing program 0 (id=4816):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)={'b', ' *:* ', 'w\x00'}, 0x8) (async)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c)
r3 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x80000)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180)=0x2, 0x4) (async)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)

771.23842ms ago: executing program 0 (id=4817):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000100e245d3cd3fe4a613c725000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$inet(r2, 0x0, 0x41)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x800, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
sendmsg(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xf], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)

192.973177ms ago: executing program 1 (id=4818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000004010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)

192.405904ms ago: executing program 1 (id=4819):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4080001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b332cbd7000000000001500000008000300", @ANYRES32=r4], 0x1c}}, 0xd4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@loopback, 0x100000, r5})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0x1000)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e1f, 0x4, @mcast2, 0xb90}, 0x1c)
bind$inet6(r8, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c)
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)

112.952448ms ago: executing program 1 (id=4820):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)
r1 = socket(0x1, 0x803, 0x0)
unshare(0x24020400)
connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast1}, 0x2, 0x1, 0x0, 0x3}}, 0x2e)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)

111.875698ms ago: executing program 1 (id=4821):
socket(0x10, 0x803, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e21, 0x3, 'sh\x00', 0x7, 0x4, 0x72}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="000000000000000000000084330caf8ec8d74e00497c1bc10b02a170346ed416e2d36da43f541db0ceb4adb763843f940c05e83a7cfc80369e", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff008f0c000000000200b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r7}, 0x0, &(0x7f0000001040)}, 0x20)

0s ago: executing program 2 (id=4822):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1689, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$inet(r2, 0x0, 0x41)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
sendmsg(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x3, [0x5, 0x2], [0x0, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

EPEAT abuse ?
[  187.780973][    C0] TC_ACT_REPEAT abuse ?
[  187.950455][T11453] TC_ACT_REPEAT abuse ?
[  187.952128][    C0] TC_ACT_REPEAT abuse ?
[  187.953709][T11453] TC_ACT_REPEAT abuse ?
[  187.955732][T11453] TC_ACT_REPEAT abuse ?
[  187.957304][    C0] TC_ACT_REPEAT abuse ?
[  187.962523][T11453] TC_ACT_REPEAT abuse ?
[  187.964107][T11453] TC_ACT_REPEAT abuse ?
[  187.988623][    C0] TC_ACT_REPEAT abuse ?
[  188.080133][T11460] vxcan1: entered allmulticast mode
[  188.082817][T11460] vxcan1: left allmulticast mode
[  188.246000][T11471] netlink: 'syz.2.1598': attribute type 11 has an invalid length.
[  188.847921][T11500] netlink: 'syz.1.1608': attribute type 4 has an invalid length.
[  188.909556][T11509] netlink: 'syz.0.1612': attribute type 4 has an invalid length.
[  188.915944][  T792] lo speed is unknown, defaulting to 1000
[  188.918145][T11509] netlink: 'syz.0.1612': attribute type 4 has an invalid length.
[  188.921838][  T792] syz0: Port: 1 Link DOWN
[  188.925417][  T792] lo speed is unknown, defaulting to 1000
[  188.934728][  T792] lo speed is unknown, defaulting to 1000
[  188.936865][  T792] syz0: Port: 1 Link ACTIVE
[  189.072288][T11516] dvmrp8: entered allmulticast mode
[  189.619209][T11530] __nla_validate_parse: 21 callbacks suppressed
[  189.619272][T11530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1619'.
[  189.624651][T11527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1619'.
[  189.729441][T11539] can: request_module (can-proto-4) failed.
[  189.823523][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'.
[  189.845159][T11514] dvmrp8: left allmulticast mode
[  189.860676][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'.
[  189.989040][T11572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1632'.
[  189.993022][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1632'.
[  189.996934][T11572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1632'.
[  190.001263][T11572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1632'.
[  190.025980][T11574] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1633'.
[  190.119177][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1635'.
[  190.284077][ T6125] lo speed is unknown, defaulting to 1000
[  190.286093][ T6125] syz0: Port: 1 Link DOWN
[  190.292389][ T5891] lo speed is unknown, defaulting to 1000
[  191.262695][ T5292] udevd[5292]: worker [6177] /devices/virtual/block/nbd1 is taking a long time
[  193.082015][T11700] net_ratelimit: 452 callbacks suppressed
[  193.082027][T11700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.529140][T11724] can: request_module (can-proto-4) failed.
[  193.792069][T11757] can: request_module (can-proto-4) failed.
[  193.861540][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.863736][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.824893][T11794] __nla_validate_parse: 25 callbacks suppressed
[  194.824904][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'.
[  195.768072][T11832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1716'.
[  195.783350][T11834] can: request_module (can-proto-4) failed.
[  195.830067][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'.
[  195.880762][T11854] netlink: 'syz.2.1722': attribute type 2 has an invalid length.
[  195.883995][T11854] netlink: 'syz.2.1722': attribute type 2 has an invalid length.
[  195.943296][T11860] lo speed is unknown, defaulting to 1000
[  195.946497][T11860] lo speed is unknown, defaulting to 1000
[  195.986131][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1724'.
[  195.989766][T11864] can: request_module (can-proto-4) failed.
[  195.994717][T11861] tc_dump_action: action bad kind
[  196.111040][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1728'.
[  196.114435][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  196.117432][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1728'.
[  196.124595][T11874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1728'.
[  196.164263][T11878] unknown channel width for channel at 909000KHz?
[  196.168088][T11880] netlink: 'syz.2.1730': attribute type 5 has an invalid length.
[  196.226061][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'.
[  196.258987][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1734'.
[  197.100506][T11905] sctp: [Deprecated]: syz.1.1738 (pid 11905) Use of int in maxseg socket option.
[  197.100506][T11905] Use struct sctp_assoc_value instead
[  197.423490][T11944] tipc: Started in network mode
[  197.425779][T11944] tipc: Node identity 023617b77913, cluster identity 4711
[  197.429381][T11944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.432815][T11944] syzkaller0: entered promiscuous mode
[  197.434736][T11944] syzkaller0: entered allmulticast mode
[  197.439337][T11944] tipc: Resetting bearer <eth:syzkaller0>
[  197.442831][T11943] tipc: Resetting bearer <eth:syzkaller0>
[  197.446152][T11943] tipc: Disabling bearer <eth:syzkaller0>
[  197.599979][T11959] nbd: socks must be embedded in a SOCK_ITEM attr
[  197.603920][ T8285] block nbd64: NBD_DISCONNECT
[  197.824722][T11998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.827347][T11998] syzkaller0: entered promiscuous mode
[  197.829523][T11998] syzkaller0: entered allmulticast mode
[  197.894703][T11990] tipc: Resetting bearer <eth:syzkaller0>
[  197.903863][T11990] tipc: Disabling bearer <eth:syzkaller0>
[  198.043626][T12008] rdma_op ffff88810dd219f0 conn xmit_rdma 0000000000000000
[  198.300711][T12045] netlink: 'syz.2.1780': attribute type 4 has an invalid length.
[  198.394877][T12063] lo speed is unknown, defaulting to 1000
[  198.397633][T12063] lo speed is unknown, defaulting to 1000
[  198.563996][T12073] smc: adding net device bond0 with user defined pnetid SYZ2
[  198.567339][T12073] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.570398][T12073] bridge0: port 1(bond0) entered blocking state
[  198.572591][T12073] bridge0: port 1(bond0) entered disabled state
[  198.574899][T12073] bond0: entered allmulticast mode
[  198.577707][T12073] bond0: entered promiscuous mode
[  198.694938][T12082] lo speed is unknown, defaulting to 1000
[  198.697394][T12082] lo speed is unknown, defaulting to 1000
[  198.787321][T12082] netlink: 'syz.0.1789': attribute type 5 has an invalid length.
[  200.175692][T12142] __nla_validate_parse: 18 callbacks suppressed
[  200.175702][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  200.184098][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  200.187956][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  200.191971][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  200.232436][T12147] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1809'.
[  200.353131][T12153] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1811'.
[  200.465008][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1815'.
[  200.469246][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1815'.
[  200.488173][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1816'.
[  200.718819][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'.
[  201.826312][T12264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.843675][T12339] lo speed is unknown, defaulting to 1000
[  203.846335][T12339] lo speed is unknown, defaulting to 1000
[  204.526827][T12350] lo speed is unknown, defaulting to 1000
[  204.529467][T12350] lo speed is unknown, defaulting to 1000
[  205.570777][T12380] __nla_validate_parse: 23 callbacks suppressed
[  205.570786][T12380] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1873'.
[  205.641440][T12396] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1875'.
[  205.645717][T12387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1875'.
[  205.707350][T12407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1878'.
[  205.713637][T12407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1878'.
[  205.716594][T12407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1878'.
[  205.720100][T12407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1878'.
[  205.724392][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'.
[  205.764779][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'.
[  206.755256][T12454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1893'.
[  207.455804][T12460] netlink: 'syz.0.1895': attribute type 15 has an invalid length.
[  207.562686][T12464] lo speed is unknown, defaulting to 1000
[  207.566849][T12464] lo speed is unknown, defaulting to 1000
[  208.503936][T12504] IPv6: sit2: Disabled Multicast RS
[  208.507507][T12505] 8021q: VLANs not supported on ip6gre0
[  208.625560][T12521] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  209.642617][T12545] veth0: entered promiscuous mode
[  209.645649][T12545] veth0 (unregistering): left promiscuous mode
[  210.716625][T12569] __nla_validate_parse: 18 callbacks suppressed
[  210.716637][T12569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1925'.
[  210.722616][T12569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1925'.
[  210.727200][T12569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1925'.
[  210.790343][   T12] nci: nci_rx_work: unknown MT 0x1
[  210.994020][T12576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.548269][T12573] netlink: 'syz.2.1925': attribute type 3 has an invalid length.
[  211.552894][T12573] netlink: 'syz.2.1925': attribute type 1 has an invalid length.
[  211.555675][T12573] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1925'.
[  211.576809][T12583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1929'.
[  211.580111][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1929'.
[  211.585533][T12583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1929'.
[  211.591946][T12583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1929'.
[  211.595155][T12583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1929'.
[  211.598445][T12583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1929'.
[  211.759556][T12596] tun0: tun_chr_ioctl cmd 1074025681
[  212.025530][T12613] siw: device registration error -23
[  212.404764][T12660] netlink: 'syz.0.1951': attribute type 1 has an invalid length.
[  212.415669][T12660] 8021q: adding VLAN 0 to HW filter on device bond3
[  212.539854][T12672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  213.058836][   T25] block nbd1: Possible stuck request ffff888020b48000: control (read@0,1024B). Runtime 90 seconds
[  213.062546][   T25] block nbd1: Possible stuck request ffff888020b48200: control (read@1024,1024B). Runtime 90 seconds
[  213.066402][   T25] block nbd1: Possible stuck request ffff888020b48400: control (read@2048,1024B). Runtime 90 seconds
[  213.070653][   T25] block nbd1: Possible stuck request ffff888020b48600: control (read@3072,1024B). Runtime 90 seconds
[  213.501587][T12731] openvswitch: netlink: Flow key attr not present in new flow.
[  214.368096][T12780] tipc: Started in network mode
[  214.371879][T12780] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  214.377259][T12780] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  214.491648][T12789] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  214.675500][T12797] lo speed is unknown, defaulting to 1000
[  214.678311][T12797] lo speed is unknown, defaulting to 1000
[  214.796308][T12815] netem: incorrect ge model size
[  214.801989][T12815] netem: change failed
[  215.042136][T12836] netlink: 'syz.2.1999': attribute type 1 has an invalid length.
[  216.038118][T12915] __nla_validate_parse: 37 callbacks suppressed
[  216.038128][T12915] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2022'.
[  216.245118][T12922] netlink: 'syz.1.2024': attribute type 1 has an invalid length.
[  216.325613][T12924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'.
[  216.446261][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'.
[  216.450491][T12930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2028'.
[  216.476361][T12932] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2029'.
[  217.204960][T12949] netlink: 'syz.0.2035': attribute type 1 has an invalid length.
[  217.260152][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'.
[  217.263396][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'.
[  217.267186][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'.
[  217.311943][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  217.315355][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  217.997663][T12998] tipc: New replicast peer: 255.255.255.255
[  218.001220][T12998] tipc: Enabled bearer <udp:syz1>, priority 26
[  218.327723][T13016] vxcan1: entered allmulticast mode
[  218.332967][T13013] lo speed is unknown, defaulting to 1000
[  218.335802][T13013] lo speed is unknown, defaulting to 1000
[  218.450022][T13020] pimreg: entered allmulticast mode
[  218.468194][ T5310] lo speed is unknown, defaulting to 1000
[  218.486084][ T5310] syz0: Port: 1 Link ACTIVE
[  218.489017][ T5310] lo speed is unknown, defaulting to 1000
[  218.652835][T13036] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  218.697303][   T24] lo speed is unknown, defaulting to 1000
[  218.701633][   T24] syz0: Port: 1 Link DOWN
[  218.704455][   T24] lo speed is unknown, defaulting to 1000
[  218.856568][T13055] netlink: 'syz.1.2065': attribute type 10 has an invalid length.
[  218.860232][T13055] bond0: (slave wlan1): Opening slave failed
[  219.008779][  T792] tipc: Node number set to 2254127841
[  219.247038][T13060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.250285][T13060] syzkaller0: entered promiscuous mode
[  219.252270][T13060] syzkaller0: entered allmulticast mode
[  219.255310][T13059] tipc: Resetting bearer <eth:syzkaller0>
[  219.260309][T13059] tipc: Disabling bearer <eth:syzkaller0>
[  219.394963][T13062] vxcan1: entered allmulticast mode
[  219.397439][T13062] vxcan1: left allmulticast mode
[  219.627529][T13069] netlink: 'syz.1.2074': attribute type 6 has an invalid length.
[  219.630255][T13069] netlink: 'syz.1.2074': attribute type 4 has an invalid length.
[  219.678344][T13071] netlink: 'syz.2.2075': attribute type 4 has an invalid length.
[  219.683723][T13071] netlink: 'syz.2.2075': attribute type 4 has an invalid length.
[  219.849540][T13105] TC_ACT_REPEAT abuse ?
[  219.851226][    C1] TC_ACT_REPEAT abuse ?
[  219.853171][T13105] TC_ACT_REPEAT abuse ?
[  219.855434][   T24] TC_ACT_REPEAT abuse ?
[  219.857503][   T24] TC_ACT_REPEAT abuse ?
[  219.859791][   T24] TC_ACT_REPEAT abuse ?
[  219.921055][T13116] bond0: left allmulticast mode
[  219.922898][T13116] bond0: left promiscuous mode
[  219.924700][T13116] bridge0: port 1(bond0) entered disabled state
[  220.594700][T13138] netlink: 'syz.0.2093': attribute type 11 has an invalid length.
[  221.224511][T13169] __nla_validate_parse: 20 callbacks suppressed
[  221.224522][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'.
[  221.284576][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'.
[  221.550055][T13173] sctp: [Deprecated]: syz.1.2102 (pid 13173) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.550055][T13173] Use struct sctp_sack_info instead
[  221.563897][T13175] netlink: 'syz.0.2103': attribute type 1 has an invalid length.
[  221.567697][T13175] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  221.574540][T13181] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2104'.
[  221.731876][T13191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2109'.
[  221.850505][T13197] lo speed is unknown, defaulting to 1000
[  221.852813][T13197] lo speed is unknown, defaulting to 1000
[  222.031179][T13203] lo speed is unknown, defaulting to 1000
[  222.033657][T13203] lo speed is unknown, defaulting to 1000
[  222.115661][T13218] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2116'.
[  222.154881][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2117'.
[  222.351552][T13232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  223.092248][T13250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2126'.
[  223.095454][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2126'.
[  223.099083][T13250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2126'.
[  223.321199][T13270] lo speed is unknown, defaulting to 1000
[  223.323548][T13270] lo speed is unknown, defaulting to 1000
[  223.328849][T13269] lo speed is unknown, defaulting to 1000
[  223.336927][T13271] lo speed is unknown, defaulting to 1000
[  223.365524][T13269] lo speed is unknown, defaulting to 1000
[  223.422974][T13271] lo speed is unknown, defaulting to 1000
[  224.185971][T13351] lo speed is unknown, defaulting to 1000
[  224.188276][T13351] lo speed is unknown, defaulting to 1000
[  224.216259][T13356] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  224.219153][T13356] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  224.221845][T13356] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  224.498571][ T1089] wlan0: Trigger new scan to find an IBSS to join
[  224.686381][T13393] netlink: 'syz.2.2168': attribute type 11 has an invalid length.
[  225.287242][T13434] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  225.290321][ T5904] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  225.293370][ T5904] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  225.296438][ T5904] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  225.301024][ T5904] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  226.234608][T13485] __nla_validate_parse: 34 callbacks suppressed
[  226.234619][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'.
[  226.244496][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'.
[  226.705641][T13493] lo speed is unknown, defaulting to 1000
[  226.708368][T13493] lo speed is unknown, defaulting to 1000
[  226.750596][T13497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2198'.
[  226.871060][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'.
[  227.133917][T13509] bond1: (slave geneve3): Releasing backup interface
[  227.138093][ T5904] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.141520][ T5904] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.144515][ T5904] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.147280][ T5904] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.211752][T13517] netlink: 'syz.1.2206': attribute type 8 has an invalid length.
[  227.672733][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'.
[  227.718158][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'.
[  227.901697][T13545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2214'.
[  228.136624][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'.
[  228.217614][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  228.223235][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  228.224421][T13586] rdma_rxe: rxe_newlink: failed to add macvlan1
[  228.677113][T13651] netlink: 'syz.2.2250': attribute type 11 has an invalid length.
[  228.838277][T13651] netlink: 'syz.2.2250': attribute type 11 has an invalid length.
[  228.841562][T13651] netlink: 'syz.2.2250': attribute type 11 has an invalid length.
[  229.528329][T13669] netlink: 'syz.2.2256': attribute type 23 has an invalid length.
[  230.416312][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.419974][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.920881][T13764] netlink: 'syz.1.2273': attribute type 1 has an invalid length.
[  231.727317][T13773] netlink: 'syz.2.2276': attribute type 10 has an invalid length.
[  231.766816][T13778] __nla_validate_parse: 24 callbacks suppressed
[  231.766833][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'.
[  231.816455][T13776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2277'.
[  231.921565][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'.
[  231.945272][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2284'.
[  232.143917][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'.
[  232.163486][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2293'.
[  232.182200][T13828] vxcan1: left allmulticast mode
[  232.186388][T13828] syzkaller1: entered allmulticast mode
[  232.245640][T13833] netlink: 'syz.0.2295': attribute type 1 has an invalid length.
[  232.396272][T13853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'.
[  232.429301][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'.
[  232.453060][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'.
[  232.479819][T13873] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21
[  232.696470][T13886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2311'.
[  232.798658][T13896] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002
[  233.879849][T13970] smc: net device bond0 applied user defined pnetid SYZ
[  233.986863][T13983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.023945][T13994] netlink: 'syz.0.2348': attribute type 1 has an invalid length.
[  234.054686][T13998] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  234.409344][T14058] netlink: 'syz.1.2368': attribute type 83 has an invalid length.
[  234.554227][T14083] : renamed from bond_slave_0
[  234.627747][T14093] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  234.656755][T14081] lo speed is unknown, defaulting to 1000
[  234.664894][T14081] lo speed is unknown, defaulting to 1000
[  234.664979][T14090] lo speed is unknown, defaulting to 1000
[  234.729745][T14090] lo speed is unknown, defaulting to 1000
[  235.168072][T14154] netlink: 'syz.1.2395': attribute type 1 has an invalid length.
[  235.216377][T14161] syzkaller1: entered promiscuous mode
[  235.218310][T14161] syzkaller1: entered allmulticast mode
[  235.369434][T14171] tipc: MTU too low for tipc bearer
[  235.385345][T14175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.387920][T14175] syzkaller0: entered promiscuous mode
[  235.394327][T14175] syzkaller0: entered allmulticast mode
[  235.405173][T14175] tipc: Resetting bearer <eth:syzkaller0>
[  235.410824][T14175] tipc: Resetting bearer <eth:syzkaller0>
[  235.417270][T14175] tipc: Disabling bearer <eth:syzkaller0>
[  235.607268][T14200] "syz.0.2411" (14200) uses obsolete ecb(arc4) skcipher
[  236.319896][T14216] netlink: 'syz.2.2413': attribute type 1 has an invalid length.
[  236.328041][T14216] 8021q: adding VLAN 0 to HW filter on device bond3
[  236.334848][T14216] bond3: (slave gretap1): making interface the new active one
[  236.338157][T14216] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  236.398000][T14216] syz.2.2413 (14216) used greatest stack depth: 20040 bytes left
[  237.342111][T14240] __nla_validate_parse: 56 callbacks suppressed
[  237.342129][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'.
[  237.457350][T14264] netlink: 'syz.1.2428': attribute type 1 has an invalid length.
[  237.472943][T14264] bond2: entered promiscuous mode
[  237.474874][T14264] bond2: entered allmulticast mode
[  237.476848][T14264] 8021q: adding VLAN 0 to HW filter on device bond2
[  237.483741][T14264] bridge10: entered promiscuous mode
[  237.485646][T14264] bridge10: entered allmulticast mode
[  237.488806][T14264] bond2: (slave bridge10): Enslaving as a backup interface with an up link
[  237.528373][T14269] lo speed is unknown, defaulting to 1000
[  237.533618][T14269] lo speed is unknown, defaulting to 1000
[  237.587350][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'.
[  237.595699][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2433'.
[  237.598088][T14288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2435'.
[  237.657813][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2438'.
[  237.699458][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'.
[  237.745820][T14299] netlink: 'syz.0.2438': attribute type 1 has an invalid length.
[  238.549409][T14320] lo speed is unknown, defaulting to 1000
[  238.552087][T14320] lo speed is unknown, defaulting to 1000
[  238.555091][T14319] lo speed is unknown, defaulting to 1000
[  238.599982][T14319] lo speed is unknown, defaulting to 1000
[  238.637154][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'.
[  238.674853][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'.
[  238.683527][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'.
[  238.686433][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'.
[  238.821563][T14339] lo speed is unknown, defaulting to 1000
[  238.827642][T14339] lo speed is unknown, defaulting to 1000
[  239.711217][T14388] bond2: left promiscuous mode
[  239.712927][T14388] bridge10: left promiscuous mode
[  239.714844][T14388] bond2: left allmulticast mode
[  239.716563][T14388] bridge10: left allmulticast mode
[  239.862296][T14394] netlink: 'syz.1.2466': attribute type 1 has an invalid length.
[  240.198738][T14437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.233869][T14443] netlink: 'syz.2.2481': attribute type 1 has an invalid length.
[  240.236398][T14439] netlink: 'syz.0.2477': attribute type 1 has an invalid length.
[  240.436364][T14465] ieee802154 phy0 wpan0: encryption failed: -22
[  241.266509][T14485] netlink: 'syz.2.2493': attribute type 9 has an invalid length.
[  241.694363][T14519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.922519][T14540] lo speed is unknown, defaulting to 1000
[  241.925008][T14540] lo speed is unknown, defaulting to 1000
[  242.169037][T14547] vxcan1: entered allmulticast mode
[  242.170912][T14548] vxcan1: left allmulticast mode
[  242.172803][T14547] vxcan1: entered allmulticast mode
[  242.174984][T14548] vxcan1: left allmulticast mode
[  242.183818][T14547] vxcan1: entered allmulticast mode
[  242.589652][T14576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.600609][T14576] tipc: Disabling bearer <eth:syzkaller0>
[  242.669188][T14581] __nla_validate_parse: 28 callbacks suppressed
[  242.669201][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'.
[  242.675553][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'.
[  242.679784][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'.
[  242.683171][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'.
[  242.686813][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'.
[  242.706396][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2519'.
[  242.826069][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'.
[  242.873354][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2524'.
[  242.876653][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2524'.
[  242.879836][T14598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2524'.
[  243.083897][T14611] syzkaller1: entered promiscuous mode
[  243.085808][T14611] syzkaller1: entered allmulticast mode
[  243.140929][   T25] block nbd1: Possible stuck request ffff888020b48000: control (read@0,1024B). Runtime 120 seconds
[  243.141093][T14622] bond3: (slave gretap1): Releasing active interface
[  243.144696][   T25] block nbd1: Possible stuck request ffff888020b48200: control (read@1024,1024B). Runtime 120 seconds
[  243.144732][   T25] block nbd1: Possible stuck request ffff888020b48400: control (read@2048,1024B). Runtime 120 seconds
[  243.144744][   T25] block nbd1: Possible stuck request ffff888020b48600: control (read@3072,1024B). Runtime 120 seconds
[  244.290781][T14673] sctp: [Deprecated]: syz.2.2549 (pid 14673) Use of int in max_burst socket option.
[  244.290781][T14673] Use struct sctp_assoc_value instead
[  244.329999][T14680] netlink: 'syz.1.2551': attribute type 4 has an invalid length.
[  244.341302][T14680] netlink: 'syz.1.2551': attribute type 4 has an invalid length.
[  244.381361][T14686] TC_ACT_REPEAT abuse ?
[  244.382970][T14686] TC_ACT_REPEAT abuse ?
[  244.384568][T14686] TC_ACT_REPEAT abuse ?
[  244.386262][T14686] TC_ACT_REPEAT abuse ?
[  244.387756][T14686] TC_ACT_REPEAT abuse ?
[  244.461316][T14694] TC_ACT_REPEAT abuse ?
[  244.463050][T14694] TC_ACT_REPEAT abuse ?
[  244.502619][T14700] TC_ACT_REPEAT abuse ?
[  244.528758][T14700] netlink: 'syz.1.2557': attribute type 1 has an invalid length.
[  244.536441][T14700] netlink: 'syz.1.2557': attribute type 2 has an invalid length.
[  244.543536][T14701] netlink: 'syz.1.2557': attribute type 1 has an invalid length.
[  244.546790][T14701] netlink: 'syz.1.2557': attribute type 2 has an invalid length.
[  244.808158][T14730] lo speed is unknown, defaulting to 1000
[  244.812099][T14730] lo speed is unknown, defaulting to 1000
[  245.022628][T14736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.025544][T14736] syzkaller0: entered promiscuous mode
[  245.027472][T14736] syzkaller0: entered allmulticast mode
[  245.034905][T14736] tipc: Resetting bearer <eth:syzkaller0>
[  245.042179][T14735] tipc: Resetting bearer <eth:syzkaller0>
[  245.045952][T14735] tipc: Disabling bearer <eth:syzkaller0>
[  245.296547][T14749] netlink: 'syz.0.2574': attribute type 1 has an invalid length.
[  245.670763][T14766] Bluetooth: MGMT ver 1.23
[  245.675652][T14766] net_ratelimit: 12 callbacks suppressed
[  245.675665][T14766] TC_ACT_REPEAT abuse ?
[  245.680072][    C0] TC_ACT_REPEAT abuse ?
[  245.683982][T14766] TC_ACT_REPEAT abuse ?
[  245.686058][  T792] TC_ACT_REPEAT abuse ?
[  245.688190][  T792] TC_ACT_REPEAT abuse ?
[  245.689995][  T792] TC_ACT_REPEAT abuse ?
[  245.692083][  T792] TC_ACT_REPEAT abuse ?
[  245.694034][    C0] TC_ACT_REPEAT abuse ?
[  245.695673][  T792] TC_ACT_REPEAT abuse ?
[  245.697595][    C0] TC_ACT_REPEAT abuse ?
[  246.000071][T14805] syzkaller1: entered promiscuous mode
[  246.002061][T14805] syzkaller1: entered allmulticast mode
[  246.048439][T14811] netlink: 'syz.2.2593': attribute type 13 has an invalid length.
[  246.051540][T14811] netlink: 'syz.2.2593': attribute type 17 has an invalid length.
[  246.075158][T14811] 8021q: adding VLAN 0 to HW filter on device team0
[  246.091520][T14816] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  247.105121][T14867] netlink: 'syz.2.2609': attribute type 1 has an invalid length.
[  247.116276][T14867] bond4: entered promiscuous mode
[  247.118027][T14867] bond4: entered allmulticast mode
[  247.120456][T14867] 8021q: adding VLAN 0 to HW filter on device bond4
[  247.126878][T14867] bridge4: entered promiscuous mode
[  247.129132][T14867] bridge4: entered allmulticast mode
[  247.131231][T14867] bond4: (slave bridge4): Enslaving as a backup interface with an up link
[  247.253071][T14887] bond4: left promiscuous mode
[  247.254758][T14887] bridge4: left promiscuous mode
[  247.259720][T14887] bond4: left allmulticast mode
[  247.261438][T14887] bridge4: left allmulticast mode
[  247.311504][T14892] lo speed is unknown, defaulting to 1000
[  247.313777][T14892] lo speed is unknown, defaulting to 1000
[  248.044936][T14928] : renamed from wg2
[  248.104064][T14933] __nla_validate_parse: 25 callbacks suppressed
[  248.104078][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2624'.
[  248.118290][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'.
[  248.221065][T14940] vxcan1: entered allmulticast mode
[  248.223106][T14940] vxcan1: left allmulticast mode
[  248.331552][T14945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2629'.
[  248.334492][T14945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2629'.
[  248.454233][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2633'.
[  249.498068][T15004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2646'.
[  249.566131][T15014] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  249.590095][T15021] syzkaller1: entered promiscuous mode
[  249.595048][T15021] syzkaller1: entered allmulticast mode
[  249.662139][T15028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2652'.
[  249.726538][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2655'.
[  249.756142][T15044] ksmbd: Unknown IPC event: 3, ignore.
[  249.760123][T15045] validate_nla: 2 callbacks suppressed
[  249.760137][T15045] netlink: 'syz.1.2656': attribute type 1 has an invalid length.
[  249.765534][T15045] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2656'.
[  250.041870][T15074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2663'.
[  250.269338][T15082] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  251.726721][T15138] lo speed is unknown, defaulting to 1000
[  251.731774][T15138] lo speed is unknown, defaulting to 1000
[  251.744465][T15144] netlink: 'syz.0.2685': attribute type 5 has an invalid length.
[  252.083773][T15165] lo speed is unknown, defaulting to 1000
[  252.086348][T15165] lo speed is unknown, defaulting to 1000
[  252.155679][T15165] netlink: 'syz.0.2693': attribute type 5 has an invalid length.
[  252.160080][   T24] IPVS: starting estimator thread 0...
[  252.162502][T15165] ieee802154 phy0 wpan0: encryption failed: -22
[  252.249732][T15175] IPVS: using max 133 ests per chain, 319200 per kthread
[  252.289405][T15192] netlink: 'syz.1.2700': attribute type 13 has an invalid length.
[  252.292223][T15192] netlink: 'syz.1.2700': attribute type 17 has an invalid length.
[  252.354192][T15192] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.358384][T15192] 8021q: adding VLAN 0 to HW filter on device team0
[  252.363966][T15192] net_ratelimit: 43 callbacks suppressed
[  252.363981][T15192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.380471][ T5904] IPVS: stop unused estimator thread 0...
[  252.386767][T15193] lo speed is unknown, defaulting to 1000
[  252.400718][T15193] lo speed is unknown, defaulting to 1000
[  252.594260][T15224] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  252.597659][T15224] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  252.621212][T15227] syzkaller0: entered promiscuous mode
[  252.623250][T15227] syzkaller0: entered allmulticast mode
[  253.094566][T15231] TC_ACT_REPEAT abuse ?
[  253.097094][T15231] TC_ACT_REPEAT abuse ?
[  253.101585][T15231] TC_ACT_REPEAT abuse ?
[  253.103280][    C0] TC_ACT_REPEAT abuse ?
[  253.108048][T15231] vxcan2: entered promiscuous mode
[  253.157860][T15232] __nla_validate_parse: 26 callbacks suppressed
[  253.157878][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'.
[  253.164183][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'.
[  253.167921][T15232] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2711'.
[  253.199583][T15234] TC_ACT_REPEAT abuse ?
[  253.201230][T15234] TC_ACT_REPEAT abuse ?
[  253.202745][T15234] TC_ACT_REPEAT abuse ?
[  253.210533][T15234] TC_ACT_REPEAT abuse ?
[  253.212058][T15234] TC_ACT_REPEAT abuse ?
[  253.422577][T15239] lo speed is unknown, defaulting to 1000
[  253.424504][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2716'.
[  253.425544][T15239] lo speed is unknown, defaulting to 1000
[  253.575390][T15263] siw: device registration error -23
[  254.418299][T15296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2726'.
[  254.423797][T15296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2726'.
[  254.427460][T15296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2726'.
[  254.432469][T15296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2726'.
[  254.450492][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'.
[  254.466097][T15300] lo speed is unknown, defaulting to 1000
[  254.470129][T15300] lo speed is unknown, defaulting to 1000
[  254.524203][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2731'.
[  255.301131][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.303921][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.835021][T15388] veth0_to_bridge: entered promiscuous mode
[  255.837900][T15388] veth0_to_bridge: left promiscuous mode
[  256.365103][T15437] syzkaller1: entered promiscuous mode
[  256.367401][T15437] syzkaller1: entered allmulticast mode
[  256.633595][T15461] lo speed is unknown, defaulting to 1000
[  256.636231][T15461] lo speed is unknown, defaulting to 1000
[  257.313210][T15500] bond2: (slave bridge10): Releasing backup interface
[  258.202472][T15520] net_ratelimit: 43 callbacks suppressed
[  258.202493][T15520] TC_ACT_REPEAT abuse ?
[  258.206978][    C1] TC_ACT_REPEAT abuse ?
[  258.209688][T15520] TC_ACT_REPEAT abuse ?
[  258.212096][   T12] TC_ACT_REPEAT abuse ?
[  258.218731][    C0] TC_ACT_REPEAT abuse ?
[  258.244587][T15519] __nla_validate_parse: 23 callbacks suppressed
[  258.244608][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'.
[  258.245339][T15521] TC_ACT_REPEAT abuse ?
[  258.253343][    C0] TC_ACT_REPEAT abuse ?
[  258.364884][T15531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2792'.
[  258.367999][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2792'.
[  258.372227][T15531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2792'.
[  258.375346][T15531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2792'.
[  258.397388][T15533] TC_ACT_REPEAT abuse ?
[  258.399643][T15533] TC_ACT_REPEAT abuse ?
[  258.401959][T15533] TC_ACT_REPEAT abuse ?
[  259.179517][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'.
[  259.203925][T15541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2795'.
[  259.223622][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'.
[  259.257742][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2799'.
[  259.275335][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'.
[  259.400169][T15575] netlink: 'syz.0.2805': attribute type 4 has an invalid length.
[  259.406906][T15575] netlink: 'syz.0.2805': attribute type 4 has an invalid length.
[  259.415960][   T24] lo speed is unknown, defaulting to 1000
[  259.417853][   T24] syz0: Port: 1 Link ACTIVE
[  259.420051][   T24] lo speed is unknown, defaulting to 1000
[  259.593414][T15601] netlink: 'syz.1.2813': attribute type 1 has an invalid length.
[  261.172873][ T5852] Bluetooth: hci2: link tx timeout
[  261.174754][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.177744][ T5844] Bluetooth: hci2: link tx timeout
[  261.179783][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  261.294718][T15648] netlink: 'syz.0.2828': attribute type 15 has an invalid length.
[  261.297802][T15648] netlink: 'syz.0.2828': attribute type 15 has an invalid length.
[  261.317816][T15652] netlink: 'syz.0.2829': attribute type 1 has an invalid length.
[  261.328388][T15652] bond5: entered promiscuous mode
[  261.330768][T15652] bond5: entered allmulticast mode
[  261.333158][T15652] 8021q: adding VLAN 0 to HW filter on device bond5
[  261.342256][T15653] bridge6: entered promiscuous mode
[  261.344161][T15653] bridge6: entered allmulticast mode
[  261.346281][T15653] bond5: (slave bridge6): Enslaving as a backup interface with an up link
[  261.355974][T15652] bridge7: entered promiscuous mode
[  261.358389][T15652] bridge7: entered allmulticast mode
[  261.361315][T15652] bond5: (slave bridge7): Enslaving as a backup interface with a down link
[  261.380972][ T5310] lo speed is unknown, defaulting to 1000
[  261.384054][ T5310] syz0: Port: 1 Link DOWN
[  261.385754][ T5310] lo speed is unknown, defaulting to 1000
[  261.785747][T15677] netlink: 'syz.1.2836': attribute type 1 has an invalid length.
[  261.817777][T15677] 8021q: adding VLAN 0 to HW filter on device bond3
[  261.854675][T15681] bond3: (slave gretap1): making interface the new active one
[  261.869550][T15681] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  261.987324][T15683] netlink: 'syz.0.2837': attribute type 3 has an invalid length.
[  263.060355][T15739] lo speed is unknown, defaulting to 1000
[  263.062673][T15739] lo speed is unknown, defaulting to 1000
[  263.163239][T15756] lo speed is unknown, defaulting to 1000
[  263.165973][T15756] lo speed is unknown, defaulting to 1000
[  263.219591][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  263.249685][T15771] __nla_validate_parse: 33 callbacks suppressed
[  263.249697][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2861'.
[  263.261224][T15771] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2861'.
[  263.308349][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'.
[  263.334608][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'.
[  263.398350][T15786] net_ratelimit: 38 callbacks suppressed
[  263.398362][T15786] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  263.998137][T15803] netlink: 'syz.2.2872': attribute type 2 has an invalid length.
[  264.211026][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'.
[  264.461671][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'.
[  264.485519][T15850] pim6reg1: entered promiscuous mode
[  264.487446][T15850] pim6reg1: entered allmulticast mode
[  264.998751][T15874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.252813][T15890] lo speed is unknown, defaulting to 1000
[  265.256025][T15890] lo speed is unknown, defaulting to 1000
[  265.730650][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'.
[  265.787681][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'.
[  265.962594][T15911] netlink: 'syz.2.2899': attribute type 20 has an invalid length.
[  266.167430][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2903'.
[  266.320802][T15944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2906'.
[  266.376916][T15950] lo speed is unknown, defaulting to 1000
[  266.379516][T15950] lo speed is unknown, defaulting to 1000
[  266.450816][T15957] netlink: 'syz.2.2912': attribute type 4 has an invalid length.
[  266.454619][T15957] netlink: 'syz.2.2912': attribute type 4 has an invalid length.
[  266.476630][T15959] TC_ACT_REPEAT abuse ?
[  266.478233][    C1] TC_ACT_REPEAT abuse ?
[  266.501944][T15964] TC_ACT_REPEAT abuse ?
[  266.503996][T15964] TC_ACT_REPEAT abuse ?
[  266.505988][T15964] TC_ACT_REPEAT abuse ?
[  266.514931][T15964] 8021q: VLANs not supported on vcan0
[  266.524331][T15963] TC_ACT_REPEAT abuse ?
[  266.526229][T15963] TC_ACT_REPEAT abuse ?
[  266.726215][T15995] TC_ACT_REPEAT abuse ?
[  266.727885][T15995] TC_ACT_REPEAT abuse ?
[  267.223843][T16011] vti0: entered promiscuous mode
[  267.719812][T16024] syzkaller1: entered promiscuous mode
[  267.722231][T16024] syzkaller1: entered allmulticast mode
[  268.162955][T16051] netlink: 'syz.1.2943': attribute type 5 has an invalid length.
[  268.297740][T16060] __nla_validate_parse: 15 callbacks suppressed
[  268.297756][T16060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'.
[  268.357293][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'.
[  268.470873][T16068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2948'.
[  269.109688][T16074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2950'.
[  269.113231][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2950'.
[  269.116377][T16074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2950'.
[  269.120609][T16074] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2950'.
[  269.413045][T16096] net_ratelimit: 241 callbacks suppressed
[  269.413063][T16096] TC_ACT_REPEAT abuse ?
[  269.417533][    C0] TC_ACT_REPEAT abuse ?
[  270.807966][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2961'.
[  271.060294][T16137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'.
[  271.167872][T16150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2969'.
[  271.643514][T16177] lo speed is unknown, defaulting to 1000
[  271.646182][T16177] lo speed is unknown, defaulting to 1000
[  271.745378][T16182] lo speed is unknown, defaulting to 1000
[  271.748463][T16182] lo speed is unknown, defaulting to 1000
[  273.207128][T16235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.209727][T16235] syzkaller0: entered promiscuous mode
[  273.211642][T16235] syzkaller0: entered allmulticast mode
[  273.216402][T16235] tipc: Resetting bearer <eth:syzkaller0>
[  273.221892][   T25] block nbd1: Possible stuck request ffff888020b48000: control (read@0,1024B). Runtime 150 seconds
[  273.225440][   T25] block nbd1: Possible stuck request ffff888020b48200: control (read@1024,1024B). Runtime 150 seconds
[  273.229350][   T25] block nbd1: Possible stuck request ffff888020b48400: control (read@2048,1024B). Runtime 150 seconds
[  273.233026][   T25] block nbd1: Possible stuck request ffff888020b48600: control (read@3072,1024B). Runtime 150 seconds
[  273.244370][T16235] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  273.249032][T16234] tipc: Resetting bearer <eth:syzkaller0>
[  273.253068][T16234] tipc: Disabling bearer <eth:syzkaller0>
[  273.342299][T16239] __nla_validate_parse: 13 callbacks suppressed
[  273.342309][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'.
[  273.347507][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'.
[  274.624194][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'.
[  274.682631][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'.
[  274.701428][T16308] IPVS: Scheduler module ip_vs_sip not found
[  274.792966][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'.
[  275.617223][T16351] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  275.968193][T16380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3030'.
[  276.041014][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'.
[  276.477297][T16385] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  276.481197][T16385] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  276.521278][T16387] lo speed is unknown, defaulting to 1000
[  276.523973][T16387] lo speed is unknown, defaulting to 1000
[  276.536082][T16393] vxcan1: entered allmulticast mode
[  276.540465][T16393] vxcan1: left allmulticast mode
[  276.873802][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'.
[  276.886797][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'.
[  276.956205][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'.
[  276.964923][T16424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.969526][T16424] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  277.047797][T16428] netlink: 'syz.2.3044': attribute type 30 has an invalid length.
[  277.097828][T16433] netlink: 'syz.1.3047': attribute type 21 has an invalid length.
[  277.102986][T16433] IPv6: NLM_F_CREATE should be specified when creating new route
[  277.106576][T16433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  277.109762][T16433] IPv6: NLM_F_CREATE should be set when creating new route
[  277.112953][T16433] IPv6: NLM_F_CREATE should be set when creating new route
[  277.116042][T16433] IPv6: NLM_F_CREATE should be set when creating new route
[  277.384962][T16452] IPVS: set_ctl: invalid protocol: 280 0.0.0.0:0
[  277.395012][T16453] lo speed is unknown, defaulting to 1000
[  277.398189][T16453] lo speed is unknown, defaulting to 1000
[  278.113489][T16504] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  278.164950][T16511] lo speed is unknown, defaulting to 1000
[  278.167283][T16511] lo speed is unknown, defaulting to 1000
[  278.217207][T16514] lo speed is unknown, defaulting to 1000
[  278.226755][T16514] lo speed is unknown, defaulting to 1000
[  278.234476][T16511] netlink: 'syz.0.3069': attribute type 3 has an invalid length.
[  278.237692][T16511] ieee802154 phy0 wpan0: encryption failed: -22
[  278.425642][T16514] __nla_validate_parse: 2 callbacks suppressed
[  278.425652][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'.
[  278.438653][T16514] netlink: 'syz.2.3070': attribute type 13 has an invalid length.
[  278.444843][T16514] netlink: 'syz.2.3070': attribute type 17 has an invalid length.
[  278.452025][T16514] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  278.557698][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3076'.
[  278.644454][T16562] bond5: left promiscuous mode
[  278.646122][T16562] bridge6: left promiscuous mode
[  278.647829][T16562] bridge7: left promiscuous mode
[  278.650097][T16562] bond5: left allmulticast mode
[  278.651902][T16562] bridge6: left allmulticast mode
[  278.653822][T16562] bridge7: left allmulticast mode
[  278.745165][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'.
[  278.937029][T16584] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3082'.
[  279.570520][T16598] netlink: 'syz.2.3087': attribute type 2 has an invalid length.
[  279.647606][T16608] bond4: (slave bridge4): Releasing backup interface
[  279.810792][T16611] lo speed is unknown, defaulting to 1000
[  279.814126][T16611] lo speed is unknown, defaulting to 1000
[  280.006362][T16627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3096'.
[  280.011142][T16627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3096'.
[  280.013992][T16627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3096'.
[  280.017176][T16627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3096'.
[  280.040505][T16629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3097'.
[  280.144901][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'.
[  280.220634][T16637] vxcan1: entered allmulticast mode
[  280.222818][T16637] vxcan1: left allmulticast mode
[  280.450223][T16646] netlink: 'syz.0.3103': attribute type 1 has an invalid length.
[  280.522180][T16651] netlink: 'syz.1.3105': attribute type 4 has an invalid length.
[  280.676809][T16679] netlink: 'syz.1.3112': attribute type 1 has an invalid length.
[  280.685855][T16679] bond4: entered promiscuous mode
[  280.687580][T16679] bond4: entered allmulticast mode
[  280.689797][T16679] 8021q: adding VLAN 0 to HW filter on device bond4
[  281.465593][T16760] netlink: 'syz.2.3115': attribute type 1 has an invalid length.
[  283.243341][T16838] netlink: 'syz.0.3138': attribute type 10 has an invalid length.
[  283.375503][T16846] vti0: left promiscuous mode
[  283.377590][T16846] bond4: left promiscuous mode
[  283.379940][T16846] bond4: left allmulticast mode
[  283.430599][T16853] netlink: 'syz.1.3143': attribute type 3 has an invalid length.
[  283.487637][T16861] bond3: (slave gretap1): Releasing active interface
[  284.103173][T16871] __nla_validate_parse: 11 callbacks suppressed
[  284.103189][T16871] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3148'.
[  284.109614][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'.
[  284.226918][T16878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3147'.
[  284.231428][T16878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3147'.
[  284.235297][T16878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3147'.
[  284.239562][T16878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3147'.
[  284.303090][T16877] lo speed is unknown, defaulting to 1000
[  284.310998][T16877] lo speed is unknown, defaulting to 1000
[  284.901800][T16898] netlink: 'syz.1.3154': attribute type 10 has an invalid length.
[  284.905552][T16898] bond0: (slave wlan1): Opening slave failed
[  284.914421][T16898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  284.917589][T16898] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  284.934600][T16905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3156'.
[  285.865601][T16932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.869424][T16934] netlink: 'syz.0.3164': attribute type 12 has an invalid length.
[  285.935283][T16937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3165'.
[  286.056466][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'.
[  286.606184][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'.
[  287.753576][T17012] netlink: 'syz.2.3187': attribute type 5 has an invalid length.
[  287.920439][T17020] netlink: 'syz.1.3189': attribute type 13 has an invalid length.
[  287.923807][T17020] netlink: 'syz.1.3189': attribute type 17 has an invalid length.
[  287.952563][T17020] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.959065][T17020] 8021q: adding VLAN 0 to HW filter on device team0
[  287.964741][T17020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  288.002881][T17035] netlink: 'syz.0.3194': attribute type 1 has an invalid length.
[  288.362451][T17102] vxcan2: entered promiscuous mode
[  288.597791][T17126] netlink: 'syz.1.3219': attribute type 1 has an invalid length.
[  288.601070][T17126] netlink: 'syz.1.3219': attribute type 2 has an invalid length.
[  288.949942][T17139] lo speed is unknown, defaulting to 1000
[  288.952375][T17139] lo speed is unknown, defaulting to 1000
[  289.095009][T17143] geneve0: entered promiscuous mode
[  289.098628][ T5738] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  289.102534][ T5738] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  289.105323][ T5738] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  289.109504][ T5738] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  289.183395][T17154] lo speed is unknown, defaulting to 1000
[  289.185699][T17154] lo speed is unknown, defaulting to 1000
[  289.208944][T17155] netlink: 'syz.2.3226': attribute type 5 has an invalid length.
[  289.497368][T17160] __nla_validate_parse: 14 callbacks suppressed
[  289.497384][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'.
[  289.507608][T17160] geneve0: left promiscuous mode
[  289.512488][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  289.516890][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  289.521612][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  289.525329][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  289.586682][T17175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3230'.
[  289.762650][T17177] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3231'.
[  289.805444][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3234'.
[  289.807345][T17194] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3233'.
[  289.907957][T17198] syzkaller1: entered promiscuous mode
[  289.910476][T17198] syzkaller1: entered allmulticast mode
[  290.637407][T17209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3239'.
[  290.672901][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'.
[  290.676082][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'.
[  290.921219][T17217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3242'.
[  290.963337][T17241] netlink: 'syz.2.3248': attribute type 3 has an invalid length.
[  291.075085][T17254] lo speed is unknown, defaulting to 1000
[  291.077986][T17254] lo speed is unknown, defaulting to 1000
[  291.117244][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3254'.
[  293.026613][T17348] lo speed is unknown, defaulting to 1000
[  293.029929][T17348] lo speed is unknown, defaulting to 1000
[  293.076368][T17349] netlink: 'syz.2.3276': attribute type 21 has an invalid length.
[  293.079475][T17349] netlink: 'syz.2.3276': attribute type 22 has an invalid length.
[  293.082553][T17349] netlink: 'syz.2.3276': attribute type 23 has an invalid length.
[  293.085253][T17349] netlink: 'syz.2.3276': attribute type 25 has an invalid length.
[  293.087922][T17349] netlink: 'syz.2.3276': attribute type 26 has an invalid length.
[  293.150826][T17354] syzkaller0: entered promiscuous mode
[  293.153212][T17354] syzkaller0: entered allmulticast mode
[  293.161483][T17354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.165404][T17354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  293.174833][T17354] tipc: Resetting bearer <eth:syzkaller0>
[  293.226900][T17353] tipc: Resetting bearer <eth:syzkaller0>
[  293.232098][T17353] tipc: Disabling bearer <eth:syzkaller0>
[  293.318274][T17364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.563595][T17407] __nla_validate_parse: 8 callbacks suppressed
[  294.563605][T17407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3293'.
[  294.612027][T17425] lo speed is unknown, defaulting to 1000
[  294.614891][T17425] lo speed is unknown, defaulting to 1000
[  294.656824][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'.
[  294.662073][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'.
[  294.665215][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'.
[  294.700647][T17436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3302'.
[  294.776858][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3298'.
[  294.825938][T17449] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3306'.
[  296.040359][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3317'.
[  296.196949][T17510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3325'.
[  296.201113][T17510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3325'.
[  296.206076][T17512] netlink: 'syz.2.3326': attribute type 9 has an invalid length.
[  296.395967][T17538] lo speed is unknown, defaulting to 1000
[  296.399797][T17538] lo speed is unknown, defaulting to 1000
[  296.422806][T17541] netlink: 'syz.2.3333': attribute type 3 has an invalid length.
[  297.351548][   T56] block nbd2: Receive control failed (result -32)
[  297.591969][T17590] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  298.307478][T17601] pim6reg1: entered promiscuous mode
[  298.310339][T17601] pim6reg1: entered allmulticast mode
[  298.379855][T17610] netlink: 'syz.1.3351': attribute type 5 has an invalid length.
[  298.406772][T17613] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  298.425452][T17616] lo speed is unknown, defaulting to 1000
[  298.427375][T17616] lo speed is unknown, defaulting to 1000
[  298.431867][T17616] lo speed is unknown, defaulting to 1000
[  298.435944][T17616] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  298.447052][T17616] lo speed is unknown, defaulting to 1000
[  298.449753][T17616] lo speed is unknown, defaulting to 1000
[  298.452253][T17616] lo speed is unknown, defaulting to 1000
[  298.470372][T17619] netlink: 'syz.0.3355': attribute type 4 has an invalid length.
[  298.515675][T17628] netlink: 'syz.2.3357': attribute type 7 has an invalid length.
[  298.608711][T17637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.616920][T17637] tipc: Resetting bearer <eth:syzkaller0>
[  298.623380][T17636] tipc: Disabling bearer <eth:syzkaller0>
[  298.894805][T17670] pim6reg: entered allmulticast mode
[  298.897915][T17670] pim6reg: left allmulticast mode
[  299.241947][T17706] netlink: 'syz.0.3379': attribute type 5 has an invalid length.
[  300.387932][T17762] __nla_validate_parse: 15 callbacks suppressed
[  300.387945][T17762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3398'.
[  300.444516][T17765] IPVS: Error connecting to the multicast addr
[  300.516250][T17770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3400'.
[  300.519703][T17770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3400'.
[  300.523634][T17770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3400'.
[  300.526568][T17770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3400'.
[  300.714338][T17777] veth1_to_bond: entered allmulticast mode
[  300.717469][T17777] bond_slave_1: entered promiscuous mode
[  300.723348][T17776] bond_slave_1: left promiscuous mode
[  300.725394][T17776] veth1_to_bond: left allmulticast mode
[  300.743288][T17779] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3404'.
[  301.027857][T17809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3413'.
[  301.030945][T17809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3413'.
[  301.033871][T17809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3413'.
[  301.072936][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'.
[  301.460295][T17834] : entered promiscuous mode
[  301.507162][T17840] lo speed is unknown, defaulting to 1000
[  301.510604][T17840] lo speed is unknown, defaulting to 1000
[  301.544759][T17840] lo speed is unknown, defaulting to 1000
[  302.844078][T17907] netlink: 'syz.2.3445': attribute type 1 has an invalid length.
[  303.004230][T17926] netlink: 'syz.2.3448': attribute type 1 has an invalid length.
[  303.299282][   T25] block nbd1: Possible stuck request ffff888020b48000: control (read@0,1024B). Runtime 180 seconds
[  303.303305][   T25] block nbd1: Possible stuck request ffff888020b48200: control (read@1024,1024B). Runtime 180 seconds
[  303.307162][   T25] block nbd1: Possible stuck request ffff888020b48400: control (read@2048,1024B). Runtime 180 seconds
[  303.311489][   T25] block nbd1: Possible stuck request ffff888020b48600: control (read@3072,1024B). Runtime 180 seconds
[  304.773755][T17986] netlink: 'syz.1.3468': attribute type 1 has an invalid length.
[  304.960167][T17997] netlink: 'syz.0.3472': attribute type 131 has an invalid length.
[  305.665208][T18008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.758909][T18017] netlink: 'syz.1.3480': attribute type 1 has an invalid length.
[  305.762839][T18017] __nla_validate_parse: 21 callbacks suppressed
[  305.762851][T18017] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3480'.
[  305.772814][T18019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3481'.
[  305.797405][T18023] IPVS: Error connecting to the multicast addr
[  305.816578][T18029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3485'.
[  305.822307][T18029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3485'.
[  305.825704][T18029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3485'.
[  305.830346][T18029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3485'.
[  305.876240][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'.
[  305.919493][T18045] netlink: 'syz.2.3490': attribute type 1 has an invalid length.
[  305.933508][T18045] 8021q: adding VLAN 0 to HW filter on device bond6
[  305.945285][T18045] bond6: (slave veth1): Enslaving as an active interface with a down link
[  305.952425][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'.
[  305.956077][T18045] 8021q: adding VLAN 0 to HW filter on device batadv1
[  305.960113][T18045] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  306.033240][T18055] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  306.706860][T18062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3493'.
[  306.710121][T18062] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3493'.
[  306.800850][T18067] IPVS: length: 209 != 24
[  306.923048][T18078] vxcan1: entered allmulticast mode
[  306.925690][T18078] vxcan1: left allmulticast mode
[  307.183854][T18098] bond6: (slave veth1): Releasing active interface
[  307.680312][T18118] lo speed is unknown, defaulting to 1000
[  307.684519][T18118] lo speed is unknown, defaulting to 1000
[  307.732037][T18118] lo speed is unknown, defaulting to 1000
[  308.642622][T18143] lo speed is unknown, defaulting to 1000
[  308.644942][T18143] lo speed is unknown, defaulting to 1000
[  308.683896][T18143] lo speed is unknown, defaulting to 1000
[  309.898328][T18180] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  310.810501][T18207] __nla_validate_parse: 7 callbacks suppressed
[  310.810516][T18207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3538'.
[  310.817437][T18207] vxcan1 (unregistering): left allmulticast mode
[  310.890469][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'.
[  311.002553][T18212] netlink: 'syz.2.3540': attribute type 10 has an invalid length.
[  311.118055][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'.
[  311.123202][T18233] netlink: 'syz.0.3546': attribute type 17 has an invalid length.
[  311.147410][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3547'.
[  311.256277][T18254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.259161][T18254] syzkaller0: entered promiscuous mode
[  311.261994][T18254] syzkaller0: entered allmulticast mode
[  311.309736][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'.
[  311.315265][T18253] tipc: Resetting bearer <eth:syzkaller0>
[  311.321592][T18253] tipc: Disabling bearer <eth:syzkaller0>
[  311.351811][T18266] netlink: 'syz.1.3556': attribute type 3 has an invalid length.
[  311.354582][T18266] netlink: 'syz.1.3556': attribute type 3 has an invalid length.
[  311.361234][T18266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3556'.
[  311.364278][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3556'.
[  311.367386][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'.
[  311.914289][T18291] Bluetooth: hci1: Opcode 0x080f failed: -4
[  311.919830][T18291] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  312.316709][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3572'.
[  312.389268][T18333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3576'.
[  312.491891][T18337] netlink: 'syz.0.3577': attribute type 32 has an invalid length.
[  312.495423][T18337] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  312.674465][T18344] netlink: 'syz.0.3578': attribute type 13 has an invalid length.
[  312.677053][T18344] netlink: 'syz.0.3578': attribute type 17 has an invalid length.
[  312.687019][T18344] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.690085][T18344] 8021q: adding VLAN 0 to HW filter on device team0
[  312.693666][T18344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.699118][ T5310] lo speed is unknown, defaulting to 1000
[  312.700975][ T5310] syz0: Port: 1 Link ACTIVE
[  312.702512][ T5310] lo speed is unknown, defaulting to 1000
[  313.176076][T18353] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  313.214838][T18355] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  313.217966][T18355] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  313.245804][T18360] netlink: 'syz.1.3583': attribute type 7 has an invalid length.
[  313.250787][T18360] netlink: 'syz.1.3583': attribute type 8 has an invalid length.
[  313.537301][ T5877] lo speed is unknown, defaulting to 1000
[  313.541487][ T5877] syz0: Port: 1 Link DOWN
[  313.543890][ T5877] lo speed is unknown, defaulting to 1000
[  313.610400][T18406] netlink: 'syz.1.3598': attribute type 10 has an invalid length.
[  313.613657][T18406] macvlan0: entered promiscuous mode
[  313.616833][T18406] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  313.938689][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  314.141038][T18430] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  314.729954][T18459] macvlan0: left promiscuous mode
[  315.976448][T18541] __nla_validate_parse: 14 callbacks suppressed
[  315.976458][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3635'.
[  316.023971][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'.
[  316.042452][T18544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3636'.
[  316.070500][T18560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3641'.
[  316.079718][T18560] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3641'.
[  316.082715][T18560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3641'.
[  316.121159][T18566] ieee802154 phy0 wpan0: encryption failed: -22
[  316.123615][T18566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.163329][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'.
[  316.273649][T18583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3648'.
[  316.276706][T18583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3648'.
[  316.741370][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.743610][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  317.038074][ T5292] udevd[5292]: worker [6177] /devices/virtual/block/nbd1 timeout; kill it
[  317.042570][ T5292] udevd[5292]: seq 12008 '/devices/virtual/block/nbd1' killed
[  317.279461][T18637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3667'.
[  318.198776][T18650] lo speed is unknown, defaulting to 1000
[  318.201085][T18650] lo speed is unknown, defaulting to 1000
[  318.254892][T18650] lo speed is unknown, defaulting to 1000
[  318.257201][T18652] infiniband syz1: set down
[  318.259382][T18652] infiniband syz1: added macvlan1
[  318.284215][T18652] RDS/IB: syz1: added
[  318.294836][T18652] smc: adding ib device syz1 with port count 1
[  318.296989][T18652] smc:    ib device syz1 port 1 has pnetid 
[  318.550671][T18688] validate_nla: 1 callbacks suppressed
[  318.550683][T18688] netlink: 'syz.1.3683': attribute type 16 has an invalid length.
[  318.555893][T18688] netlink: 'syz.1.3683': attribute type 17 has an invalid length.
[  318.560634][T18688] IPv6: NLM_F_REPLACE set, but no existing node found!
[  318.565068][T18690] netlink: 'syz.0.3684': attribute type 32 has an invalid length.
[  319.088124][T18715] lo speed is unknown, defaulting to 1000
[  319.092321][T18715] lo speed is unknown, defaulting to 1000
[  319.157100][T18715] lo speed is unknown, defaulting to 1000
[  319.864924][T18762] syz1: rxe_newlink: already configured on macvlan1
[  320.988308][T18829] __nla_validate_parse: 21 callbacks suppressed
[  320.988321][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  320.993904][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3728'.
[  321.018958][T18838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3726'.
[  321.022001][T18838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3726'.
[  321.024802][T18838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3726'.
[  321.028191][T18838] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3726'.
[  321.882547][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3733'.
[  321.980711][T18867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3738'.
[  322.056589][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3736'.
[  322.060013][T18870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3736'.
[  322.939216][T18895] netlink: 'syz.2.3746': attribute type 1 has an invalid length.
[  324.053603][T18967] lo speed is unknown, defaulting to 1000
[  324.056687][T18967] lo speed is unknown, defaulting to 1000
[  324.096585][T18967] lo speed is unknown, defaulting to 1000
[  324.409866][T18990] nftables ruleset with unbound chain
[  324.826843][ T6125] lo speed is unknown, defaulting to 1000
[  324.836517][ T6125] syz2: Port: 1 Link ACTIVE
[  325.129981][T19032] workqueue: Failed to create a rescuer kthread for wq "nfc11_nci_rx_wq": -EINTR
[  325.145668][T19060] lo speed is unknown, defaulting to 1000
[  325.154314][T19060] lo speed is unknown, defaulting to 1000
[  325.227750][T19069] lo speed is unknown, defaulting to 1000
[  325.230768][T19060] lo speed is unknown, defaulting to 1000
[  325.230857][T19069] lo speed is unknown, defaulting to 1000
[  325.278418][T19069] lo speed is unknown, defaulting to 1000
[  325.737350][T19086] lo speed is unknown, defaulting to 1000
[  325.740004][T19086] lo speed is unknown, defaulting to 1000
[  325.824630][T19086] lo speed is unknown, defaulting to 1000
[  326.219865][T19096] __nla_validate_parse: 19 callbacks suppressed
[  326.219879][T19096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'.
[  326.226948][T19096] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3789'.
[  326.298137][T19103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3791'.
[  326.384942][T19109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3793'.
[  326.392907][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.398233][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.407586][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.420656][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.437001][T19113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3795'.
[  326.441097][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3795'.
[  326.444118][T19113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3795'.
[  326.447508][T19113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3795'.
[  326.494331][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3797'.
[  326.525876][T19122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3798'.
[  326.749420][T19150] bond0: (slave macvlan0): Releasing backup interface
[  326.767717][T19150] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.771231][T19150] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  326.839980][T19155] bridge12: the hash_elasticity option has been deprecated and is always 16
[  326.843033][T19155] bridge12: entered allmulticast mode
[  327.076578][T19208] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  327.141442][T19214] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001
[  327.414385][T19241] netlink: 'syz.2.3831': attribute type 7 has an invalid length.
[  327.460976][T19249] netlink: 'syz.2.3833': attribute type 13 has an invalid length.
[  327.463686][T19249] netlink: 'syz.2.3833': attribute type 17 has an invalid length.
[  327.480867][T19249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.501639][T19249] lo speed is unknown, defaulting to 1000
[  327.504088][T19249] lo speed is unknown, defaulting to 1000
[  327.554971][T19249] lo speed is unknown, defaulting to 1000
[  327.662406][T19260] netlink: 'syz.0.3836': attribute type 1 has an invalid length.
[  327.973804][T19280] netlink: 'syz.1.3841': attribute type 2 has an invalid length.
[  327.977227][T19280] netlink: 'syz.1.3841': attribute type 2 has an invalid length.
[  328.111438][T19289] bridge12: left allmulticast mode
[  328.176735][T19297] netlink: 'syz.1.3847': attribute type 41 has an invalid length.
[  328.181263][T19297] netlink: 'syz.1.3847': attribute type 2 has an invalid length.
[  328.245122][T19297] delete_channel: no stack
[  328.255359][T19300] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20001
[  328.515358][T19320] lo speed is unknown, defaulting to 1000
[  328.517811][T19320] lo speed is unknown, defaulting to 1000
[  328.553177][T19320] lo speed is unknown, defaulting to 1000
[  328.805309][T19325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  328.808372][T19328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  328.983372][  T792] lo speed is unknown, defaulting to 1000
[  328.985420][  T792] syz2: Port: 1 Link DOWN
[  329.300561][T19350] netlink: 'syz.1.3859': attribute type 1 has an invalid length.
[  329.708020][T19352] netlink: 'syz.0.3860': attribute type 1 has an invalid length.
[  330.010879][T19378] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  330.015377][T19378] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  331.274373][T19456] __nla_validate_parse: 34 callbacks suppressed
[  331.274386][T19456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3891'.
[  331.323514][T19458] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  331.342520][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3893'.
[  331.524342][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3898'.
[  331.745021][T19493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3905'.
[  332.010598][T19520] lo speed is unknown, defaulting to 1000
[  332.014596][T19520] lo speed is unknown, defaulting to 1000
[  332.022643][T19519] lo speed is unknown, defaulting to 1000
[  332.080011][T19519] lo speed is unknown, defaulting to 1000
[  332.080038][T19520] lo speed is unknown, defaulting to 1000
[  332.177261][T19519] lo speed is unknown, defaulting to 1000
[  332.467965][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'.
[  332.515367][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3918'.
[  332.545124][T19546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3920'.
[  332.598032][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3922'.
[  332.657315][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'.
[  332.661908][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'.
[  332.667092][T19557] validate_nla: 9 callbacks suppressed
[  332.667101][T19557] netlink: 'syz.2.3923': attribute type 10 has an invalid length.
[  333.066162][T19614] netlink: 'syz.2.3938': attribute type 13 has an invalid length.
[  333.071539][T19614] netlink: 'syz.2.3938': attribute type 17 has an invalid length.
[  333.094868][T19614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  333.101346][ T5877] lo speed is unknown, defaulting to 1000
[  333.103461][ T5877] syz2: Port: 1 Link ACTIVE
[  333.120250][T19613] lo speed is unknown, defaulting to 1000
[  333.123591][T19613] lo speed is unknown, defaulting to 1000
[  333.172505][T19613] lo speed is unknown, defaulting to 1000
[  333.309548][T19638] netlink: 'syz.1.3946': attribute type 1 has an invalid length.
[  333.316823][T19638] 8021q: adding VLAN 0 to HW filter on device bond5
[  333.389199][   T25] block nbd1: Possible stuck request ffff888020b48000: control (read@0,1024B). Runtime 210 seconds
[  333.393732][   T25] block nbd1: Possible stuck request ffff888020b48200: control (read@1024,1024B). Runtime 210 seconds
[  333.397277][   T25] block nbd1: Possible stuck request ffff888020b48400: control (read@2048,1024B). Runtime 210 seconds
[  333.410023][   T25] block nbd1: Possible stuck request ffff888020b48600: control (read@3072,1024B). Runtime 210 seconds
[  333.799499][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  334.048810][T19728] netlink: 'syz.0.3972': attribute type 4 has an invalid length.
[  334.052520][T19728] netlink: 'syz.0.3972': attribute type 4 has an invalid length.
[  334.056033][ T5310] lo speed is unknown, defaulting to 1000
[  334.058061][ T5310] syz0: Port: 1 Link ACTIVE
[  334.060072][ T5310] lo speed is unknown, defaulting to 1000
[  334.082080][T19730] TC_ACT_REPEAT abuse ?
[  334.083688][    C0] TC_ACT_REPEAT abuse ?
[  334.085189][T19730] TC_ACT_REPEAT abuse ?
[  334.087449][T19730] TC_ACT_REPEAT abuse ?
[  334.089403][ T6125] TC_ACT_REPEAT abuse ?
[  334.091075][ T6125] TC_ACT_REPEAT abuse ?
[  334.092738][    C0] TC_ACT_REPEAT abuse ?
[  334.094264][ T6125] TC_ACT_REPEAT abuse ?
[  334.095846][    C0] TC_ACT_REPEAT abuse ?
[  334.117848][T19732] vxcan0: entered promiscuous mode
[  334.255325][ T5877] lo speed is unknown, defaulting to 1000
[  334.255486][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.257311][ T5877] syz0: Port: 1 Link DOWN
[  334.263515][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.267272][ T5877] lo speed is unknown, defaulting to 1000
[  334.267291][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  334.272773][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.004318][ T5310] lo speed is unknown, defaulting to 1000
[  335.006620][ T5310] syz2: Port: 1 Link DOWN
[  335.409352][T19770] syzkaller0: entered promiscuous mode
[  335.411438][T19770] syzkaller0: entered allmulticast mode
[  335.771405][T19775] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  335.835292][T19777] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  336.285333][T19795] 8021q: VLANs not supported on ip6_vti0
[  336.424065][T19802] __nla_validate_parse: 19 callbacks suppressed
[  336.424075][T19802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3992'.
[  336.444166][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3993'.
[  336.582737][T19816] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  336.612021][T19818] "syz.1.3997" (19818) uses obsolete ecb(arc4) skcipher
[  336.692409][T19822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3999'.
[  336.696980][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3999'.
[  337.355912][T19848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4005'.
[  337.359058][T19849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4005'.
[  337.363087][T19848] netlink: 'syz.0.4005': attribute type 10 has an invalid length.
[  337.363108][T19849] netlink: 'syz.0.4005': attribute type 10 has an invalid length.
[  337.370113][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4005'.
[  338.672467][T19889] net_ratelimit: 10 callbacks suppressed
[  338.672486][T19889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.682204][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'.
[  338.689418][T19889] siw: device registration error -23
[  339.553176][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4024'.
[  340.350493][T19923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4027'.
[  341.299117][T19950] lo speed is unknown, defaulting to 1000
[  341.302026][T19950] lo speed is unknown, defaulting to 1000
[  341.348329][T19959] lo speed is unknown, defaulting to 1000
[  341.363411][T19950] lo speed is unknown, defaulting to 1000
[  341.365669][T19959] lo speed is unknown, defaulting to 1000
[  341.406109][T19962] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  341.429549][T19959] lo speed is unknown, defaulting to 1000
[  341.485226][T19971] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  341.524793][T19976] __nla_validate_parse: 2 callbacks suppressed
[  341.524803][T19976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4044'.
[  341.800444][T19995] netlink: 'syz.0.4050': attribute type 1 has an invalid length.
[  342.060955][T19999] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  342.284379][T20022] netlink: 'syz.1.4059': attribute type 1 has an invalid length.
[  342.293593][T20022] 8021q: adding VLAN 0 to HW filter on device bond6
[  342.303313][T20022] 8021q: adding VLAN 0 to HW filter on device bond6
[  342.305844][T20022] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  342.310289][T20022] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  342.355695][T20024] veth5: entered promiscuous mode
[  342.360714][T20024] bond6: (slave veth5): Enslaving as an active interface with a down link
[  342.367769][T20022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4059'.
[  342.371917][T20022] 8021q: adding VLAN 0 to HW filter on device bond6
[  342.405105][T20028] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4061'.
[  342.447754][T20030] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4062'.
[  342.476224][T20033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4063'.
[  342.554491][T20036] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  342.648446][T20042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4066'.
[  342.652378][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4066'.
[  342.656257][T20042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4066'.
[  342.661252][T20042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4066'.
[  342.734792][T20053] netlink: 'syz.1.4069': attribute type 11 has an invalid length.
[  342.866426][T20060] lo speed is unknown, defaulting to 1000
[  342.870116][T20060] lo speed is unknown, defaulting to 1000
[  342.903037][T20060] lo speed is unknown, defaulting to 1000
[  343.061811][T20071] netlink: 'syz.2.4072': attribute type 1 has an invalid length.
[  343.599983][T20078] netlink: 'syz.0.4075': attribute type 11 has an invalid length.
[  343.603248][T20078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4075'.
[  343.794658][T20100] IPVS: length: 64 != 24
[  343.845864][T20104] tipc: New replicast peer: 255.255.255.255
[  343.848233][T20104] tipc: Enabled bearer <udp:syz2>, priority 26
[  343.937109][T20114] netlink: 'syz.2.4086': attribute type 1 has an invalid length.
[  343.941049][T20114] netlink: 'syz.2.4086': attribute type 2 has an invalid length.
[  344.196946][T20159] rdma_rxe: rxe_newlink: failed to add macvlan1
[  344.269952][T20177] netlink: 'syz.1.4102': attribute type 4 has an invalid length.
[  344.548212][T20190] netem: incorrect gi model size
[  344.550637][T20190] netem: change failed
[  344.769519][T20199] netlink: 'syz.0.4110': attribute type 1 has an invalid length.
[  344.772424][T20199] netlink: 'syz.0.4110': attribute type 2 has an invalid length.
[  345.133719][T20204] rdma_rxe: rxe_newlink: failed to add macvlan1
[  346.055135][T20234] netlink: 'syz.1.4120': attribute type 2 has an invalid length.
[  346.170452][T20251] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  346.668900][T20275] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  346.731059][T20277] __nla_validate_parse: 24 callbacks suppressed
[  346.731074][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4133'.
[  347.117641][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4138'.
[  347.191259][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4139'.
[  347.240959][T20311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4140'.
[  347.334602][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'.
[  347.337967][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'.
[  347.341818][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'.
[  347.427097][T20319] tipc: New replicast peer: 255.255.255.255
[  347.431691][T20319] tipc: Enabled bearer <udp:syz2>, priority 26
[  348.273891][T20323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4145'.
[  348.277068][T20323] netlink: 'syz.1.4145': attribute type 7 has an invalid length.
[  348.280421][T20323] netlink: 'syz.1.4145': attribute type 8 has an invalid length.
[  348.283495][T20323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'.
[  348.288358][T20323] ip6gretap0: entered promiscuous mode
[  348.291226][T20323] syz_tun: entered promiscuous mode
[  348.293347][T20323] ip6gretap0: left promiscuous mode
[  348.295528][T20323] syz_tun: left promiscuous mode
[  348.387979][T20342] netlink: 'syz.2.4151': attribute type 5 has an invalid length.
[  348.388355][T20343] netlink: 'syz.2.4151': attribute type 5 has an invalid length.
[  348.440322][ T6125] tipc: Node number set to 2066028471
[  348.443068][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4154'.
[  349.354388][T20386] netlink: 'syz.0.4164': attribute type 3 has an invalid length.
[  349.400604][T20384] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  349.454952][T20398] openvswitch: netlink: IP tunnel dst address not specified
[  349.506996][T20401] can: request_module (can-proto-0) failed.
[  350.667123][T20471] netlink: 'syz.2.4183': attribute type 30 has an invalid length.
[  350.672570][ T5904] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.676792][ T5904] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.685582][ T5904] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.688247][ T5904] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.796915][T20488] IPVS: persistence engine module ip_vs_pe_ not found
[  351.016948][T20519] netlink: 'syz.2.4196': attribute type 1 has an invalid length.
[  351.127326][T20524] sctp: [Deprecated]: syz.2.4197 (pid 20524) Use of struct sctp_assoc_value in delayed_ack socket option.
[  351.127326][T20524] Use struct sctp_sack_info instead
[  351.140572][T20524] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  351.145012][T20524] CPU: 1 UID: 0 PID: 20524 Comm: syz.2.4197 Not tainted syzkaller #0 PREEMPT(full) 
[  351.145025][T20524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  351.145031][T20524] Call Trace:
[  351.145035][T20524]  <TASK>
[  351.145039][T20524]  dump_stack_lvl+0x189/0x250
[  351.145056][T20524]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.145066][T20524]  ? __pfx__printk+0x10/0x10
[  351.145077][T20524]  ? kernfs_root+0x1c/0x230
[  351.145095][T20524]  ? kernfs_path_from_node+0x2f/0x290
[  351.145104][T20524]  ? kernfs_path_from_node+0x250/0x290
[  351.145113][T20524]  ? kernfs_path_from_node+0x2f/0x290
[  351.145123][T20524]  sysfs_warn_dup+0x8e/0xa0
[  351.145131][T20524]  sysfs_do_create_link_sd+0xc0/0x110
[  351.145140][T20524]  device_add_class_symlinks+0x1cf/0x240
[  351.145150][T20524]  device_add+0x475/0xb50
[  351.145158][T20524]  wiphy_register+0x1ba6/0x28d0
[  351.145174][T20524]  ? __pfx_wiphy_register+0x10/0x10
[  351.145185][T20524]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  351.145194][T20524]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  351.145202][T20524]  ieee80211_register_hw+0x3425/0x4080
[  351.145213][T20524]  ? ieee80211_register_hw+0x14d1/0x4080
[  351.145225][T20524]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  351.145235][T20524]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  351.145249][T20524]  ? __hrtimer_setup+0x187/0x210
[  351.145256][T20524]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  351.145268][T20524]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  351.145282][T20524]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  351.145290][T20524]  ? trace_kmalloc+0x1f/0xd0
[  351.145300][T20524]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  351.145309][T20524]  ? kstrndup+0xbf/0x160
[  351.145318][T20524]  hwsim_new_radio_nl+0xea4/0x1b10
[  351.145327][T20524]  ? __pfx___nla_validate_parse+0x10/0x10
[  351.145340][T20524]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  351.145352][T20524]  ? __nla_parse+0x40/0x60
[  351.145363][T20524]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  351.145374][T20524]  genl_family_rcv_msg_doit+0x215/0x300
[  351.145383][T20524]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  351.145394][T20524]  ? bpf_lsm_capable+0x9/0x20
[  351.145403][T20524]  ? security_capable+0x7e/0x2e0
[  351.145415][T20524]  genl_rcv_msg+0x60e/0x790
[  351.145423][T20524]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.145431][T20524]  ? __kasan_slab_alloc+0x6c/0x80
[  351.145440][T20524]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  351.145449][T20524]  ? __netlink_lookup+0xbd/0x810
[  351.145455][T20524]  ? rcu_is_watching+0x15/0xb0
[  351.145464][T20524]  netlink_rcv_skb+0x208/0x470
[  351.145475][T20524]  ? __pfx_genl_rcv_msg+0x10/0x10
[  351.145482][T20524]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  351.145494][T20524]  ? lock_release+0x4b/0x3e0
[  351.145532][T20524]  ? down_read+0x1ad/0x2e0
[  351.145540][T20524]  genl_rcv+0x28/0x40
[  351.145548][T20524]  netlink_unicast+0x82f/0x9e0
[  351.145560][T20524]  ? __pfx_netlink_unicast+0x10/0x10
[  351.145570][T20524]  ? netlink_sendmsg+0x642/0xb30
[  351.145582][T20524]  ? skb_put+0x11b/0x210
[  351.145591][T20524]  netlink_sendmsg+0x805/0xb30
[  351.145605][T20524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.145616][T20524]  ? futex_unqueue+0x22/0x240
[  351.145625][T20524]  ? aa_sock_msg_perm+0xf1/0x1d0
[  351.145633][T20524]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.145640][T20524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.145650][T20524]  __sock_sendmsg+0x21c/0x270
[  351.145660][T20524]  ____sys_sendmsg+0x505/0x830
[  351.145668][T20524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.145677][T20524]  ? import_iovec+0x74/0xa0
[  351.145685][T20524]  ___sys_sendmsg+0x21f/0x2a0
[  351.145693][T20524]  ? __pfx____sys_sendmsg+0x10/0x10
[  351.145701][T20524]  ? futex_wait+0x285/0x360
[  351.145714][T20524]  ? __fget_files+0x2a/0x420
[  351.145721][T20524]  ? __fget_files+0x3a0/0x420
[  351.145728][T20524]  __x64_sys_sendmsg+0x19b/0x260
[  351.145736][T20524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  351.145744][T20524]  ? rcu_is_watching+0x15/0xb0
[  351.145751][T20524]  ? rcu_is_watching+0x15/0xb0
[  351.145758][T20524]  do_syscall_64+0xfa/0x3b0
[  351.145765][T20524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.145773][T20524]  ? exc_page_fault+0x9f/0xf0
[  351.145783][T20524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.145789][T20524] RIP: 0033:0x7f83f4d8ebe9
[  351.145797][T20524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.145805][T20524] RSP: 002b:00007f83f5bcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.145815][T20524] RAX: ffffffffffffffda RBX: 00007f83f4fb5fa0 RCX: 00007f83f4d8ebe9
[  351.145821][T20524] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  351.145826][T20524] RBP: 00007f83f4e11e19 R08: 0000000000000000 R09: 0000000000000000
[  351.145832][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.145837][T20524] R13: 00007f83f4fb6038 R14: 00007f83f4fb5fa0 R15: 00007ffe542b6d68
[  351.145847][T20524]  </TASK>
[  351.446742][T20544] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  351.453679][T20544] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  351.590987][T20558] tipc: New replicast peer: 255.255.255.255
[  351.593242][T20558] tipc: Enabled bearer <udp:syz2>, priority 26
[  351.750867][T20563] lo speed is unknown, defaulting to 1000
[  351.753859][T20563] lo speed is unknown, defaulting to 1000
[  351.811845][T20563] lo speed is unknown, defaulting to 1000
[  351.909895][T20575] __nla_validate_parse: 23 callbacks suppressed
[  351.909905][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4214'.
[  351.923973][T20575] veth5: left promiscuous mode
[  352.017278][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4222'.
[  352.051466][T20597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4221'.
[  352.166294][T20616] vxcan2: entered promiscuous mode
[  352.280330][T20631] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4231'.
[  352.340165][T20633] netlink: 'syz.1.4232': attribute type 1 has an invalid length.
[  352.387140][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'.
[  352.394210][T20635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4233'.
[  352.598723][  T792] tipc: Node number set to 4269801488
[  352.711236][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4240'.
[  353.001554][T20679] netlink: 'syz.1.4247': attribute type 10 has an invalid length.
[  353.799507][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4253'.
[  354.384021][T20736] netlink: 'syz.2.4260': attribute type 1 has an invalid length.
[  354.387146][T20736] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4260'.
[  354.387561][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4259'.
[  354.424039][T20742] netlink: 'syz.2.4261': attribute type 1 has an invalid length.
[  354.447909][T20741] sctp: [Deprecated]: syz.1.4262 (pid 20741) Use of struct sctp_assoc_value in delayed_ack socket option.
[  354.447909][T20741] Use struct sctp_sack_info instead
[  354.458159][T20741] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  354.462597][T20741] CPU: 0 UID: 0 PID: 20741 Comm: syz.1.4262 Not tainted syzkaller #0 PREEMPT(full) 
[  354.462611][T20741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  354.462617][T20741] Call Trace:
[  354.462621][T20741]  <TASK>
[  354.462625][T20741]  dump_stack_lvl+0x189/0x250
[  354.462642][T20741]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.462652][T20741]  ? __pfx__printk+0x10/0x10
[  354.462663][T20741]  ? kernfs_root+0x1c/0x230
[  354.462676][T20741]  ? kernfs_path_from_node+0x2f/0x290
[  354.462684][T20741]  ? kernfs_path_from_node+0x250/0x290
[  354.462693][T20741]  ? kernfs_path_from_node+0x2f/0x290
[  354.462702][T20741]  sysfs_warn_dup+0x8e/0xa0
[  354.462710][T20741]  sysfs_do_create_link_sd+0xc0/0x110
[  354.462719][T20741]  device_add_class_symlinks+0x1cf/0x240
[  354.462728][T20741]  device_add+0x475/0xb50
[  354.462735][T20741]  wiphy_register+0x1ba6/0x28d0
[  354.462752][T20741]  ? __pfx_wiphy_register+0x10/0x10
[  354.462762][T20741]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  354.462773][T20741]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  354.462782][T20741]  ieee80211_register_hw+0x3425/0x4080
[  354.462792][T20741]  ? ieee80211_register_hw+0x14d1/0x4080
[  354.462804][T20741]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  354.462817][T20741]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.462836][T20741]  ? __hrtimer_setup+0x187/0x210
[  354.462847][T20741]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  354.462868][T20741]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  354.462891][T20741]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  354.462908][T20741]  ? trace_kmalloc+0x1f/0xd0
[  354.462924][T20741]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  354.462939][T20741]  ? kstrndup+0xbf/0x160
[  354.462950][T20741]  hwsim_new_radio_nl+0xea4/0x1b10
[  354.462959][T20741]  ? __pfx___nla_validate_parse+0x10/0x10
[  354.462972][T20741]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.462983][T20741]  ? __nla_parse+0x40/0x60
[  354.462993][T20741]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  354.463004][T20741]  genl_family_rcv_msg_doit+0x215/0x300
[  354.463013][T20741]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  354.463023][T20741]  ? bpf_lsm_capable+0x9/0x20
[  354.463034][T20741]  ? security_capable+0x7e/0x2e0
[  354.463046][T20741]  genl_rcv_msg+0x60e/0x790
[  354.463054][T20741]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.463061][T20741]  ? __kasan_slab_alloc+0x6c/0x80
[  354.463077][T20741]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  354.463087][T20741]  ? __netlink_lookup+0xbd/0x810
[  354.463095][T20741]  ? rcu_is_watching+0x15/0xb0
[  354.463104][T20741]  netlink_rcv_skb+0x208/0x470
[  354.463117][T20741]  ? __pfx_genl_rcv_msg+0x10/0x10
[  354.463127][T20741]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.463140][T20741]  ? lock_release+0x4b/0x3e0
[  354.463154][T20741]  ? down_read+0x1ad/0x2e0
[  354.463163][T20741]  genl_rcv+0x28/0x40
[  354.463171][T20741]  netlink_unicast+0x82f/0x9e0
[  354.463183][T20741]  ? __pfx_netlink_unicast+0x10/0x10
[  354.463194][T20741]  ? netlink_sendmsg+0x642/0xb30
[  354.463206][T20741]  ? skb_put+0x11b/0x210
[  354.463213][T20741]  netlink_sendmsg+0x805/0xb30
[  354.463225][T20741]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.463236][T20741]  ? aa_sock_msg_perm+0xf1/0x1d0
[  354.463243][T20741]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.463251][T20741]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.463261][T20741]  __sock_sendmsg+0x21c/0x270
[  354.463271][T20741]  ____sys_sendmsg+0x505/0x830
[  354.463279][T20741]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.463288][T20741]  ? import_iovec+0x74/0xa0
[  354.463297][T20741]  ___sys_sendmsg+0x21f/0x2a0
[  354.463304][T20741]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.463312][T20741]  ? futex_wake+0x4b2/0x560
[  354.463325][T20741]  ? __fget_files+0x2a/0x420
[  354.463332][T20741]  ? __fget_files+0x3a0/0x420
[  354.463339][T20741]  __x64_sys_sendmsg+0x19b/0x260
[  354.463347][T20741]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.463355][T20741]  ? rcu_is_watching+0x15/0xb0
[  354.463363][T20741]  ? rcu_is_watching+0x15/0xb0
[  354.463370][T20741]  do_syscall_64+0xfa/0x3b0
[  354.463377][T20741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.463384][T20741]  ? exc_page_fault+0x9f/0xf0
[  354.463394][T20741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.463401][T20741] RIP: 0033:0x7fec2358ebe9
[  354.463409][T20741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.463417][T20741] RSP: 002b:00007fec217f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.463428][T20741] RAX: ffffffffffffffda RBX: 00007fec237b5fa0 RCX: 00007fec2358ebe9
[  354.463435][T20741] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  354.463441][T20741] RBP: 00007fec23611e19 R08: 0000000000000000 R09: 0000000000000000
[  354.463446][T20741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  354.463451][T20741] R13: 00007fec237b6038 R14: 00007fec237b5fa0 R15: 00007ffd4417f088
[  354.463459][T20741]  </TASK>
[  354.792866][T20770] netlink: 'syz.2.4268': attribute type 1 has an invalid length.
[  355.576107][T20789] netlink: 'syz.1.4275': attribute type 1 has an invalid length.
[  355.691711][T20796] IPVS: Error connecting to the multicast addr
[  355.805108][T20814] netlink: 'syz.1.4284': attribute type 12 has an invalid length.
[  355.809931][T20814] netlink: 'syz.1.4284': attribute type 12 has an invalid length.
[  356.102338][T20826] lo speed is unknown, defaulting to 1000
[  356.104977][T20826] lo speed is unknown, defaulting to 1000
[  356.142716][T20826] lo speed is unknown, defaulting to 1000
[  356.147843][T20827] netlink: 'syz.0.4286': attribute type 5 has an invalid length.
[  356.159212][T20827] ieee802154 phy1 wpan1: encryption failed: -22
[  356.917480][T20875] netlink: 'syz.2.4301': attribute type 1 has an invalid length.
[  357.574997][T20881] __nla_validate_parse: 17 callbacks suppressed
[  357.575009][T20881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4304'.
[  357.697549][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4305'.
[  357.704365][T20889] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4305'.
[  357.709555][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'.
[  357.717709][T20896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4303'.
[  357.746509][T20901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4308'.
[  357.749847][T20901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4308'.
[  357.756046][T20901] bond0: entered promiscuous mode
[  357.759886][T20901] bond0: left promiscuous mode
[  357.902549][T20920] IPv6: Can't replace route, no match found
[  357.905006][T20921] IPv6: Can't replace route, no match found
[  357.970368][ T5904] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.973391][ T5904] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.976465][ T5904] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.980976][ T5904] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.442282][T20927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4317'.
[  358.445536][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'.
[  358.541345][T20938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4319'.
[  358.825128][T20944] netlink: 'syz.2.4322': attribute type 1 has an invalid length.
[  359.371521][T20974] bond6: (slave veth5): Releasing active interface
[  359.497828][T20981] lo speed is unknown, defaulting to 1000
[  359.500755][T20981] lo speed is unknown, defaulting to 1000
[  359.535879][T20981] lo speed is unknown, defaulting to 1000
[  359.785225][T20993] netlink: 'syz.1.4337': attribute type 1 has an invalid length.
[  360.224039][T20998] pim6reg1: entered promiscuous mode
[  360.225898][T20998] pim6reg1: entered allmulticast mode
[  360.477169][T21009] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  361.145566][T21013] lo speed is unknown, defaulting to 1000
[  361.148898][T21013] lo speed is unknown, defaulting to 1000
[  361.210315][T21013] lo speed is unknown, defaulting to 1000
[  361.656131][T21065] lo speed is unknown, defaulting to 1000
[  361.658899][T21065] lo speed is unknown, defaulting to 1000
[  361.703630][T21065] lo speed is unknown, defaulting to 1000
[  362.080767][T21097] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  362.604083][T21165] __nla_validate_parse: 47 callbacks suppressed
[  362.604095][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'.
[  362.610958][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'.
[  362.645005][T21168] lo speed is unknown, defaulting to 1000
[  362.647289][T21168] lo speed is unknown, defaulting to 1000
[  362.690659][T21168] lo speed is unknown, defaulting to 1000
[  363.380903][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'.
[  363.443153][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4395'.
[  363.459852][   T25] block nbd1: Possible stuck request ffff888020b48000: control (read@0,1024B). Runtime 240 seconds
[  363.464560][   T25] block nbd1: Possible stuck request ffff888020b48200: control (read@1024,1024B). Runtime 240 seconds
[  363.473039][   T25] block nbd1: Possible stuck request ffff888020b48400: control (read@2048,1024B). Runtime 240 seconds
[  363.477779][   T25] block nbd1: Possible stuck request ffff888020b48600: control (read@3072,1024B). Runtime 240 seconds
[  363.500795][T21191] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4396'.
[  363.520576][T21195] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  363.565261][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'.
[  363.591030][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4400'.
[  363.648344][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4399'.
[  363.707289][T21219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4401'.
[  363.772780][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4402'.
[  363.852865][T21227] netlink: 'syz.2.4402': attribute type 27 has an invalid length.
[  363.862478][T21235] netlink: 'syz.1.4404': attribute type 1 has an invalid length.
[  365.557753][T21321] netlink: 'syz.0.4431': attribute type 1 has an invalid length.
[  365.573187][T21321] vlan0: entered allmulticast mode
[  365.575100][T21321] bond8: entered allmulticast mode
[  365.665630][T21332] syzkaller1: entered promiscuous mode
[  365.674898][T21332] syzkaller1: entered allmulticast mode
[  365.834840][T21351] netlink: 'syz.2.4441': attribute type 8 has an invalid length.
[  366.857374][T21400] netlink: 'syz.1.4454': attribute type 1 has an invalid length.
[  366.886501][T21402] netlink: 'syz.1.4455': attribute type 13 has an invalid length.
[  366.890237][T21402] netlink: 'syz.1.4455': attribute type 17 has an invalid length.
[  366.938465][T21402] lo speed is unknown, defaulting to 1000
[  366.942193][T21402] lo speed is unknown, defaulting to 1000
[  366.982276][T21402] lo speed is unknown, defaulting to 1000
[  367.615633][T21421] netlink: 'syz.2.4460': attribute type 1 has an invalid length.
[  367.651581][T21426] netlink: 'syz.2.4461': attribute type 1 has an invalid length.
[  367.654172][T21426] __nla_validate_parse: 30 callbacks suppressed
[  367.654182][T21426] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4461'.
[  367.943791][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'.
[  368.139759][T21453] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  368.163395][T21455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4469'.
[  368.216700][T21457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4470'.
[  368.247254][T21461] netlink: 'syz.1.4471': attribute type 5 has an invalid length.
[  368.250515][T21461] netlink: 'syz.1.4471': attribute type 7 has an invalid length.
[  368.372956][T21469] bridge14: the hash_elasticity option has been deprecated and is always 16
[  368.377335][T21469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4474'.
[  368.381816][T21469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4474'.
[  368.385425][T21469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4474'.
[  368.391111][T21469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4474'.
[  368.411237][T21475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4476'.
[  368.486651][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4479'.
[  368.519941][T21493] netlink: 'syz.1.4480': attribute type 1 has an invalid length.
[  369.439908][T21509] lo speed is unknown, defaulting to 1000
[  369.442251][T21509] lo speed is unknown, defaulting to 1000
[  369.480405][T21509] lo speed is unknown, defaulting to 1000
[  370.631201][T21542] validate_nla: 1 callbacks suppressed
[  370.631214][T21542] netlink: 'syz.2.4495': attribute type 2 has an invalid length.
[  370.771043][T21546] netlink: 'syz.2.4497': attribute type 1 has an invalid length.
[  370.786361][T21546] vlan0: entered allmulticast mode
[  370.788895][T21546] bond7: entered allmulticast mode
[  370.843646][T21553] nbd: must specify at least one socket
[  371.685516][T21575] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  371.735535][T21583] netlink: 'syz.2.4507': attribute type 1 has an invalid length.
[  372.153794][T21625] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  372.157357][T21625] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  372.243163][T21630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.245697][T21630] syzkaller0: entered promiscuous mode
[  372.247583][T21630] syzkaller0: entered allmulticast mode
[  372.252304][T21630] tipc: Resetting bearer <eth:syzkaller0>
[  372.255726][T21629] tipc: Resetting bearer <eth:syzkaller0>
[  372.262631][T21629] tipc: Disabling bearer <eth:syzkaller0>
[  372.465779][T21664] netlink: 'syz.2.4530': attribute type 11 has an invalid length.
[  372.639927][T21687] tun0: tun_chr_ioctl cmd 1074025672
[  372.642239][T21687] tun0: ignored: set checksum disabled
[  372.674796][T21691] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  372.748230][T21698] __nla_validate_parse: 15 callbacks suppressed
[  372.748243][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'.
[  372.781604][T21713] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4543'.
[  372.834466][T21717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4544'.
[  372.842939][T21718] netlink: 'syz.2.4543': attribute type 1 has an invalid length.
[  373.620492][T21723] team0: Port device gtp2 added
[  373.632550][T21723] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  373.632988][T21725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4546'.
[  373.693802][T21729] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4547'.
[  374.479765][T21750] netlink: 'syz.2.4551': attribute type 4 has an invalid length.
[  374.523424][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4554'.
[  374.629214][T21783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4556'.
[  374.670735][T21786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4560'.
[  375.502196][T21808] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4566'.
[  375.664628][T21816] netlink: 'syz.1.4570': attribute type 1 has an invalid length.
[  375.800159][T21832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4573'.
[  375.929697][T21843] netlink: 'syz.1.4576': attribute type 1 has an invalid length.
[  375.973026][T21845] netlink: 'syz.1.4577': attribute type 1 has an invalid length.
[  376.038440][T21850] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  376.142302][T21860] netlink: 'syz.1.4581': attribute type 1 has an invalid length.
[  376.316398][T21866] netlink: 'syz.1.4584': attribute type 1 has an invalid length.
[  377.240727][T21899] netlink: 'syz.1.4594': attribute type 1 has an invalid length.
[  377.397485][T21920] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  377.460589][T21917] xfrm1: entered promiscuous mode
[  377.462654][T21917] xfrm1: entered allmulticast mode
[  377.466880][T21924] netlink: 'syz.2.4601': attribute type 1 has an invalid length.
[  377.720702][T21960] netlink: 'syz.2.4609': attribute type 1 has an invalid length.
[  377.932580][T21986] netlink: 'syz.2.4616': attribute type 1 has an invalid length.
[  377.935341][T21986] __nla_validate_parse: 5 callbacks suppressed
[  377.935349][T21986] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4616'.
[  377.985120][T21988] netlink: 'syz.2.4617': attribute type 1 has an invalid length.
[  378.126001][T21997] openvswitch: netlink: Message has 4 unknown bytes.
[  378.128397][T21997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.180376][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  378.190485][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4621'.
[  378.196436][T22002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4621'.
[  378.390338][T22008] vxcan2: entered promiscuous mode
[  378.866610][T22032] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4630'.
[  378.912215][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4630'.
[  378.915348][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4630'.
[  379.252863][T22036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'.
[  379.443263][T22043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4633'.
[  379.446510][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4633'.
[  379.450927][T22043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4633'.
[  379.574568][T22053] vlan3: entered allmulticast mode
[  379.576832][T22053] bond10: entered allmulticast mode
[  380.130880][   T33] audit: type=1804 audit(1755862883.325:7): pid=22086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4645" name="/newroot/1485/cgroup.controllers" dev="tmpfs" ino=7612 res=1 errno=0
[  380.138976][   T33] audit: type=1800 audit(1755862883.325:8): pid=22086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4645" name="cgroup.controllers" dev="tmpfs" ino=7612 res=0 errno=0
[  380.271754][T22094] syzkaller0: entered promiscuous mode
[  380.273579][T22094] syzkaller0: entered allmulticast mode
[  380.625367][T22119] vlan3: entered allmulticast mode
[  380.627225][T22119] bond11: entered allmulticast mode
[  381.143100][T22150] validate_nla: 7 callbacks suppressed
[  381.143111][T22150] netlink: 'syz.1.4665': attribute type 1 has an invalid length.
[  381.465978][T22181] bond5: (slave bridge6): Releasing backup interface
[  381.468927][T22181] bond5: (slave bridge6): the permanent HWaddr of slave - 7e:71:d0:00:cd:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  381.477434][T22181] bond5: (slave bridge7): Releasing backup interface
[  381.482983][T22181] team0: Port device gtp2 removed
[  381.655281][T22189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.658090][T22190] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.673016][T22190] syzkaller0: entered promiscuous mode
[  381.674907][T22190] syzkaller0: entered allmulticast mode
[  381.681524][T22189] tipc: Resetting bearer <eth:syzkaller0>
[  381.683655][T22189] syzkaller0: tun_net_xmit 134
[  381.710687][T22193] netlink: 'syz.2.4675': attribute type 4 has an invalid length.
[  381.735593][T22188] tipc: Resetting bearer <eth:syzkaller0>
[  381.747199][T22188] tipc: Disabling bearer <eth:syzkaller0>
[  382.114453][T22232] lo speed is unknown, defaulting to 1000
[  382.117622][T22232] lo speed is unknown, defaulting to 1000
[  382.173106][T22232] lo speed is unknown, defaulting to 1000
[  382.180643][T22241] netlink: 'syz.1.4691': attribute type 1 has an invalid length.
[  382.191022][T22241] vlan3: entered allmulticast mode
[  382.192814][T22241] bond12: entered allmulticast mode
[  382.352248][T22252] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  383.121498][T22302] __nla_validate_parse: 17 callbacks suppressed
[  383.121510][T22302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4709'.
[  383.161106][T22296] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4708'.
[  383.242413][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4712'.
[  383.294468][T22322] netlink: 'syz.2.4713': attribute type 1 has an invalid length.
[  383.318310][T22322] vlan0: entered allmulticast mode
[  383.320880][T22322] bond8: entered allmulticast mode
[  383.335639][T22314] xfrm1: left promiscuous mode
[  383.337350][T22314] xfrm1: left allmulticast mode
[  383.361119][T22329] syzkaller0: entered promiscuous mode
[  383.363005][T22329] syzkaller0: entered allmulticast mode
[  383.681226][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4717'.
[  383.713532][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4719'.
[  384.330667][T22350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4720'.
[  384.347834][T22352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4721'.
[  384.422740][T22361] netlink: 'syz.0.4725': attribute type 13 has an invalid length.
[  384.425493][T22361] netlink: 'syz.0.4725': attribute type 17 has an invalid length.
[  384.440791][T22361] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.443817][T22361] 8021q: adding VLAN 0 to HW filter on device team0
[  384.448231][T22361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  384.453976][ T5877] lo speed is unknown, defaulting to 1000
[  384.456007][ T5877] syz0: Port: 1 Link ACTIVE
[  384.457622][ T5877] lo speed is unknown, defaulting to 1000
[  384.502159][T22367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4728'.
[  384.870384][T22401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4738'.
[  385.090031][T22413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4742'.
[  385.172759][T22416] netlink: zone id is out of range
[  385.174898][T22416] netlink: zone id is out of range
[  385.177090][T22416] netlink: zone id is out of range
[  385.179398][T22416] netlink: zone id is out of range
[  385.181497][T22416] netlink: zone id is out of range
[  385.183563][T22416] netlink: zone id is out of range
[  385.185653][T22416] netlink: zone id is out of range
[  385.187871][T22416] netlink: zone id is out of range
[  385.478459][T22430] netlink: 'syz.0.4748': attribute type 1 has an invalid length.
[  385.497139][T22430] vlan0: entered allmulticast mode
[  385.499961][T22430] bond9: entered allmulticast mode
[  385.761979][T22459] netlink: 'syz.0.4757': attribute type 1 has an invalid length.
[  386.103936][T22463] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  386.538796][T22501] netlink: 'syz.2.4769': attribute type 5 has an invalid length.
[  386.686477][T22512] delete_channel: no stack
[  386.843664][T22530] netlink: 'syz.2.4780': attribute type 1 has an invalid length.
[  386.857933][   T24] lo speed is unknown, defaulting to 1000
[  386.867159][   T24] syz0: Port: 1 Link DOWN
[  386.869042][   T24] lo speed is unknown, defaulting to 1000
[  388.023872][T22581] lo speed is unknown, defaulting to 1000
[  388.026210][T22581] lo speed is unknown, defaulting to 1000
[  388.063344][T22581] lo speed is unknown, defaulting to 1000
[  388.216853][T22588] __nla_validate_parse: 17 callbacks suppressed
[  388.216865][T22588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4797'.
[  388.232279][T22588] netlink: 'syz.2.4797': attribute type 12 has an invalid length.
[  388.414991][T22604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'.
[  388.511428][T22613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4805'.
[  388.516953][T22617] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4806'.
[  388.597378][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4808'.
[  388.732601][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4815'.
[  388.736371][T22648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4815'.
[  389.442994][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'.
[  389.552444][T22669] lo speed is unknown, defaulting to 1000
[  389.554802][T22669] lo speed is unknown, defaulting to 1000
[  389.592867][T22669] lo speed is unknown, defaulting to 1000
[  389.607926][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4822'.
Connection to localhost closed by remote host.
[  389.769711][T22689] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4825'.
[  389.968618][T10922] ==================================================================
[  389.971969][T10922] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  389.975105][T10922] Read of size 8 at addr ffff8880280a00a0 by task khidpd_0b5705df/10922
[  389.979537][T10922] 
[  389.980618][T10922] CPU: 0 UID: 0 PID: 10922 Comm: khidpd_0b5705df Not tainted syzkaller #0 PREEMPT(full) 
[  389.980634][T10922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  389.980642][T10922] Call Trace:
[  389.980649][T10922]  <TASK>
[  389.980654][T10922]  dump_stack_lvl+0x189/0x250
[  389.980677][T10922]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.980690][T10922]  ? lock_release+0x4b/0x3e0
[  389.980710][T10922]  ? __virt_addr_valid+0x4a5/0x5c0
[  389.980726][T10922]  print_report+0xca/0x240
[  389.980739][T10922]  ? __mutex_lock+0x801/0x1350
[  389.980755][T10922]  kasan_report+0x118/0x150
[  389.980773][T10922]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  389.980788][T10922]  ? __mutex_lock+0x801/0x1350
[  389.980807][T10922]  __mutex_lock+0x801/0x1350
[  389.980825][T10922]  ? __mutex_lock+0x5bb/0x1350
[  389.980842][T10922]  ? l2cap_unregister_user+0x6a/0x1b0
[  389.980860][T10922]  ? __pfx___mutex_lock+0x10/0x10
[  389.980877][T10922]  ? __pfx___timer_delete_sync+0x10/0x10
[  389.980893][T10922]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  389.980908][T10922]  l2cap_unregister_user+0x6a/0x1b0
[  389.980924][T10922]  hidp_session_thread+0x3c9/0x410
[  389.980940][T10922]  ? __pfx_hidp_session_thread+0x10/0x10
[  389.980955][T10922]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  389.980970][T10922]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  389.980986][T10922]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  389.980999][T10922]  ? __kthread_parkme+0x7b/0x200
[  389.981013][T10922]  ? __kthread_parkme+0x1a1/0x200
[  389.981025][T10922]  kthread+0x711/0x8a0
[  389.981041][T10922]  ? __pfx_hidp_session_thread+0x10/0x10
[  389.981053][T10922]  ? __pfx_kthread+0x10/0x10
[  389.981092][T10922]  ? rcu_is_watching+0x15/0xb0
[  389.981106][T10922]  ? __pfx_kthread+0x10/0x10
[  389.981119][T10922]  ret_from_fork+0x3fc/0x770
[  389.981132][T10922]  ? __pfx_ret_from_fork+0x10/0x10
[  389.981145][T10922]  ? __switch_to_asm+0x39/0x70
[  389.981160][T10922]  ? __switch_to_asm+0x33/0x70
[  389.981173][T10922]  ? __pfx_kthread+0x10/0x10
[  389.981186][T10922]  ret_from_fork_asm+0x1a/0x30
[  389.981205][T10922]  </TASK>
[  389.981209][T10922] 
[  390.065272][T10922] Allocated by task 5849:
[  390.067091][T10922]  kasan_save_track+0x3e/0x80
[  390.069022][T10922]  __kasan_kmalloc+0x93/0xb0
[  390.070857][T10922]  __kmalloc_noprof+0x27a/0x4f0
[  390.072456][T10922]  hci_alloc_dev_priv+0x28/0x2060
[  390.074113][T10922]  vhci_create_device+0x120/0x6e0
[  390.076017][T10922]  vhci_write+0x3ce/0x4a0
[  390.077588][T10922]  vfs_write+0x5c9/0xb30
[  390.079133][T10922]  ksys_write+0x145/0x250
[  390.080584][T10922]  do_syscall_64+0xfa/0x3b0
[  390.082089][T10922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.084194][T10922] 
[  390.085011][T10922] Freed by task 5849:
[  390.086420][T10922]  kasan_save_track+0x3e/0x80
[  390.088002][T10922]  kasan_save_free_info+0x46/0x50
[  390.089914][T10922]  __kasan_slab_free+0x5b/0x80
[  390.091816][T10922]  kfree+0x18e/0x440
[  390.093325][T10922]  bt_host_release+0x82/0x90
[  390.094856][T10922]  device_release+0x9c/0x1c0
[  390.096389][T10922]  kobject_put+0x22b/0x480
[  390.098311][T10922]  vhci_release+0x88/0xd0
[  390.100176][T10922]  __fput+0x44c/0xa70
[  390.101899][T10922]  task_work_run+0x1d4/0x260
[  390.103847][T10922]  do_exit+0x6b5/0x2300
[  390.105310][T10922]  do_group_exit+0x21c/0x2d0
[  390.106986][T10922]  __x64_sys_exit_group+0x3f/0x40
[  390.109023][T10922]  x64_sys_call+0x21f7/0x2200
[  390.110962][T10922]  do_syscall_64+0xfa/0x3b0
[  390.112849][T10922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.115214][T10922] 
[  390.116262][T10922] Last potentially related work creation:
[  390.118692][T10922]  kasan_save_stack+0x3e/0x60
[  390.120690][T10922]  kasan_record_aux_stack+0xbd/0xd0
[  390.122544][T10922]  insert_work+0x3d/0x330
[  390.124007][T10922]  __queue_work+0xbaf/0xfb0
[  390.125572][T10922]  queue_work_on+0x181/0x270
[  390.127212][T10922]  hci_cmd_sync_submit+0x285/0x2b0
[  390.128912][T10922]  process_scheduled_works+0xae1/0x17b0
[  390.130835][T10922]  worker_thread+0x8a0/0xda0
[  390.132446][T10922]  kthread+0x711/0x8a0
[  390.133891][T10922]  ret_from_fork+0x3fc/0x770
[  390.135541][T10922]  ret_from_fork_asm+0x1a/0x30
[  390.137257][T10922] 
[  390.138130][T10922] Second to last potentially related work creation:
[  390.140357][T10922]  kasan_save_stack+0x3e/0x60
[  390.142049][T10922]  kasan_record_aux_stack+0xbd/0xd0
[  390.143865][T10922]  insert_work+0x3d/0x330
[  390.145372][T10922]  __queue_work+0xbaf/0xfb0
[  390.146944][T10922]  queue_work_on+0x181/0x270
[  390.148558][T10922]  hci_abort_conn+0x1e4/0x330
[  390.150301][T10922]  process_scheduled_works+0xae1/0x17b0
[  390.152309][T10922]  worker_thread+0x8a0/0xda0
[  390.153993][T10922]  kthread+0x711/0x8a0
[  390.155377][T10922]  ret_from_fork+0x3fc/0x770
[  390.156984][T10922]  ret_from_fork_asm+0x1a/0x30
[  390.158624][T10922] 
[  390.159490][T10922] The buggy address belongs to the object at ffff8880280a0000
[  390.159490][T10922]  which belongs to the cache kmalloc-8k of size 8192
[  390.164317][T10922] The buggy address is located 160 bytes inside of
[  390.164317][T10922]  freed 8192-byte region [ffff8880280a0000, ffff8880280a2000)
[  390.169036][T10922] 
[  390.169894][T10922] The buggy address belongs to the physical page:
[  390.172159][T10922] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x280a0
[  390.175221][T10922] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  390.178127][T10922] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  390.180708][T10922] page_type: f5(slab)
[  390.182088][T10922] raw: 00fff00000000040 ffff88801a442280 ffffea0000ecf400 dead000000000003
[  390.184906][T10922] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  390.188052][T10922] head: 00fff00000000040 ffff88801a442280 ffffea0000ecf400 dead000000000003
[  390.191098][T10922] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  390.194009][T10922] head: 00fff00000000003 ffffea0000a02801 00000000ffffffff 00000000ffffffff
[  390.197057][T10922] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  390.199990][T10922] page dumped because: kasan: bad access detected
[  390.202281][T10922] page_owner tracks the page as allocated
[  390.204384][T10922] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5586, tgid 5586 (start-stop-daem), ts 24404413289, free_ts 24395322597
[  390.211244][T10922]  post_alloc_hook+0x240/0x2a0
[  390.212852][T10922]  get_page_from_freelist+0x21e4/0x22c0
[  390.215122][T10922]  __alloc_frozen_pages_noprof+0x181/0x370
[  390.217561][T10922]  alloc_pages_mpol+0x232/0x4a0
[  390.219369][T10922]  allocate_slab+0x8a/0x370
[  390.221016][T10922]  ___slab_alloc+0xbeb/0x1410
[  390.222799][T10922]  __kmalloc_cache_noprof+0x296/0x3d0
[  390.224638][T10922]  tomoyo_init_log+0x111f/0x1f70
[  390.226378][T10922]  tomoyo_supervisor+0x340/0x1480
[  390.228038][T10922]  tomoyo_env_perm+0x149/0x1e0
[  390.229704][T10922]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  390.231926][T10922]  tomoyo_bprm_check_security+0x11c/0x180
[  390.234281][T10922]  security_bprm_check+0x89/0x270
[  390.236372][T10922]  bprm_execve+0x8ee/0x1450
[  390.238010][T10922]  do_execveat_common+0x510/0x6a0
[  390.239719][T10922]  __x64_sys_execve+0x94/0xb0
[  390.241342][T10922] page last free pid 5586 tgid 5586 stack trace:
[  390.243437][T10922]  __free_frozen_pages+0xbc4/0xd30
[  390.245178][T10922]  __slab_free+0x303/0x3c0
[  390.246673][T10922]  qlist_free_all+0x97/0x140
[  390.248233][T10922]  kasan_quarantine_reduce+0x148/0x160
[  390.250051][T10922]  __kasan_slab_alloc+0x22/0x80
[  390.251748][T10922]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  390.253547][T10922]  getname_flags+0xb8/0x540
[  390.255278][T10922]  vfs_fstatat+0x43/0x170
[  390.256729][T10922]  __x64_sys_newfstatat+0x116/0x190
[  390.258509][T10922]  do_syscall_64+0xfa/0x3b0
[  390.260116][T10922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.262133][T10922] 
[  390.262908][T10922] Memory state around the buggy address:
[  390.264930][T10922]  ffff88802809ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  390.267851][T10922]  ffff8880280a0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.270713][T10922] >ffff8880280a0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.273592][T10922]                                ^
[  390.275461][T10922]  ffff8880280a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.278489][T10922]  ffff8880280a0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  390.281340][T10922] ==================================================================
[  390.284804][T10922] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  390.287390][T10922] CPU: 0 UID: 0 PID: 10922 Comm: khidpd_0b5705df Not tainted syzkaller #0 PREEMPT(full) 
[  390.291036][T10922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.295247][T10922] Call Trace:
[  390.296671][T10922]  <TASK>
[  390.297896][T10922]  dump_stack_lvl+0x99/0x250
[  390.299682][T10922]  ? __asan_memcpy+0x40/0x70
[  390.301264][T10922]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.302990][T10922]  ? __pfx__printk+0x10/0x10
[  390.304683][T10922]  vpanic+0x281/0x750
[  390.306020][T10922]  ? __pfx_vpanic+0x10/0x10
[  390.307683][T10922]  ? rcu_is_watching+0x15/0xb0
[  390.309469][T10922]  panic+0xb9/0xc0
[  390.310966][T10922]  ? __pfx_panic+0x10/0x10
[  390.312609][T10922]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  390.314915][T10922]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  390.317187][T10922]  ? __mutex_lock+0x801/0x1350
[  390.318960][T10922]  check_panic_on_warn+0x89/0xb0
[  390.320925][T10922]  ? __mutex_lock+0x801/0x1350
[  390.322813][T10922]  end_report+0x78/0x160
[  390.324604][T10922]  kasan_report+0x129/0x150
[  390.326574][T10922]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  390.329105][T10922]  ? __mutex_lock+0x801/0x1350
[  390.331179][T10922]  __mutex_lock+0x801/0x1350
[  390.333153][T10922]  ? __mutex_lock+0x5bb/0x1350
[  390.335244][T10922]  ? l2cap_unregister_user+0x6a/0x1b0
[  390.337269][T10922]  ? __pfx___mutex_lock+0x10/0x10
[  390.339090][T10922]  ? __pfx___timer_delete_sync+0x10/0x10
[  390.341283][T10922]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  390.343518][T10922]  l2cap_unregister_user+0x6a/0x1b0
[  390.345527][T10922]  hidp_session_thread+0x3c9/0x410
[  390.347295][T10922]  ? __pfx_hidp_session_thread+0x10/0x10
[  390.349399][T10922]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  390.351676][T10922]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  390.354001][T10922]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  390.356374][T10922]  ? __kthread_parkme+0x7b/0x200
[  390.358319][T10922]  ? __kthread_parkme+0x1a1/0x200
[  390.360288][T10922]  kthread+0x711/0x8a0
[  390.361848][T10922]  ? __pfx_hidp_session_thread+0x10/0x10
[  390.363999][T10922]  ? __pfx_kthread+0x10/0x10
[  390.365725][T10922]  ? rcu_is_watching+0x15/0xb0
[  390.367546][T10922]  ? __pfx_kthread+0x10/0x10
[  390.369339][T10922]  ret_from_fork+0x3fc/0x770
[  390.371345][T10922]  ? __pfx_ret_from_fork+0x10/0x10
[  390.373550][T10922]  ? __switch_to_asm+0x39/0x70
[  390.375598][T10922]  ? __switch_to_asm+0x33/0x70
[  390.377627][T10922]  ? __pfx_kthread+0x10/0x10
[  390.379567][T10922]  ret_from_fork_asm+0x1a/0x30
[  390.381526][T10922]  </TASK>
[  390.383613][T10922] Kernel Offset: disabled
[  390.385484][T10922] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:41:33  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33be060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df0670 RSP=ffffc90004ddf310
R8 =ffff888107c40237 R9 =1ffff11020f88046 R10=dffffc0000000000 R11=ffffffff854f1f70
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f1fe7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f83f5ae7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fec23787498 00007fec23787470 XMM03=00007fec237874a8 00007fec237874a0
XMM04=00007fec242ed100 00007fec23787460 XMM05=00007fec23787478 00007fec237874c0
XMM06=00007fec237874b8 00007fec237874b0 XMM07=00007fec237874a8 00007fec237874a0
XMM08=03e4af403f01ab88 89616f4e8304abf4 XMM09=0000000000000000 00007fec23612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff8881104f0100 RCX=a8598886c8356d00 RDX=0000000000000000
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=dffffc0000000000 RSP=ffffc900001e0b58
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=0000000000000001 R13=ffff8881104f0000 R14=ffff88811b9f9d40 R15=1ffff1102209e020
RIP=ffffffff81934688 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fec217f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68f40e7d60 CR3=0000000027fd4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff0000000000ff ffff00ff00000000 XMM05=000000000000020d 00002d785c2f7300
XMM06=ffffffffffff0000 ff000000000000ff XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffff0000000000ff XMM09=0000000000000251 00302d78742f7300
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
