last executing test programs:

1.934653029s ago: executing program 2 (id=2274):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0x0, 0x1}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x12, &(0x7f00000007c0), 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})

1.070562304s ago: executing program 2 (id=2286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000030005000000001400070000ffe0000000000000000000000000010800040001"], 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32=0x0, @ANYBLOB="0c000d8008000300b1"], 0x24}], 0x1}, 0x24040080)

1.070244166s ago: executing program 2 (id=2287):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
unshare(0x6a040000)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x4c, 0x20, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x800}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async)
unshare(0x6a040000) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x4c, 0x20, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x8}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x800}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)

983.755859ms ago: executing program 2 (id=2289):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f00000001c0)={0x800, 0xbbbe, 0x7c, 0xc6, 0x5, 0xb, 0x4, "238037bf079bc6dfc1f79cf4dcc0ee961e85b4e8", "c504a082ac158a45fe30511656c2b734fa27bc5b"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', r1, 0x1, 0x8000, 0x3, 0x9, {{0x7, 0x4, 0x1, 0x31, 0x1c, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @remote, {[@end, @generic={0x88, 0x3, '/'}, @ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

879.844355ms ago: executing program 2 (id=2290):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000900000008000500", @ANYRES32, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x5}, 0x8)

877.344503ms ago: executing program 2 (id=2292):
r0 = socket$isdn(0x22, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x10}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@mcast2, 0x5d, r2})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r3, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

547.454741ms ago: executing program 1 (id=2299):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='signal_generate\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r6}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38, 0x10000)
write$cgroup_int(r7, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r9, &(0x7f0000000980)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r11=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000500)={r11, 0x7}, 0xc)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0x5907}], 0x1c)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f00000003c0)={0x1, 0x8eb6})
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x18, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x19, 0x7c}, [@nested={0x4, 0x143}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2400e000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

487.3679ms ago: executing program 1 (id=2301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x23, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x20001000, 0xb, 0x4}}}}]}, 0x40}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x8000)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="fbe65dc390da7ee179", 0x9}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b18", 0x78}], 0x2}, 0x40080)
ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x4008af03, &(0x7f0000000000)={0x4, 0x0, 0x10})
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
pipe(0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000690003050000000000000000000000070000000008000100"], 0x20}}, 0x0)
connect$netrom(r1, &(0x7f0000001f40)={{0x3, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @null, @bcast]}, 0x48)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r8, 0x29, 0x10, 0x0, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r9, 0x6, 0x0, &(0x7f00000013c0)="0516976fca220111e2bd063ce0b6a4706fdd23637f56b4b579fabcd5da321491adccd8b158ed49", 0x27)
r10 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000000c0)=0x47a0, 0x4)
sendmmsg(r10, &(0x7f00000023c0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015)
recvmmsg(r10, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x2002, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

420.129127ms ago: executing program 1 (id=2304):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000a78d3b00000500593349b496b6f547d9721ccb0b295f6689096c21fc06a6c1676797ddb53e22ce7826419607756e4cb1d1e54e7157a183124c4e57501bca4dc399d66fe86af28bdb19eec2be01b739c3842ba1d19490fa2dbb", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="000100004000020010001a800c000a800500080041000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008884}, 0x8800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000042)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r4, &(0x7f00000000c0)="2fb6453314e118757323821a32", 0xd, 0x0, &(0x7f0000000240)={0xa, 0x0, 0xc9, @private1, 0x2, 0x2}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x4)
close(r6)
r7 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="1800000068006b0041000010000000003ac0dd909a4453eb", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010)
epoll_create1(0x0)

418.940932ms ago: executing program 1 (id=2306):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$isdn(0x22, 0x2, 0x11)
bind$isdn(r1, &(0x7f0000000000)={0x22, 0x1, 0xe, 0x0, 0xb}, 0x6)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2, <r3=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4e}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x4, 0xe, 0x8, 0xf84, 0x7fffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, @ldst={0x2, 0x2, 0x1, 0x4, 0x8, 0x1, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x3a}, @ldst={0x1, 0x1, 0x1, 0x4, 0x1, 0x18, 0xfffffffffffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="79c9d729", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000}, @exit, @alu={0x5, 0x1, 0x3, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44050)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcff"], 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x40000}, {0xfbfffff7}]}})
write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0501c000080054"], 0xfdef)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x47, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r0, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r10, &(0x7f0000000940), 0x10)
listen(r10, 0x0)

358.228363ms ago: executing program 0 (id=2307):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYRESOCT=0x0], 0xc)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000001c0)={@rand_addr=' \x01\x00', 0x4d})
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000180)={0x2c, 0xa, r6}, 0x10)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'wlan0\x00', 0x6587})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240)=<r9=>0x0)
write$cgroup_pid(r5, &(0x7f0000000280)=r9, 0x12)
close(r8)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f00000000c0)={0x44, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}]})
r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000140)={[{0x2b, 'freezer'}, {0x2b, 'pids'}, {0x21, 'io'}, {0x2b, 'rlimit'}]}, 0x1b)
sendmsg$nl_route(r7, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004640)=ANY=[@ANYBLOB="200000006a0001002abd7000000000000200000000000000040001"], 0x20}}, 0x0)

290.733057ms ago: executing program 1 (id=2308):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x50}}, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tm\nr'], 0xa)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x80000, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0xff7f}}, 0x20}}, 0x0)
socket(0x1, 0x803, 0x0) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x200}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}}, 0x0)

288.804424ms ago: executing program 0 (id=2309):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4)
listen(r1, 0x8) (async)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1008, 0x2, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
r5 = socket(0x1, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={0x1, @null, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="22b10100000000000000bab47d01fe7f00cee0d26ee260aae62cc2b8895e62668726041730c8e467218bd16f8196e46f9c", @ANYRESHEX=r4, @ANYRES8=r3, @ANYRESDEC=r1, @ANYRES8, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
setsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000340)=0x9, 0x4)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={<r8=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)=<r9=>0x0)
sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000015c0)=ANY=[@ANYBLOB="540000005800000227bd7000fedbdf250008000300", @ANYRES32=r7, @ANYBLOB="080001000400000008000200", @ANYRES32=r8, @ANYBLOB="08000100030000000800010004000000080001000200000008000200", @ANYBLOB="efa8ad2e5cd505a241f881ffa7b268c5ff353d344fdb0d8439a384b7781a17ea33b85a26", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async)
r10 = syz_open_procfs$namespace(r9, &(0x7f0000000040)='ns/pid_for_children\x00')
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x1000, [0x6, 0x6d19, 0x9, 0x1, 0x7fff, 0xe538], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000600)=""/4096}, &(0x7f0000000180)=0x78)
sendto$isdn(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="0c3f00000a000000fc74d4fe9652ac30a30bbd936a00b8abf820deb45ca28206e257d5e5d0fda1323ca963f6c866ac8047b6893a4f34e46d73b24be08ab0b579b670c4666bf5f4eb9b192b3ecb223013e16db9870c779fe27db731bb727afbecf3cb97bc4c34f2599840e790fddd34e4a521491685acf662ece159e78bfa16be764ff57c5a8fdd07dcb6"], 0x8d, 0x4000, &(0x7f00000003c0)={0x22, 0x9, 0x80, 0x0, 0x9}, 0x6)
ioctl$NS_GET_NSTYPE(r10, 0xb703, 0x0)

288.408327ms ago: executing program 1 (id=2310):
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861220799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socket(0x10, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet(0xa, 0x801, 0x84)
socket$inet(0xa, 0x801, 0x84)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b00000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

210.672015ms ago: executing program 0 (id=2311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000068009753d74093eaf656df2500000000000000000c00020001000000060000000800010001"], 0x2c}}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0578a0d1a7ef0a35df25030000000a000900aaaaaaaaaa1b000008003200070000000500370001000000"], 0x30}}, 0x4)

160.280775ms ago: executing program 0 (id=2312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000030005000000001400070000c0fe000000000000000000000000010800040001"], 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32=0x0, @ANYBLOB="0c000d8008000300b1"], 0x24}], 0x1}, 0x24040080)

159.679337ms ago: executing program 0 (id=2313):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000380)=0x1, 0x2a)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000069000b000200000000000000000000000000000008000194"], 0x20}}, 0x0)

0s ago: executing program 0 (id=2314):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$x25(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000280)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x200}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xb, 0xa}, {0x9, 0xffef}}}, 0x24}}, 0x4000)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x62040200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000669d27610a0000000000000004000400"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0)

kernel console output (not intermixed with test programs):

n1 speed is unknown, defaulting to 1000
[  117.916402][ T7817] netlink: 'syz.1.550': attribute type 16 has an invalid length.
[  117.919712][ T7817] netlink: 'syz.1.550': attribute type 17 has an invalid length.
[  117.928529][ T7817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.383332][ T7827] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  118.554281][ T7839] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  118.695836][ T7847] netlink: 'syz.2.560': attribute type 1 has an invalid length.
[  118.825969][ T7847] 8021q: adding VLAN 0 to HW filter on device bond9
[  118.857447][ T7851] bond9: (slave wlan0): Enslaving as an active interface with a down link
[  119.038943][ T7875] IPVS: stopping backup sync thread 7876 ...
[  119.041486][ T7876] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  119.175675][ T7889] IPVS: stopping backup sync thread 7788 ...
[  119.236132][ T7894] netlink: 'syz.1.568': attribute type 16 has an invalid length.
[  119.238852][ T7894] netlink: 'syz.1.568': attribute type 17 has an invalid length.
[  119.282587][ T7894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.300536][ T7900] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  119.303970][ T7898] IPVS: stopping backup sync thread 7900 ...
[  119.397138][ T7903] netlink: 'syz.0.573': attribute type 1 has an invalid length.
[  119.448502][ T7903] 8021q: adding VLAN 0 to HW filter on device bond8
[  119.453591][ T7908] bond6: (slave wlan0): Releasing active interface
[  119.462719][ T7908] bond8: (slave wlan0): Enslaving as an active interface with a down link
[  119.486159][ T7903] vlan2: entered allmulticast mode
[  119.488714][ T7903] bond8: (slave vlan2): Opening slave failed
[  119.910689][ T7936] __nla_validate_parse: 10 callbacks suppressed
[  119.910699][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'.
[  119.973489][ T7938] Can't find ip_set type bitmap:ip
[  119.989681][ T7940] syz.2.582: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  120.001216][ T7943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'.
[  120.015724][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.2.582 Not tainted syzkaller #0 PREEMPT(full) 
[  120.015741][ T7940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.015748][ T7940] Call Trace:
[  120.015753][ T7940]  <TASK>
[  120.015758][ T7940]  dump_stack_lvl+0x189/0x250
[  120.015779][ T7940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.015793][ T7940]  ? __pfx__printk+0x10/0x10
[  120.015810][ T7940]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.015825][ T7940]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.015840][ T7940]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  120.015855][ T7940]  warn_alloc+0x214/0x310
[  120.015879][ T7940]  ? __pfx_warn_alloc+0x10/0x10
[  120.015902][ T7940]  ? __get_vm_area_node+0x28f/0x300
[  120.015918][ T7940]  ? xskq_create+0xbf/0x170
[  120.015933][ T7940]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  120.015970][ T7940]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  120.015991][ T7940]  ? __kasan_kmalloc+0x93/0xb0
[  120.016010][ T7940]  vmalloc_user_noprof+0xad/0xf0
[  120.016028][ T7940]  ? xskq_create+0xbf/0x170
[  120.016040][ T7940]  xskq_create+0xbf/0x170
[  120.016053][ T7940]  xsk_init_queue+0xb0/0x110
[  120.016066][ T7940]  xsk_setsockopt+0x57b/0x8d0
[  120.016086][ T7940]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.016102][ T7940]  ? __pfx_aa_sk_perm+0x10/0x10
[  120.016122][ T7940]  ? __fget_files+0x2a/0x420
[  120.016132][ T7940]  ? aa_sock_opt_perm+0xff/0x1b0
[  120.016147][ T7940]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  120.016168][ T7940]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.016186][ T7940]  do_sock_setsockopt+0x17c/0x1b0
[  120.016205][ T7940]  __x64_sys_setsockopt+0x13f/0x1b0
[  120.016223][ T7940]  do_syscall_64+0xfa/0x3b0
[  120.016236][ T7940]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.016247][ T7940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.016259][ T7940]  ? exc_page_fault+0x9f/0xf0
[  120.016273][ T7940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.016284][ T7940] RIP: 0033:0x7f557bf8eba9
[  120.016296][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.016306][ T7940] RSP: 002b:00007f557ce85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  120.016320][ T7940] RAX: ffffffffffffffda RBX: 00007f557c1d6090 RCX: 00007f557bf8eba9
[  120.016328][ T7940] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  120.016335][ T7940] RBP: 00007f557c011e19 R08: 0000000000000004 R09: 0000000000000000
[  120.016342][ T7940] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  120.016349][ T7940] R13: 00007f557c1d6128 R14: 00007f557c1d6090 R15: 00007ffe566c6348
[  120.016397][ T7940]  </TASK>
[  120.016402][ T7940] Mem-Info:
[  120.051874][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'.
[  120.061309][ T7940] active_anon:6043 inactive_anon:0 isolated_anon:0
[  120.061309][ T7940]  active_file:1424 inactive_file:38261 isolated_file:0
[  120.061309][ T7940]  unevictable:1768 dirty:116 writeback:0
[  120.061309][ T7940]  slab_reclaimable:9875 slab_unreclaimable:55191
[  120.061309][ T7940]  mapped:18324 shmem:2409 pagetables:1043
[  120.061309][ T7940]  sec_pagetables:0 bounce:0
[  120.061309][ T7940]  kernel_misc_reclaimable:0
[  120.061309][ T7940]  free:298272 free_pcp:15135 free_cma:0
[  120.066416][ T7950] netlink: 'syz.1.584': attribute type 1 has an invalid length.
[  120.067764][ T7940] Node 0 active_anon:13276kB inactive_anon:0kB active_file:4284kB inactive_file:148248kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37276kB dirty:148kB writeback:0kB shmem:4668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4864kB pagetables:2292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  120.172706][ T7940] Node 1 active_anon:10896kB inactive_anon:0kB active_file:1412kB inactive_file:4796kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36020kB dirty:316kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7500kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  120.191792][ T7940] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  120.202816][ T7940] lowmem_reserve[]: 0 811 811 811 811
[  120.205017][ T7940] Node 0 DMA32 free:260996kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13276kB inactive_anon:0kB active_file:4284kB inactive_file:148248kB unevictable:3536kB writepending:148kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:35112kB local_pcp:15264kB free_cma:0kB
[  120.217516][ T7940] lowmem_reserve[]: 0 0 0 0 0
[  120.219523][ T7940] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  120.231784][ T7940] lowmem_reserve[]: 0 0 854 854 854
[  120.233974][ T7940] Node 1 Normal free:458116kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10896kB inactive_anon:0kB active_file:1412kB inactive_file:4796kB unevictable:3536kB writepending:316kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:25556kB local_pcp:7684kB free_cma:0kB
[  120.245817][ T7940] lowmem_reserve[]: 0 0 0 0 0
[  120.247983][ T7940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  120.253206][ T7940] Node 0 DMA32: 619*4kB (UM) 842*8kB (UME) 407*16kB (UME) 151*32kB (UME) 180*64kB (UM) 60*128kB (UM) 29*256kB (UM) 21*512kB (ME) 4*1024kB (M) 5*2048kB (ME) 46*4096kB (UM) = 260684kB
[  120.260422][ T7940] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  120.266732][ T7940] Node 1 Normal: 275*4kB (UME) 289*8kB (UME) 221*16kB (UME) 340*32kB (UME) 95*64kB (UME) 40*128kB (UME) 18*256kB (UME) 11*512kB (UME) 7*1024kB (UM) 5*2048kB (ME) 98*4096kB (UM) = 458084kB
[  120.274292][ T7940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.279013][ T7940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.283043][ T7940] 42094 total pagecache pages
[  120.284970][ T7940] 0 pages in swap cache
[  120.287240][ T7940] Free swap  = 124996kB
[  120.289472][ T7950] 8021q: adding VLAN 0 to HW filter on device bond8
[  120.289947][ T7940] Total swap = 124996kB
[  120.293400][ T7940] 786301 pages RAM
[  120.294836][ T7940] 0 pages HighMem/MovableOnly
[  120.296658][ T7940] 241346 pages reserved
[  120.298330][ T7940] 0 pages cma reserved
[  120.400278][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[  120.403189][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'.
[  120.406483][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'.
[  120.409366][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'.
[  120.507220][ T7973] netlink: 'syz.0.592': attribute type 1 has an invalid length.
[  120.511745][ T7973] netlink: 'syz.0.592': attribute type 4 has an invalid length.
[  120.514948][ T7973] netlink: 11298 bytes leftover after parsing attributes in process `syz.0.592'.
[  120.554430][ T7978] netlink: 'syz.1.590': attribute type 16 has an invalid length.
[  120.557742][ T7978] netlink: 'syz.1.590': attribute type 17 has an invalid length.
[  120.569114][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  120.578860][ T7978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.671156][ T7987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'.
[  121.198999][ T8026] vxcan1 speed is unknown, defaulting to 1000
[  121.530549][ T8054] netlink: 'syz.0.616': attribute type 1 has an invalid length.
[  121.548097][ T8054] 8021q: adding VLAN 0 to HW filter on device bond10
[  121.577688][ T8054] 8021q: adding VLAN 0 to HW filter on device bond10
[  121.580221][ T8054] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  121.584592][ T8054] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  121.714658][ T8058] vxcan1 speed is unknown, defaulting to 1000
[  121.843116][ T8059] vxcan1 speed is unknown, defaulting to 1000
[  122.506318][ T8092] delete_channel: no stack
[  122.658662][ T8107] netlink: 'syz.2.629': attribute type 16 has an invalid length.
[  122.663366][ T8107] netlink: 'syz.2.629': attribute type 17 has an invalid length.
[  122.708452][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.713062][ T8107] 8021q: adding VLAN 0 to HW filter on device team0
[  122.721040][ T8107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.520075][ T8129] ieee802154 phy0 wpan0: encryption failed: -22
[  123.722450][ T8140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.219666][ T8185] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  124.271175][ T8188] vxcan1 speed is unknown, defaulting to 1000
[  124.452885][ T8187] vxcan1 speed is unknown, defaulting to 1000
[  125.474744][ T8257] IPVS: stopping backup sync thread 8259 ...
[  125.475056][ T8259] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  125.518130][ T8257] __nla_validate_parse: 88 callbacks suppressed
[  125.518144][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'.
[  125.660033][ T8265] 8021q: VLANs not supported on lo
[  125.743171][ T8269] netlink: 'syz.2.670': attribute type 13 has an invalid length.
[  125.775264][ T8271] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  125.790641][ T8273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.672'.
[  125.797401][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'.
[  125.826208][ T8271] 8021q: adding VLAN 0 to HW filter on device bond9
[  125.841190][ T8273] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000
[  125.850242][ T8271] bond9: (slave wlan0): Enslaving as an active interface with a down link
[  126.031172][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.678'.
[  126.101983][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'.
[  126.143794][ T8300] netlink: 80 bytes leftover after parsing attributes in process `syz.1.681'.
[  126.239692][ T8306] netlink: 'syz.1.684': attribute type 1 has an invalid length.
[  126.341325][ T8314] 8021q: adding VLAN 0 to HW filter on device team0
[  126.348859][ T8314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.403805][ T8319] netlink: 'syz.2.688': attribute type 10 has an invalid length.
[  126.559998][ T8335] netlink: 80 bytes leftover after parsing attributes in process `syz.0.690'.
[  126.586063][ T8338] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.691'.
[  126.664878][ T8347] xfrm1: entered allmulticast mode
[  126.671795][ T8347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.692'.
[  127.225943][ T8393] vxcan1 speed is unknown, defaulting to 1000
[  127.624429][ T8449] vxcan1 speed is unknown, defaulting to 1000
[  127.649197][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'.
[  127.675680][ T8455] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[  127.710072][ T8455] 8021q: adding VLAN 0 to HW filter on device bond10
[  127.725098][ T8455] bond9: (slave wlan0): Releasing active interface
[  127.729698][ T8455] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  127.831166][ T8462] delete_channel: no stack
[  127.853608][ T8465] Unsupported ieee802154 address type: 0
[  127.857068][ T8465] xt_l2tp: v2 sid > 0xffff: 1114112
[  128.038605][ T8473] ip6gretap0: entered promiscuous mode
[  128.128582][ T8484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.131080][ T8484] IPv6: NLM_F_CREATE should be set when creating new route
[  128.312048][ T8492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.315602][ T8497] syzkaller0: entered promiscuous mode
[  128.321021][ T8497] syzkaller0: entered allmulticast mode
[  128.326211][ T8491] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.353585][ T8491] tipc: Resetting bearer <eth:syzkaller0>
[  128.365942][ T8491] tipc: Disabling bearer <eth:syzkaller0>
[  128.426400][ T8508] sctp: [Deprecated]: syz.1.718 (pid 8508) Use of int in maxseg socket option.
[  128.426400][ T8508] Use struct sctp_assoc_value instead
[  128.458727][ T8515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.459943][ T8513] netlink: 'syz.2.717': attribute type 1 has an invalid length.
[  128.519500][ T8522] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  128.523718][ T8521] IPVS: stopping backup sync thread 8522 ...
[  128.677382][ T8542] syzkaller0: entered promiscuous mode
[  128.679207][ T8542] syzkaller0: entered allmulticast mode
[  128.688840][ T8546] netlink: 'syz.0.730': attribute type 64 has an invalid length.
[  128.696410][ T8544] IPv6: sit2: Disabled Multicast RS
[  128.835603][ T8551] netlink: 'syz.0.731': attribute type 4 has an invalid length.
[  129.486763][ T8552] vxcan1 speed is unknown, defaulting to 1000
[  129.635974][ T8565] openvswitch: netlink: Flow actions attr not present in new flow.
[  129.798436][ T8584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  129.990863][ T8612] macvlan4: entered promiscuous mode
[  129.992856][ T8612] macvlan4: entered allmulticast mode
[  129.995703][ T8612] bond10: (slave macvlan4): Opening slave failed
[  130.062782][ T8620] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  130.242556][ T8642] vxcan1 speed is unknown, defaulting to 1000
[  130.254988][ T8643] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  130.270977][ T8643] bond3: (slave wireguard0): Error -95 calling set_mac_address
[  130.500898][ T8666] syzkaller1: entered promiscuous mode
[  130.503345][ T8666] syzkaller1: entered allmulticast mode
[  130.567431][ T8669] netlink: 'syz.1.755': attribute type 6 has an invalid length.
[  130.670765][ T8677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  130.673344][ T8677] IPv6: NLM_F_CREATE should be set when creating new route
[  130.707968][ T8679] vxcan1 speed is unknown, defaulting to 1000
[  130.764425][ T8682] __nla_validate_parse: 9 callbacks suppressed
[  130.764434][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.764'.
[  130.779995][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'.
[  130.933398][ T8695] netlink: 76 bytes leftover after parsing attributes in process `syz.2.766'.
[  131.002466][ T8702] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  131.006114][ T8701] IPVS: stopping backup sync thread 8702 ...
[  131.053358][ T8704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.083841][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'.
[  131.166961][ T8711] vxcan1 speed is unknown, defaulting to 1000
[  131.181964][ T8713] IPVS: persistence engine module ip_vs_pe_ not found
[  131.203429][ T8714] IPVS: persistence engine module ip_vs_pe_ not found
[  131.270949][ T8713] vxcan1 speed is unknown, defaulting to 1000
[  131.389750][ T8724] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  131.489429][ T8727] netlink: 76 bytes leftover after parsing attributes in process `syz.0.776'.
[  131.520306][ T8731] syzkaller1: entered promiscuous mode
[  131.522414][ T8731] syzkaller1: entered allmulticast mode
[  131.628467][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'.
[  131.752158][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'.
[  131.874231][ T8763] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[  131.916380][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'.
[  131.926587][ T8767] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  132.208303][ T6162] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  132.402009][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.404727][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.582741][   T33] audit: type=1800 audit(1758471962.604:2): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.795" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1230 res=0 errno=0
[  132.625692][ T8796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.631730][ T8796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.796'.
[  132.719947][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  132.884708][ T8779] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  132.911452][ T8807] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  132.927919][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'.
[  132.977337][ T8813] netlink: 'syz.0.800': attribute type 6 has an invalid length.
[  132.992475][ T8813] netlink: 'syz.0.800': attribute type 12 has an invalid length.
[  133.016733][ T8815] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  133.019615][ T8815] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  133.052641][ T8817] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[  133.075602][ T8817] 8021q: adding VLAN 0 to HW filter on device bond11
[  133.085566][ T8817] bond10: (slave wlan0): Releasing active interface
[  133.095132][ T8817] bond11: (slave wlan0): Enslaving as an active interface with a down link
[  133.241612][ T8830] : renamed from bond_slave_0
[  133.899897][ T8851] nbd0: detected capacity change from 0 to 127
[  133.905642][   T56] block nbd0: Receive control failed (result -32)
[  133.905851][ T6547] block nbd0: Send control failed (result -32)
[  133.920571][ T6547] block nbd0: Request send failed, requeueing
[  133.923676][ T6547] block nbd0: Dead connection, failed to find a fallback
[  133.927985][ T1114] block nbd0: Dead connection, failed to find a fallback
[  133.950790][ T8856] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  133.951459][ T8855] IPVS: stopping backup sync thread 8856 ...
[  134.070328][ T5237] Bluetooth: hci0: command 0x0c20 tx timeout
[  134.140332][ T8867] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  134.144883][ T8866] IPVS: stopping backup sync thread 8867 ...
[  134.195266][ T8871] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  134.199342][ T8870] IPVS: stopping backup sync thread 8871 ...
[  134.246666][ T8873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.595516][ T8903] vxcan1 speed is unknown, defaulting to 1000
[  134.938765][ T8909] netlink: 'syz.1.829': attribute type 1 has an invalid length.
[  134.957016][ T8909] 8021q: adding VLAN 0 to HW filter on device bond12
[  134.986245][ T8909] bond9: (slave wlan0): Releasing active interface
[  134.995927][ T8909] bond12: (slave wlan0): Enslaving as an active interface with a down link
[  135.075941][ T8922] IPVS: stopping backup sync thread 8923 ...
[  135.075964][ T8923] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  135.403541][ T8943] netlink: 'syz.1.839': attribute type 1 has an invalid length.
[  135.428439][ T8943] 8021q: adding VLAN 0 to HW filter on device bond13
[  135.445995][ T8940] bond12: (slave wlan0): Releasing active interface
[  135.457786][ T8940] bond13: (slave wlan0): Enslaving as an active interface with a down link
[  135.962853][ T8959] __nla_validate_parse: 10 callbacks suppressed
[  135.962866][ T8959] netlink: 44 bytes leftover after parsing attributes in process `syz.2.842'.
[  136.564241][ T8961] vxcan1 speed is unknown, defaulting to 1000
[  136.598026][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  136.608055][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'.
[  136.617860][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  136.622886][ T8964] netlink: 'syz.1.843': attribute type 5 has an invalid length.
[  136.628020][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'.
[  136.635067][ T8966] netlink: 'syz.0.844': attribute type 10 has an invalid length.
[  136.640305][ T8966] netlink: 'syz.0.844': attribute type 4 has an invalid length.
[  136.643008][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'.
[  136.646304][ T8966] netlink: 68 bytes leftover after parsing attributes in process `syz.0.844'.
[  136.650125][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'.
[  136.653858][ T8966] netlink: 68 bytes leftover after parsing attributes in process `syz.0.844'.
[  137.176018][ T9005] vxcan1 speed is unknown, defaulting to 1000
[  137.205480][ T9012] netlink: 'syz.0.857': attribute type 1 has an invalid length.
[  137.225070][ T9018] netlink: 'syz.2.860': attribute type 1 has an invalid length.
[  137.246057][ T9017] IPVS: stopping backup sync thread 9019 ...
[  137.246447][ T9019] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  137.277449][ T9018] 8021q: adding VLAN 0 to HW filter on device bond12
[  137.285816][ T9021] bond11: (slave wlan0): Releasing active interface
[  137.295706][ T9021] bond12: (slave wlan0): Enslaving as an active interface with a down link
[  137.300704][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'.
[  137.477805][ T9034] vxcan1 speed is unknown, defaulting to 1000
[  137.514087][ T9032] IPVS: stopping backup sync thread 9039 ...
[  137.881946][ T9051] vxcan1 speed is unknown, defaulting to 1000
[  138.340435][ T9074] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  138.342967][ T9074] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  138.407206][ T9074] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  138.534731][ T9086] netlink: 'syz.0.877': attribute type 1 has an invalid length.
[  138.556017][ T9086] bond12: (slave geneve3): making interface the new active one
[  138.559461][ T9086] bond12: (slave geneve3): Enslaving as an active interface with an up link
[  138.563540][ T5854] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  138.566714][ T5854] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  138.576717][ T5854] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  138.579670][ T5854] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  138.615075][ T9090] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  138.620750][ T9089] IPVS: stopping backup sync thread 9090 ...
[  138.663685][ T9089] netlink: 'syz.2.878': attribute type 4 has an invalid length.
[  139.487639][ T9109] vxcan1 speed is unknown, defaulting to 1000
[  139.518620][ T9114] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  139.563369][ T9114] : renamed from veth1_virt_wifi
[  139.717804][ T9126] netlink: 'syz.0.887': attribute type 1 has an invalid length.
[  139.733735][ T9126] 8021q: adding VLAN 0 to HW filter on device bond13
[  139.778583][ T9126] bond8: (slave wlan0): Releasing active interface
[  139.783231][ T9126] bond13: (slave wlan0): Enslaving as an active interface with a down link
[  139.791983][ T9126] vlan2: entered allmulticast mode
[  139.794097][ T9126] bond13: (slave vlan2): Opening slave failed
[  140.017887][ T9142] nbd: nbd2 already in use
[  140.207029][ T9165] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  140.216588][ T9164] IPVS: stopping backup sync thread 9165 ...
[  140.281657][ T9169] netlink: 'syz.2.899': attribute type 1 has an invalid length.
[  140.343580][ T9183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.366753][ T9183] tipc: Resetting bearer <eth:syzkaller0>
[  140.374466][ T9187] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.381048][ T9190] netlink: 'syz.1.904': attribute type 1 has an invalid length.
[  140.416572][ T9190] 8021q: adding VLAN 0 to HW filter on device bond14
[  140.448387][ T9182] tipc: Disabling bearer <eth:syzkaller0>
[  140.458760][ T9190] bond13: (slave wlan0): Releasing active interface
[  140.468816][ T9190] bond14: (slave wlan0): Enslaving as an active interface with a down link
[  140.516946][ T9203] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  140.516971][ T9201] IPVS: stopping backup sync thread 9203 ...
[  140.668903][ T9219] vxcan1 speed is unknown, defaulting to 1000
[  140.829581][ T9227] vxcan1 speed is unknown, defaulting to 1000
[  140.851327][ T9234] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  141.097597][ T9243] __nla_validate_parse: 16 callbacks suppressed
[  141.097614][ T9243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'.
[  141.136940][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'.
[  141.149084][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.919'.
[  141.177933][ T9249] openvswitch: netlink: Flow key attr not present in new flow.
[  141.323931][ T9263] syzkaller0: entered allmulticast mode
[  141.350040][ T1114] block nbd0: shutting down sockets
[  141.352768][ T1114] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.355916][ T6547] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.357062][ T1114] Buffer I/O error on dev nbd0, logical block 0, async page read
[  141.364705][ T6547] Buffer I/O error on dev nbd0, logical block 1, async page read
[  141.373655][ T9265] 8021q: adding VLAN 0 to HW filter on device bond15
[  141.380753][ T6547] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.384428][ T6547] Buffer I/O error on dev nbd0, logical block 2, async page read
[  141.387125][ T6547] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.391631][ T6547] Buffer I/O error on dev nbd0, logical block 3, async page read
[  141.395020][ T6547] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.397958][ T6547] Buffer I/O error on dev nbd0, logical block 0, async page read
[  141.401192][ T6547] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.404441][ T6547] Buffer I/O error on dev nbd0, logical block 1, async page read
[  141.407858][ T6547] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.412897][ T6547] Buffer I/O error on dev nbd0, logical block 2, async page read
[  141.416405][ T6547] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.416876][ T9265] bond14: (slave wlan0): Releasing active interface
[  141.419360][ T6547] Buffer I/O error on dev nbd0, logical block 3, async page read
[  141.425365][ T6547] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.429183][ T6547] Buffer I/O error on dev nbd0, logical block 0, async page read
[  141.429248][ T9265] bond15: (slave wlan0): Enslaving as an active interface with a down link
[  141.436724][ T6547] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.440115][ T6547] Buffer I/O error on dev nbd0, logical block 1, async page read
[  141.445250][ T6547] ldm_validate_partition_table(): Disk read failed.
[  141.454041][ T6547] Dev nbd0: unable to read RDB block 0
[  141.458056][ T6547]  nbd0: unable to read partition table
[  141.478385][ T6547] ldm_validate_partition_table(): Disk read failed.
[  141.492847][ T6547] Dev nbd0: unable to read RDB block 0
[  141.496310][ T6547]  nbd0: unable to read partition table
[  141.582522][ T9276] gtp0: entered promiscuous mode
[  141.584823][ T9276] gtp0: entered allmulticast mode
[  141.678180][ T9290] lo: Caught tx_queue_len zero misconfig
[  141.703968][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'.
[  141.784093][ T9285] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  141.789736][ T9285] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  141.838484][ T9297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.914822][ T9303] netlink: 264 bytes leftover after parsing attributes in process `syz.1.935'.
[  142.013958][ T9307] 8021q: adding VLAN 0 to HW filter on device bond15
[  142.048847][ T9316] netlink: 72 bytes leftover after parsing attributes in process `syz.1.940'.
[  142.060900][ T9316] netlink: 72 bytes leftover after parsing attributes in process `syz.1.940'.
[  142.067309][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'.
[  142.101225][ T9323] bond14: (slave geneve3): making interface the new active one
[  142.104168][ T9323] bond14: (slave geneve3): Enslaving as an active interface with an up link
[  142.107382][ T6162] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  142.108356][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.941'.
[  142.111127][ T6162] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  142.118020][ T9323] 8021q: adding VLAN 0 to HW filter on device bond14
[  142.120654][ T6162] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  142.124017][ T6162] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  142.165579][ T9329] netlink: 76 bytes leftover after parsing attributes in process `syz.0.943'.
[  142.233513][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  142.301356][ T9345] vxcan1 speed is unknown, defaulting to 1000
[  142.347514][ T9353] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  142.513538][ T2223] IPVS: starting estimator thread 0...
[  142.599990][ T9366] IPVS: using max 79 ests per chain, 189600 per kthread
[  142.807780][ T9381] atomic_op ffff88803cdb6198 conn xmit_atomic 0000000000000000
[  142.851205][ T9383] validate_nla: 4 callbacks suppressed
[  142.851215][ T9383] netlink: 'syz.0.960': attribute type 1 has an invalid length.
[  142.877448][ T9383] 8021q: adding VLAN 0 to HW filter on device bond16
[  142.897174][ T9383] bond13: (slave wlan0): Releasing active interface
[  142.912071][ T9383] bond16: (slave wlan0): Enslaving as an active interface with a down link
[  142.944501][ T9383] vlan2: entered allmulticast mode
[  142.946764][ T9383] bond16: (slave vlan2): Opening slave failed
[  143.088935][ T9407] netlink: 'syz.0.967': attribute type 1 has an invalid length.
[  143.119728][ T9407] gretap3: entered allmulticast mode
[  143.123234][ T9407] bond17: (slave gretap3): making interface the new active one
[  143.126177][ T9407] bond17: (slave gretap3): Enslaving as an active interface with an up link
[  143.278493][ T9419] netlink: 'syz.1.972': attribute type 1 has an invalid length.
[  143.295573][ T9419] 8021q: adding VLAN 0 to HW filter on device bond16
[  143.317996][ T9419] 8021q: adding VLAN 0 to HW filter on device bond16
[  143.321496][ T9419] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  143.326480][ T9419] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  143.365821][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.371696][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.391783][ T5854] bond15: (slave wlan0): failed to get link speed/duplex
[  143.520009][ T5854] bond15: (slave wlan0): failed to get link speed/duplex
[  143.630075][ T5854] bond15: (slave wlan0): failed to get link speed/duplex
[  143.665603][ T9444] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  143.665607][ T9443] IPVS: stopping backup sync thread 9444 ...
[  143.740779][ T5872] bond15: (slave wlan0): failed to get link speed/duplex
[  143.831678][ T9459] vxcan1 speed is unknown, defaulting to 1000
[  143.890229][ T5872] bond15: (slave wlan0): failed to get link speed/duplex
[  143.989219][ T9466] bond0: Caught tx_queue_len zero misconfig
[  144.118571][ T9477] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  144.121377][ T9474] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.163030][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  144.197180][ T9483] smc: net device bond0 applied user defined pnetid SYZ0
[  144.214771][ T9482] smc: net device bond0 erased user defined pnetid SYZ0
[  144.215541][ T9480] macvlan2: entered allmulticast mode
[  144.227111][ T9480] bond0: entered allmulticast mode
[  144.237082][ T9480] bond0: left allmulticast mode
[  144.343393][ T5854] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.347163][ T5854] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.385258][ T5854] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.401833][ T5854] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.696522][ T9506] netlink: 'syz.2.997': attribute type 1 has an invalid length.
[  144.722181][ T9506] 8021q: adding VLAN 0 to HW filter on device bond15
[  144.735556][ T9506] bond12: (slave wlan0): Releasing active interface
[  144.742780][ T9506] bond15: (slave wlan0): Enslaving as an active interface with a down link
[  144.837082][ T9520] vxcan1 speed is unknown, defaulting to 1000
[  145.046383][ T9520] netlink: 'syz.2.1002': attribute type 6 has an invalid length.
[  145.728296][ T9538] xt_bpf: check failed: parse error
[  145.817518][ T9545] netlink: 'syz.2.1008': attribute type 13 has an invalid length.
[  145.972258][ T9552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.005152][ T6162] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.008449][ T6162] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.018897][ T6162] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.023650][ T6162] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.041870][ T8060] net_ratelimit: 14 callbacks suppressed
[  146.041883][ T8060] bond15: (slave wlan0): failed to get link speed/duplex
[  146.101778][ T9556] syzkaller1: entered promiscuous mode
[  146.103869][ T9556] syzkaller1: entered allmulticast mode
[  146.153664][ T5872] bond15: (slave wlan0): failed to get link speed/duplex
[  146.260483][ T8060] bond15: (slave wlan0): failed to get link speed/duplex
[  146.288889][ T9572] vxcan2: entered promiscuous mode
[  146.370235][ T5872] bond15: (slave wlan0): failed to get link speed/duplex
[  146.445252][ T9587] __nla_validate_parse: 12 callbacks suppressed
[  146.445263][ T9587] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1020'.
[  146.480366][ T5854] bond15: (slave wlan0): failed to get link speed/duplex
[  146.492729][ T9589] vxcan1 speed is unknown, defaulting to 1000
[  146.631513][ T5872] bond15: (slave wlan0): failed to get link speed/duplex
[  146.760373][ T8060] bond15: (slave wlan0): failed to get link speed/duplex
[  146.839302][ T9599] netlink: 'syz.1.1024': attribute type 4 has an invalid length.
[  146.870459][ T8060] bond15: (slave wlan0): failed to get link speed/duplex
[  146.980324][ T8060] bond15: (slave wlan0): failed to get link speed/duplex
[  147.054519][ T9613] netlink: 'syz.1.1029': attribute type 12 has an invalid length.
[  147.058515][ T9613] netlink: 'syz.1.1029': attribute type 1 has an invalid length.
[  147.110600][ T5872] bond15: (slave wlan0): failed to get link speed/duplex
[  147.167073][ T9615] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1030'.
[  147.338655][ T9622] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1033'.
[  147.362271][ T9624] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  147.373941][ T9624] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  147.377574][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1034'.
[  147.382968][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1034'.
[  147.397266][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1033'.
[  147.420667][ T9625] vxcan1 speed is unknown, defaulting to 1000
[  147.517202][ T9631] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  147.521940][ T9630] IPVS: stopping backup sync thread 9631 ...
[  147.724582][ T9642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'.
[  147.734823][ T9642] netlink: 436 bytes leftover after parsing attributes in process `syz.0.1040'.
[  147.795503][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'.
[  147.914448][ T9665] macsec1: entered promiscuous mode
[  147.916802][ T9665] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  147.945406][ T9663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'.
[  148.243716][ T9688] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  148.253232][ T9687] IPVS: stopping backup sync thread 9688 ...
[  148.317221][ T9691] validate_nla: 5 callbacks suppressed
[  148.317235][ T9691] netlink: 'syz.0.1055': attribute type 16 has an invalid length.
[  148.323319][ T9691] netlink: 'syz.0.1055': attribute type 17 has an invalid length.
[  148.513989][ T9700] netlink: 'syz.2.1061': attribute type 2 has an invalid length.
[  148.535947][ T9700] ave_0: entered promiscuous mode
[  148.539992][ T9702] syz.1.1062: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  148.547385][ T9702] CPU: 0 UID: 0 PID: 9702 Comm: syz.1.1062 Not tainted syzkaller #0 PREEMPT(full) 
[  148.547403][ T9702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.547411][ T9702] Call Trace:
[  148.547417][ T9702]  <TASK>
[  148.547424][ T9702]  dump_stack_lvl+0x189/0x250
[  148.547445][ T9702]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.547461][ T9702]  ? __pfx__printk+0x10/0x10
[  148.547478][ T9702]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  148.547493][ T9702]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  148.547529][ T9702]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  148.547546][ T9702]  warn_alloc+0x214/0x310
[  148.547569][ T9702]  ? __pfx_warn_alloc+0x10/0x10
[  148.547594][ T9702]  ? __get_vm_area_node+0x28f/0x300
[  148.547612][ T9702]  ? xskq_create+0xbf/0x170
[  148.547627][ T9702]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  148.547666][ T9702]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  148.547688][ T9702]  ? __kasan_kmalloc+0x93/0xb0
[  148.547708][ T9702]  vmalloc_user_noprof+0xad/0xf0
[  148.547725][ T9702]  ? xskq_create+0xbf/0x170
[  148.547738][ T9702]  xskq_create+0xbf/0x170
[  148.547752][ T9702]  xsk_init_queue+0xb0/0x110
[  148.547766][ T9702]  xsk_setsockopt+0x57b/0x8d0
[  148.547785][ T9702]  ? __pfx_xsk_setsockopt+0x10/0x10
[  148.547803][ T9702]  ? __pfx_aa_sk_perm+0x10/0x10
[  148.547824][ T9702]  ? __fget_files+0x2a/0x420
[  148.547834][ T9702]  ? aa_sock_opt_perm+0xff/0x1b0
[  148.547849][ T9702]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  148.547861][ T9702]  ? __pfx_xsk_setsockopt+0x10/0x10
[  148.547879][ T9702]  do_sock_setsockopt+0x17c/0x1b0
[  148.547896][ T9702]  __x64_sys_setsockopt+0x13f/0x1b0
[  148.547915][ T9702]  do_syscall_64+0xfa/0x3b0
[  148.547927][ T9702]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.547938][ T9702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.547948][ T9702]  ? exc_page_fault+0x9f/0xf0
[  148.547961][ T9702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.547973][ T9702] RIP: 0033:0x7fa9e4d8eba9
[  148.547984][ T9702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.547994][ T9702] RSP: 002b:00007fa9e5c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  148.548008][ T9702] RAX: ffffffffffffffda RBX: 00007fa9e4fd5fa0 RCX: 00007fa9e4d8eba9
[  148.548016][ T9702] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  148.548023][ T9702] RBP: 00007fa9e4e11e19 R08: 0000000000000004 R09: 0000000000000000
[  148.548030][ T9702] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  148.548037][ T9702] R13: 00007fa9e4fd6038 R14: 00007fa9e4fd5fa0 R15: 00007ffe63312a18
[  148.548057][ T9702]  </TASK>
[  148.548147][ T9702] Mem-Info:
[  148.681493][ T9702] active_anon:5902 inactive_anon:0 isolated_anon:0
[  148.681493][ T9702]  active_file:1424 inactive_file:38273 isolated_file:0
[  148.681493][ T9702]  unevictable:1768 dirty:54 writeback:0
[  148.681493][ T9702]  slab_reclaimable:10176 slab_unreclaimable:79049
[  148.681493][ T9702]  mapped:18355 shmem:2429 pagetables:969
[  148.681493][ T9702]  sec_pagetables:0 bounce:0
[  148.681493][ T9702]  kernel_misc_reclaimable:0
[  148.681493][ T9702]  free:268497 free_pcp:19785 free_cma:0
[  148.703466][ T9702] Node 0 active_anon:12784kB inactive_anon:0kB active_file:4320kB inactive_file:148264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:148kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5308kB pagetables:1784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  148.728259][ T9702] Node 1 active_anon:10824kB inactive_anon:0kB active_file:1376kB inactive_file:4828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35984kB dirty:68kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7996kB pagetables:2092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  148.743860][ T9702] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.756445][ T9702] lowmem_reserve[]: 0 811 811 811 811
[  148.758735][ T9702] Node 0 DMA32 free:218184kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12784kB inactive_anon:0kB active_file:4320kB inactive_file:148264kB unevictable:3536kB writepending:148kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:34436kB local_pcp:16140kB free_cma:0kB
[  148.773382][ T9702] lowmem_reserve[]: 0 0 0 0 0
[  148.775332][ T9702] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.787718][ T9702] lowmem_reserve[]: 0 0 854 854 854
[  148.795006][ T9702] Node 1 Normal free:381252kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10756kB inactive_anon:0kB active_file:1376kB inactive_file:4828kB unevictable:3536kB writepending:68kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45124kB local_pcp:25312kB free_cma:0kB
[  148.807973][ T9702] lowmem_reserve[]: 0 0 0 0 0
[  148.811788][ T9702] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  148.817068][ T9702] Node 0 DMA32: 755*4kB (UM) 1343*8kB (UME) 618*16kB (UME) 199*32kB (UME) 64*64kB (M) 38*128kB (M) 23*256kB (M) 22*512kB (UM) 6*1024kB (UM) 6*2048kB (UME) 35*4096kB (M) = 217924kB
[  148.825238][ T9702] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  148.833850][ T9702] Node 1 Normal: 1*4kB (E) 40*8kB (UE) 0*16kB 124*32kB (UME) 142*64kB (UME) 28*128kB (UME) 7*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 87*4096kB (UM) = 381252kB
[  148.842189][ T9702] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  148.846183][ T9702] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  148.851011][ T9702] 42126 total pagecache pages
[  148.853231][ T9702] 0 pages in swap cache
[  148.855163][ T9702] Free swap  = 124996kB
[  148.857125][ T9702] Total swap = 124996kB
[  148.859007][ T9702] 786301 pages RAM
[  148.860918][ T9702] 0 pages HighMem/MovableOnly
[  148.862617][ T9702] 241346 pages reserved
[  148.864018][ T9702] 0 pages cma reserved
[  148.960283][ T9717] vxcan1 speed is unknown, defaulting to 1000
[  149.543768][ T9734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.548357][ T9734] syzkaller0: entered promiscuous mode
[  149.551448][ T9734] syzkaller0: entered allmulticast mode
[  149.626276][ T9734] tipc: Resetting bearer <eth:syzkaller0>
[  149.631731][ T9733] tipc: Resetting bearer <eth:syzkaller0>
[  149.641865][ T9733] tipc: Disabling bearer <eth:syzkaller0>
[  149.889762][ T9743] netlink: 'syz.1.1073': attribute type 1 has an invalid length.
[  150.024771][ T9755] netlink: 'syz.2.1075': attribute type 16 has an invalid length.
[  150.028086][ T9755] netlink: 'syz.2.1075': attribute type 17 has an invalid length.
[  150.063710][ T9755] ip6gretap0: left promiscuous mode
[  150.093537][ T9755] 8021q: adding VLAN 0 to HW filter on device team0
[  150.104205][ T9759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.107321][ T9759] IPv6: NLM_F_CREATE should be set when creating new route
[  150.968514][ T9785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.015438][ T9785] syzkaller0: entered promiscuous mode
[  151.018004][ T9785] syzkaller0: entered allmulticast mode
[  151.020987][ T9785] tipc: Resetting bearer <eth:syzkaller0>
[  151.031884][ T9784] tipc: Resetting bearer <eth:syzkaller0>
[  152.026515][ T5906] tipc: Node number set to 2766506491
[  152.456692][ T9784] tipc: Disabling bearer <eth:syzkaller0>
[  152.480331][   T12] net_ratelimit: 34 callbacks suppressed
[  152.480345][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  152.551100][ T9813] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  152.608830][ T9813] 8021q: adding VLAN 0 to HW filter on device bond16
[  152.640090][ T9813] bond15: (slave wlan0): Releasing active interface
[  152.644885][ T9813] bond16: (slave wlan0): Enslaving as an active interface with a down link
[  152.670724][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  152.780152][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  152.818216][ T9831] netlink: 'syz.2.1098': attribute type 32 has an invalid length.
[  152.834803][ T9831] C: renamed from lo (while UP)
[  152.839340][ T9831] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  152.888436][ T9835] __nla_validate_parse: 75 callbacks suppressed
[  152.888450][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'.
[  152.902336][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'.
[  152.920731][ T5854] bond15: (slave wlan0): failed to get link speed/duplex
[  152.965702][ T9837] vxcan1 speed is unknown, defaulting to 1000
[  153.040054][ T5854] bond15: (slave wlan0): failed to get link speed/duplex
[  153.075009][ T9849] netlink: 'syz.1.1102': attribute type 3 has an invalid length.
[  153.150503][ T5854] bond15: (slave wlan0): failed to get link speed/duplex
[  153.183772][ T9835] vxcan1 speed is unknown, defaulting to 1000
[  153.279200][ T9853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1104'.
[  153.391653][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  153.400294][ T9807] Set syz1 is full, maxelem 65536 reached
[  153.425880][ T9855] vxcan1 speed is unknown, defaulting to 1000
[  153.485442][ T9857] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  153.488227][ T9857] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1105'.
[  153.530130][   T12] bond15: (slave wlan0): failed to get link speed/duplex
[  153.730237][ T9865] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1107'.
[  153.809153][ T9869] sctp: [Deprecated]: syz.0.1108 (pid 9869) Use of int in maxseg socket option.
[  153.809153][ T9869] Use struct sctp_assoc_value instead
[  153.933881][ T9874] vxcan1 speed is unknown, defaulting to 1000
[  154.176588][ T9884] netlink: 'syz.1.1114': attribute type 1 has an invalid length.
[  154.222239][ T9884] 8021q: adding VLAN 0 to HW filter on device bond18
[  154.265733][ T9884] bond15: (slave wlan0): Releasing active interface
[  154.282708][ T9884] bond18: (slave wlan0): Enslaving as an active interface with a down link
[  154.291341][ T9896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.361424][ T9901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.371099][ T9901] syzkaller0: entered promiscuous mode
[  154.382087][ T9901] syzkaller0: entered allmulticast mode
[  154.433968][ T9901] tipc: Resetting bearer <eth:syzkaller0>
[  154.442173][ T9900] tipc: Resetting bearer <eth:syzkaller0>
[  154.460814][ T9900] tipc: Disabling bearer <eth:syzkaller0>
[  154.483912][ T9909] pim6reg1: entered promiscuous mode
[  154.485674][ T9909] pim6reg1: entered allmulticast mode
[  154.488993][ T9907] netlink: 'syz.0.1121': attribute type 6 has an invalid length.
[  154.558257][ T9911] vxcan1 speed is unknown, defaulting to 1000
[  154.615806][ T9920] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1126'.
[  154.699147][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1127'.
[  154.765125][ T9925] hsr1: left allmulticast mode
[  154.768151][ T9925] veth1_to_team: left allmulticast mode
[  154.771345][ T9925] bond0: left allmulticast mode
[  154.774659][ T9925] bond4: left promiscuous mode
[  154.776712][ T9925] bond4: left allmulticast mode
[  154.779134][ T9925] vlan3: left promiscuous mode
[  154.781571][ T9925] vlan3: left allmulticast mode
[  154.784544][ T9925] hsr_slave_1: left allmulticast mode
[  154.787121][ T9925] nicvf0: left promiscuous mode
[  154.795330][ T9925] xfrm1: left allmulticast mode
[  154.803960][ T9925] gtp0: left promiscuous mode
[  154.805868][ T9925] gtp0: left allmulticast mode
[  154.813982][ T9925] gretap3: left allmulticast mode
[  154.868397][ T8060] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.872144][ T8060] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.875486][ T8060] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.878712][ T8060] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  155.033716][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'.
[  155.061500][ T9925] hsr_slave_1: left promiscuous mode
[  155.127485][ T9928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1128'.
[  155.699663][ T9936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1130'.
[  155.804341][ T9947] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  155.809648][ T9944] IPVS: stopping backup sync thread 9947 ...
[  155.994231][ T9955] team0: Port device team_slave_0 removed
[  155.998745][ T9955] team0: Port device team_slave_1 removed
[  156.002634][ T9955] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.008254][ T9955] team0: Port device geneve0 removed
[  156.013488][ T9955] bond16: (slave wlan0): Releasing active interface
[  156.018374][ T9955] bond7: (slave gretap2): Releasing active interface
[  156.024371][ T9955] bond12: (slave geneve3): Releasing active interface
[  156.029619][ T9955] bond17: (slave gretap3): Releasing active interface
[  156.042660][ T9955] netlink: 'syz.0.1135': attribute type 10 has an invalid length.
[  156.085942][ T9955] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  156.089679][ T9955] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.364072][ T9988] : entered promiscuous mode
[  156.535451][ T9992] vxcan1 speed is unknown, defaulting to 1000
[  156.918804][T10014] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.928417][T10012] Unsupported ieee802154 address type: 0
[  156.936988][T10012] IPVS: stopping backup sync thread 10014 ...
[  157.105405][T10019] 8021q: adding VLAN 0 to HW filter on device bond19
[  157.109392][T10023] IPVS: stopping backup sync thread 10026 ...
[  157.112026][T10026] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  157.240976][T10039] bond0: (slave bond_slave_0): Releasing backup interface
[  157.244370][T10039] bond0: (slave bond_slave_1): Releasing backup interface
[  157.248276][T10039] team0: Port device team_slave_0 removed
[  157.254619][T10039] team0: Port device team_slave_1 removed
[  157.257953][T10039] bond2: (slave vlan2): Releasing active interface
[  157.260974][T10039] vlan2: left promiscuous mode
[  157.263973][T10039] bond5: (slave wireguard0): Releasing backup interface
[  157.267201][T10039] bond18: (slave wlan0): Releasing active interface
[  157.367456][T10049] vxcan1 speed is unknown, defaulting to 1000
[  157.413200][T10055] netlink: 'syz.1.1161': attribute type 12 has an invalid length.
[  157.464581][T10054] netlink: 'syz.2.1163': attribute type 4 has an invalid length.
[  157.481940][T10054] netlink: 'syz.2.1163': attribute type 4 has an invalid length.
[  157.724475][T10063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.728175][T10063] syzkaller0: entered promiscuous mode
[  157.731372][T10063] syzkaller0: entered allmulticast mode
[  157.781329][T10063] tipc: Resetting bearer <eth:syzkaller0>
[  157.806916][T10063] tipc: Disabling bearer <eth:syzkaller0>
[  158.056020][T10078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.060770][T10078] syzkaller0: entered promiscuous mode
[  158.065509][T10078] syzkaller0: entered allmulticast mode
[  158.077938][T10077] tipc: Resetting bearer <eth:syzkaller0>
[  158.089213][T10077] tipc: Disabling bearer <eth:syzkaller0>
[  158.103129][T10082] __nla_validate_parse: 5 callbacks suppressed
[  158.103142][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'.
[  158.138044][T10085] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1172'.
[  158.193015][T10089] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  158.210336][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'.
[  158.305522][T10105] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  158.305566][T10103] IPVS: stopping backup sync thread 10105 ...
[  158.376952][T10115] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1178'.
[  158.399299][T10115] netlink: 'syz.0.1178': attribute type 39 has an invalid length.
[  158.587440][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1187'.
[  158.615762][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'.
[  158.625639][T10138] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  158.625666][T10137] IPVS: stopping backup sync thread 10138 ...
[  158.665032][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[  158.777949][T10156] netlink: 'syz.2.1192': attribute type 1 has an invalid length.
[  158.877581][T10166] dvmrp8: entered allmulticast mode
[  158.883856][T10164] dvmrp8: left allmulticast mode
[  158.899068][T10162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1194'.
[  159.025780][T10178] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.030694][T10177] IPVS: stopping backup sync thread 10178 ...
[  159.196842][T10184] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.433387][T10208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1207'.
[  159.436324][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1207'.
[  159.447175][T10208] netlink: 'syz.0.1207': attribute type 10 has an invalid length.
[  159.478473][T10217] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.482472][T10217] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  159.664478][T10232] net_ratelimit: 4 callbacks suppressed
[  159.664488][T10232] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  159.840786][T10245] vxcan1 speed is unknown, defaulting to 1000
[  159.910268][T10254] macvtap1: entered promiscuous mode
[  159.912076][T10254] veth1_to_hsr: entered promiscuous mode
[  159.914068][T10254] macvtap1: entered allmulticast mode
[  159.915878][T10254] veth1_to_hsr: entered allmulticast mode
[  159.926465][T10254] macvtap2: entered promiscuous mode
[  159.928274][T10254] macvtap2: entered allmulticast mode
[  160.067822][T10262] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  160.124155][T10262] team1: entered promiscuous mode
[  160.126221][T10262] team1: entered allmulticast mode
[  160.243657][T10267] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  160.822273][T10301] netlink: 'syz.2.1234': attribute type 1 has an invalid length.
[  160.998474][T10316] netlink: 'syz.0.1237': attribute type 2 has an invalid length.
[  161.301869][T10333] netlink: 'syz.0.1241': attribute type 21 has an invalid length.
[  161.305337][T10333] netlink: 'syz.0.1241': attribute type 4 has an invalid length.
[  161.308746][T10333] netlink: 'syz.0.1241': attribute type 5 has an invalid length.
[  161.656319][T10347] veth11: entered promiscuous mode
[  161.659550][T10349] netlink: 'syz.1.1246': attribute type 1 has an invalid length.
[  161.682454][T10349] 8021q: adding VLAN 0 to HW filter on device bond20
[  161.690254][T10349] bond20: (slave wlan0): Enslaving as an active interface with a down link
[  162.326346][T10412] veth1_to_bridge: entered allmulticast mode
[  162.413015][T10425] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000
[  162.478791][T10436] IPVS: Error connecting to the multicast addr
[  162.544161][T10445] netlink: 'syz.1.1270': attribute type 13 has an invalid length.
[  162.586410][T10445] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.589608][T10445] 8021q: adding VLAN 0 to HW filter on device team0
[  162.596480][T10445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.717101][T10459] syz.2.1274 (10459) used obsolete PPPIOCDETACH ioctl
[  163.127577][T10511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.722387][T10552] vxcan1 speed is unknown, defaulting to 1000
[  163.744882][T10553] openvswitch: netlink: Flow actions attr not present in new flow.
[  163.818412][T10551] vxcan1 speed is unknown, defaulting to 1000
[  164.198143][T10563] __nla_validate_parse: 35 callbacks suppressed
[  164.198157][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'.
[  164.346404][T10570] validate_nla: 6 callbacks suppressed
[  164.346414][T10570] netlink: 'syz.2.1301': attribute type 1 has an invalid length.
[  164.401614][T10570] 8021q: adding VLAN 0 to HW filter on device bond18
[  164.449676][T10570] bond16: (slave wlan0): Releasing active interface
[  164.455556][T10570] bond18: (slave wlan0): Enslaving as an active interface with a down link
[  164.663667][T10585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1304'.
[  164.714524][T10590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.722841][T10590] tipc: Resetting bearer <eth:syzkaller0>
[  164.734645][T10589] tipc: Disabling bearer <eth:syzkaller0>
[  164.962804][T10611] netlink: 4216 bytes leftover after parsing attributes in process `syz.1.1311'.
[  166.122252][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  166.128879][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  166.173190][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1319'.
[  166.178315][T10647] IPVS: stopping backup sync thread 10184 ...
[  166.405348][T10665] netlink: 'syz.0.1322': attribute type 2 has an invalid length.
[  166.409724][T10665] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'.
[  166.485810][T10670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1323'.
[  166.489605][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'.
[  166.661672][T10684] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  166.665635][T10683] IPVS: stopping backup sync thread 10684 ...
[  166.678560][T10686] netlink: 'syz.2.1327': attribute type 10 has an invalid length.
[  166.682940][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'.
[  166.687633][T10687] netlink: 'syz.2.1327': attribute type 10 has an invalid length.
[  166.741082][T10689] syzkaller0: entered promiscuous mode
[  166.743193][T10689] syzkaller0: entered allmulticast mode
[  167.531714][T10740] netlink: 'syz.1.1343': attribute type 4 has an invalid length.
[  167.539017][T10740] netlink: 'syz.1.1343': attribute type 4 has an invalid length.
[  167.625071][T10742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.628009][T10742] syzkaller0: entered promiscuous mode
[  167.630930][T10742] syzkaller0: entered allmulticast mode
[  167.675468][T10742] tipc: Resetting bearer <eth:syzkaller0>
[  167.680392][T10741] tipc: Resetting bearer <eth:syzkaller0>
[  167.689683][T10741] tipc: Disabling bearer <eth:syzkaller0>
[  167.777096][T10748] atomic_op ffff8881118c3998 conn xmit_atomic 0000000000000000
[  167.777568][T10749] atomic_op ffff888119137998 conn xmit_atomic 0000000000000000
[  168.061810][T10773] netlink: 'syz.0.1354': attribute type 21 has an invalid length.
[  168.071058][T10773] netlink: 'syz.0.1354': attribute type 21 has an invalid length.
[  168.122701][T10778] vxcan1 speed is unknown, defaulting to 1000
[  168.193193][T10784] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  168.223047][T10784] 8021q: adding VLAN 0 to HW filter on device bond19
[  168.239476][T10784] bond18: (slave wlan0): Releasing active interface
[  168.247555][T10784] bond19: (slave wlan0): Enslaving as an active interface with a down link
[  168.391939][T10793] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  168.460346][T10797] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  168.759069][T10803] vxcan1 speed is unknown, defaulting to 1000
[  169.032575][T10815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.047024][T10815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.051623][T10815] syzkaller0: entered promiscuous mode
[  169.054222][T10815] syzkaller0: entered allmulticast mode
[  169.081144][T10815] tipc: Resetting bearer <eth:syzkaller0>
[  169.085993][T10814] tipc: Resetting bearer <eth:syzkaller0>
[  169.095218][T10814] tipc: Disabling bearer <eth:syzkaller0>
[  169.217710][T10828] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  169.226177][T10827] IPVS: stopping backup sync thread 10828 ...
[  169.258282][T10827] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  169.265836][T10827] __nla_validate_parse: 12 callbacks suppressed
[  169.265850][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'.
[  169.297345][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  169.352683][T10835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.355372][T10835] syzkaller0: entered promiscuous mode
[  169.357371][T10835] syzkaller0: entered allmulticast mode
[  169.371028][T10835] tipc: Resetting bearer <eth:syzkaller0>
[  169.427211][T10837] syzkaller1: entered promiscuous mode
[  169.429771][T10837] syzkaller1: entered allmulticast mode
[  169.434316][T10829] tipc: Resetting bearer <eth:syzkaller0>
[  169.446009][T10829] tipc: Disabling bearer <eth:syzkaller0>
[  169.601505][T10850] openvswitch: netlink: IPv4 tunnel dst address is zero
[  169.690041][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'.
[  169.722042][T10853] vxcan1 speed is unknown, defaulting to 1000
[  169.838844][T10869] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  169.844020][T10868] IPVS: stopping backup sync thread 10869 ...
[  170.121491][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'.
[  170.125181][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'.
[  170.141611][T10875] netlink: 'syz.2.1381': attribute type 1 has an invalid length.
[  170.156701][T10873] macsec2: entered promiscuous mode
[  170.159193][T10873] dummy0: entered promiscuous mode
[  170.162177][T10873] macsec2: entered allmulticast mode
[  170.164645][T10873] dummy0: entered allmulticast mode
[  170.169332][T10875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1381'.
[  170.446411][T10897] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1385'.
[  170.830019][T10919] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  170.862340][ T6162] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.866562][ T6162] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.870656][ T6162] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.879019][ T6162] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.972171][T10934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1393'.
[  170.976155][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'.
[  171.022658][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'.
[  171.102393][T10943] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  171.106920][T10942] IPVS: stopping backup sync thread 10943 ...
[  171.196457][T10950] vxcan1 speed is unknown, defaulting to 1000
[  171.594295][T10959] 8021q: adding VLAN 0 to HW filter on device team0
[  171.596942][T10959] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  171.823680][T10975] vxcan1 speed is unknown, defaulting to 1000
[  172.035119][T10995] syzkaller0: entered promiscuous mode
[  172.037211][T10995] syzkaller0: entered allmulticast mode
[  173.032769][T11013] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  173.036732][T11012] IPVS: stopping backup sync thread 11013 ...
[  173.146676][T11020] netlink: 'syz.2.1417': attribute type 1 has an invalid length.
[  173.268351][T11036] netlink: 'syz.0.1418': attribute type 1 has an invalid length.
[  173.308022][T11036] bond19 (unregistering): Released all slaves
[  174.387725][T11068] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  174.392444][T11067] IPVS: stopping backup sync thread 11068 ...
[  174.401800][T11073] netlink: 'syz.1.1432': attribute type 1 has an invalid length.
[  174.401960][T11067] __nla_validate_parse: 6 callbacks suppressed
[  174.401972][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'.
[  174.420305][T11073] bond22: entered promiscuous mode
[  174.423211][T11073] 8021q: adding VLAN 0 to HW filter on device bond22
[  174.427297][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'.
[  174.441563][T11073] bridge_slave_0: default FDB implementation only supports local addresses
[  174.459706][T11074] bridge_slave_0: default FDB implementation only supports local addresses
[  174.463513][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  174.466596][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  174.469947][T11073] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  174.473116][T11074] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  174.475730][T11074] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.486312][T11073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.552934][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'.
[  174.585409][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'.
[  174.588403][T11090] netlink: 'syz.1.1437': attribute type 14 has an invalid length.
[  174.601351][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'.
[  174.604315][T11090] netlink: 'syz.1.1437': attribute type 14 has an invalid length.
[  174.645424][T11101] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  174.648876][T11100] IPVS: stopping backup sync thread 11101 ...
[  174.653245][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'.
[  174.694017][T11084] bridge0: the hash_elasticity option has been deprecated and is always 16
[  174.696927][T11084] bridge0: entered allmulticast mode
[  174.738204][T11098] vxcan1 speed is unknown, defaulting to 1000
[  175.554733][T11123] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1447'.
[  175.560844][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'.
[  175.625129][T11130] vxcan1 speed is unknown, defaulting to 1000
[  175.721466][T11133] netlink: 'syz.1.1448': attribute type 1 has an invalid length.
[  176.362169][T11135] delete_channel: no stack
[  176.679302][T11168] batman_adv: batadv0: Adding interface: dummy0
[  176.682117][T11168] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  176.697907][T11168] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  176.818607][T11181] sctp: [Deprecated]: syz.0.1462 (pid 11181) Use of int in max_burst socket option.
[  176.818607][T11181] Use struct sctp_assoc_value instead
[  177.146374][T11195] netlink: 'syz.2.1465': attribute type 9 has an invalid length.
[  177.191588][T11197] netlink: 'syz.2.1466': attribute type 1 has an invalid length.
[  177.204973][T11197] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  177.569678][T11215] netlink: 'syz.2.1471': attribute type 4 has an invalid length.
[  177.580891][T11215] netlink: 'syz.2.1471': attribute type 4 has an invalid length.
[  177.639620][T11219] team0: Mode changed to "loadbalance"
[  177.750538][T11230] netlink: 'syz.0.1477': attribute type 1 has an invalid length.
[  177.766917][T11230] 8021q: adding VLAN 0 to HW filter on device bond19
[  177.775579][T11230] bond19: (slave wlan0): Enslaving as an active interface with a down link
[  177.789160][T11230] vlan0: entered allmulticast mode
[  177.793276][T11230] bond19: (slave vlan0): Opening slave failed
[  177.850771][T11229] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  178.000126][T11243] veth11: left promiscuous mode
[  178.003177][T11243] dummy0: left allmulticast mode
[  178.005516][T11243] dummy0: left promiscuous mode
[  178.008016][T11243] macsec2: left promiscuous mode
[  178.011236][T11243] macsec2: left allmulticast mode
[  178.127760][T11251] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  178.181056][T11257] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  178.486619][T11275] netlink: 'syz.2.1489': attribute type 1 has an invalid length.
[  178.516965][T11275] bond20: (slave gretap1): making interface the new active one
[  178.519726][T11275] bond20: (slave gretap1): Enslaving as an active interface with an up link
[  178.535730][T11274] vxcan1 speed is unknown, defaulting to 1000
[  178.559702][T11277] geneve4: entered promiscuous mode
[  178.561891][T11277] geneve4: entered allmulticast mode
[  178.587711][T11275] vlan0: entered allmulticast mode
[  178.591266][T11275] bond20: entered allmulticast mode
[  178.593239][T11275] gretap1: entered allmulticast mode
[  178.595749][T11281] netlink: 'syz.2.1489': attribute type 5 has an invalid length.
[  178.599513][T11275] bond20: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  178.761628][T11290] macsec1: left promiscuous mode
[  178.766341][T11290] bond22: left promiscuous mode
[  179.494838][T11301] __nla_validate_parse: 18 callbacks suppressed
[  179.494877][T11301] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1495'.
[  179.631615][T11308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1498'.
[  179.698675][T11313] vxcan1 speed is unknown, defaulting to 1000
[  179.924180][T11317] netlink: 'syz.1.1499': attribute type 1 has an invalid length.
[  179.939313][T11317] 8021q: adding VLAN 0 to HW filter on device bond23
[  179.950574][T11317] vlan3: entered promiscuous mode
[  179.953567][T11317] bond23: entered promiscuous mode
[  179.956124][T11317] vlan3: entered allmulticast mode
[  179.958421][T11317] bond23: entered allmulticast mode
[  179.972412][T11317] bond23: (slave gretap1): making interface the new active one
[  179.975484][T11317] gretap1: entered promiscuous mode
[  179.977827][T11317] gretap1: entered allmulticast mode
[  179.981565][T11317] bond23: (slave gretap1): Enslaving as an active interface with an up link
[  180.532457][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1504'.
[  180.551737][T11339] Bluetooth: hci1: command 0x0406 tx timeout
[  180.551760][T11273] Bluetooth: hci0: command 0x0c20 tx timeout
[  180.853993][T11368] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1513'.
[  180.897594][T11370] validate_nla: 1 callbacks suppressed
[  180.897604][T11370] netlink: 'syz.1.1514': attribute type 1 has an invalid length.
[  180.902686][T11371] bond20: (slave wlan0): Releasing active interface
[  180.916752][T11370] 8021q: adding VLAN 0 to HW filter on device bond24
[  180.971519][T11376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1515'.
[  180.977380][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1515'.
[  181.003997][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'.
[  181.007826][T11381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'.
[  181.012500][T11381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1516'.
[  181.022398][T11382] 8021q: adding VLAN 0 to HW filter on device bond25
[  181.153057][T11391] vlan3: left promiscuous mode
[  181.154687][T11391] bond23: left promiscuous mode
[  181.156447][T11391] gretap1: left promiscuous mode
[  181.158251][T11391] vlan3: left allmulticast mode
[  181.162442][T11391] bond23: left allmulticast mode
[  181.164094][T11391] gretap1: left allmulticast mode
[  181.178883][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'.
[  181.295149][T11404] vxcan1 speed is unknown, defaulting to 1000
[  181.530403][T11427] netlink: 'syz.2.1528': attribute type 1 has an invalid length.
[  181.721040][T11438] netlink: 'syz.2.1533': attribute type 1 has an invalid length.
[  181.738269][T11438] 8021q: adding VLAN 0 to HW filter on device bond21
[  181.751625][T11438] bond19: (slave wlan0): Releasing active interface
[  181.762127][T11438] bond21: (slave wlan0): Enslaving as an active interface with a down link
[  181.875318][T11453] vxcan1 speed is unknown, defaulting to 1000
[  181.880199][T11454] bond23: (slave gretap1): Releasing active interface
[  181.948425][T11462] netlink: 'syz.0.1540': attribute type 4 has an invalid length.
[  181.982395][T11468] tipc: Can't bind to reserved service type 1
[  181.985819][T11468] netlink: 'syz.0.1541': attribute type 5 has an invalid length.
[  182.010044][T11468] vlan0: entered allmulticast mode
[  182.104311][T11460] netlink: 'syz.1.1539': attribute type 1 has an invalid length.
[  182.211580][T11482] netlink: 'syz.0.1544': attribute type 1 has an invalid length.
[  182.234774][T11482] 8021q: adding VLAN 0 to HW filter on device bond20
[  182.258397][T11482] bond19: (slave wlan0): Releasing active interface
[  182.266639][T11482] bond20: (slave wlan0): Enslaving as an active interface with a down link
[  182.288442][T11482] vlan0: entered allmulticast mode
[  182.296780][T11482] bond20: (slave vlan0): Opening slave failed
[  182.349498][T11489] vxcan3: entered allmulticast mode
[  182.562955][T11509] IPVS: stopping backup sync thread 11257 ...
[  182.568099][T11507] vxcan1 speed is unknown, defaulting to 1000
[  182.825993][T11524] batadv1: entered allmulticast mode
[  182.830626][T11524] 8021q: adding VLAN 0 to HW filter on device batadv1
[  183.195391][T11537] batman_adv: batadv0: Adding interface: ip6gretap3
[  183.198343][T11537] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.232256][T11537] batman_adv: batadv0: Not using interface ip6gretap3 (retrying later): interface not active
[  183.570682][T11561] netlink: 'syz.0.1564': attribute type 4 has an invalid length.
[  183.777143][T11566] vlan0: entered promiscuous mode
[  183.846884][T11572] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  183.851728][T11573] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  184.092833][T11587] delete_channel: no stack
[  184.135219][T11592] tls_set_device_offload_rx: netdev not found
[  184.378254][T11618] netlink: 'syz.0.1585': attribute type 7 has an invalid length.
[  184.384342][T11618] netlink: 'syz.0.1585': attribute type 8 has an invalid length.
[  184.406984][T11619] vxcan1 speed is unknown, defaulting to 1000
[  184.587668][T11638] __nla_validate_parse: 86 callbacks suppressed
[  184.587682][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'.
[  184.666148][T11640] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address
[  184.673885][T11640] bond21: (slave vxcan3): Error -95 calling set_mac_address
[  184.800587][T11647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.808161][T11647] syzkaller0: entered promiscuous mode
[  184.811761][T11647] syzkaller0: entered allmulticast mode
[  184.826859][T11647] tipc: Resetting bearer <eth:syzkaller0>
[  184.836779][T11647] tipc: Disabling bearer <eth:syzkaller0>
[  184.885638][T11654] geneve4: entered promiscuous mode
[  184.888242][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.894405][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.897424][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.921595][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.080347][T11661] openvswitch: netlink: IP tunnel TTL not specified.
[  185.269250][T11679] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1605'.
[  185.272661][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  185.274827][T11679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1605'.
[  185.391275][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'.
[  185.481353][T11703] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1614'.
[  185.483130][T11700] 8021q: adding VLAN 0 to HW filter on device bond22
[  185.510389][T11700] bond21: (slave wlan0): Releasing active interface
[  185.518963][T11700] bond22: (slave wlan0): Enslaving as an active interface with a down link
[  185.747975][T11733] 8021q: adding VLAN 0 to HW filter on device bond22
[  185.768237][T11733] bond22: (slave geneve4): making interface the new active one
[  185.772835][T11733] bond22: (slave geneve4): Enslaving as an active interface with an up link
[  185.776644][T11720] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1621'.
[  185.782998][ T8060] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.789352][ T8060] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.794502][ T8060] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.797618][ T8060] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.833317][T11729] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1621'.
[  185.924251][T11740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1626'.
[  186.032280][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'.
[  186.065346][T11758] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1632'.
[  186.339150][T11774] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  186.343700][T11773] IPVS: stopping backup sync thread 11774 ...
[  187.104075][T11814] validate_nla: 6 callbacks suppressed
[  187.104089][T11814] netlink: 'syz.1.1648': attribute type 10 has an invalid length.
[  187.114874][T11814] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.118648][T11814] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.137955][T11816] netlink: 'syz.0.1649': attribute type 1 has an invalid length.
[  187.257867][T11821] netlink: 'syz.0.1651': attribute type 1 has an invalid length.
[  187.293970][T11821] bond23 (unregistering): Released all slaves
[  187.305460][T11824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.308524][T11824] IPv6: NLM_F_CREATE should be set when creating new route
[  187.536063][T11838] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  187.596003][T11838] vxcan1 speed is unknown, defaulting to 1000
[  187.906616][T11845] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.957680][T11850] netlink: 'syz.0.1660': attribute type 5 has an invalid length.
[  187.964527][T11845] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.975641][T11850] geneve5: entered promiscuous mode
[  187.977750][T11850] geneve5: entered allmulticast mode
[  187.981727][ T5854] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  187.985154][ T5854] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  188.017272][T11845] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.024970][T11845] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  188.041009][T11852] netlink: 'syz.1.1662': attribute type 6 has an invalid length.
[  188.076389][T11845] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.089967][T11845] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  188.194739][ T5854] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  188.197668][ T5854] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  188.216862][ T5854] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  188.219668][ T5854] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  188.234015][ T6162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  188.236753][ T6162] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  188.246658][ T6162] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  188.250277][ T6162] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  188.287305][T11857] vxcan1 speed is unknown, defaulting to 1000
[  188.433008][T11864] IPVS: Unknown mcast interface: veth1_to_bridge
[  188.587368][T11878] netlink: 'syz.2.1669': attribute type 1 has an invalid length.
[  188.602409][T11878] 8021q: adding VLAN 0 to HW filter on device bond23
[  188.611402][T11878] bond22: (slave wlan0): Releasing active interface
[  188.617178][T11878] bond23: (slave wlan0): Enslaving as an active interface with a down link
[  188.645018][T11881] vxcan1 speed is unknown, defaulting to 1000
[  188.805408][T11888] netlink: 'syz.2.1671': attribute type 16 has an invalid length.
[  188.808722][T11888] netlink: 'syz.2.1671': attribute type 17 has an invalid length.
[  188.817481][T11888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.845168][T11924] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  189.889582][T11924] bond26: (slave vxcan5): The slave device specified does not support setting the MAC address
[  189.896875][T11924] bond26: (slave vxcan5): Error -95 calling set_mac_address
[  189.910330][T11927] netlink: 'syz.2.1686': attribute type 22 has an invalid length.
[  189.913526][T11927] __nla_validate_parse: 44 callbacks suppressed
[  189.913539][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'.
[  189.927378][ T5872] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.927407][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'.
[  189.930173][ T5872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.936308][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  189.943709][ T5872] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  189.953416][T11924] gretap2: entered promiscuous mode
[  189.966493][T11924] bond26: (slave gretap2): making interface the new active one
[  189.971456][T11924] bond26: (slave gretap2): Enslaving as an active interface with an up link
[  189.983418][T11924] macvlan7: entered promiscuous mode
[  189.985608][T11924] macvlan7: entered allmulticast mode
[  189.991540][T11924] bond26: entered promiscuous mode
[  189.994371][T11924] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  190.001171][T11924] bond26: (slave macvlan7): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  190.006768][T11924] bond26: left promiscuous mode
[  190.108996][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'.
[  190.126833][T11940] vxcan1 speed is unknown, defaulting to 1000
[  190.146669][T11947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1694'.
[  190.238826][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'.
[  190.249762][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'.
[  190.259990][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1696'.
[  190.345056][T11952] vxcan1 speed is unknown, defaulting to 1000
[  190.614258][T11966] vxcan1 speed is unknown, defaulting to 1000
[  190.964884][T11971] pim6reg1: entered allmulticast mode
[  190.968271][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1699'.
[  190.987785][T11973] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  191.066911][T11975] vxcan1 speed is unknown, defaulting to 1000
[  191.545244][T12002] vxcan1 speed is unknown, defaulting to 1000
[  191.594278][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1708'.
[  191.982022][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1710'.
[  192.271284][T12035] !: renamed from dummy0
[  192.381949][T12035] vxcan1 speed is unknown, defaulting to 1000
[  192.485189][T12040] dvmrp0: entered allmulticast mode
[  192.600070][T12048] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  192.606991][T12046] IPVS: stopping backup sync thread 12048 ...
[  192.990194][T12075] vxcan1 speed is unknown, defaulting to 1000
[  193.341716][T12100] validate_nla: 2 callbacks suppressed
[  193.341725][T12100] netlink: 'syz.1.1734': attribute type 1 has an invalid length.
[  193.342625][T12097] 8021q: adding VLAN 0 to HW filter on device bond23
[  193.387911][T12100] 8021q: adding VLAN 0 to HW filter on device bond28
[  193.449038][T12100] bond28: entered promiscuous mode
[  193.471884][T12100] vlan4: entered allmulticast mode
[  193.474049][T12100] vlan1: entered allmulticast mode
[  193.476177][T12100] veth0_vlan: entered allmulticast mode
[  193.546706][T12114] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  193.606304][T12120] netlink: 'syz.0.1738': attribute type 13 has an invalid length.
[  193.609573][T12120] netlink: 'syz.0.1738': attribute type 17 has an invalid length.
[  193.653495][T12120] 8021q: adding VLAN 0 to HW filter on device team0
[  193.659742][T12120] batman_adv: batadv0: Interface activated: dummy0
[  193.664805][T12120] batadv0: mtu less than device minimum
[  193.668229][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.673937][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.679280][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.684692][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.690100][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.695517][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.700943][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.706175][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.711716][T12120] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  193.776772][T12124] syz.2.1739 uses old SIOCAX25GETINFO
[  193.797823][T12122] vxcan1 speed is unknown, defaulting to 1000
[  194.150195][T12141] vxcan1 speed is unknown, defaulting to 1000
[  194.242959][T12158] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  194.247554][T12157] IPVS: stopping backup sync thread 12158 ...
[  194.460488][T12168] IPVS: Unknown mcast interface: veth1_to_bridge
[  194.635452][T12181] netlink: 'syz.1.1751': attribute type 16 has an invalid length.
[  194.638029][T12181] netlink: 'syz.1.1751': attribute type 17 has an invalid length.
[  194.678026][T12181] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.682407][T12181] 8021q: adding VLAN 0 to HW filter on device team0
[  195.153087][T12190] vxcan1 speed is unknown, defaulting to 1000
[  195.395925][T12198] can: request_module (can-proto-3) failed.
[  195.428522][T12203] netlink: 'syz.2.1758': attribute type 11 has an invalid length.
[  195.433589][T12203] __nla_validate_parse: 16 callbacks suppressed
[  195.433597][T12203] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1758'.
[  195.476360][T12206] vxcan1 speed is unknown, defaulting to 1000
[  195.646063][T12216] netlink: 'syz.0.1762': attribute type 1 has an invalid length.
[  195.764055][T12225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  195.864158][T12230] vxcan1 speed is unknown, defaulting to 1000
[  195.996361][T12241] IPVS: Unknown mcast interface: veth1_to_bridge
[  196.168804][T12249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1772'.
[  196.383709][T12255] IPVS: Unknown mcast interface: veth1_to_bridge
[  196.548600][T12265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1777'.
[  196.556742][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'.
[  196.599647][T12274] netlink: 'syz.1.1779': attribute type 1 has an invalid length.
[  196.603328][T12277] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  196.607666][T12276] IPVS: stopping backup sync thread 12277 ...
[  196.646583][T12274] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1779'.
[  196.652112][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1779'.
[  196.657780][T12274] 8021q: adding VLAN 0 to HW filter on device bond29
[  196.809760][T12286] vxcan1 speed is unknown, defaulting to 1000
[  196.906067][T12288] netlink: 'syz.1.1783': attribute type 1 has an invalid length.
[  196.948162][T12300] netlink: 'syz.0.1787': attribute type 1 has an invalid length.
[  196.989659][T12300] 8021q: adding VLAN 0 to HW filter on device bond24
[  197.006240][T12300] bond20: (slave wlan0): Releasing active interface
[  197.016143][T12300] bond24: (slave wlan0): Enslaving as an active interface with a down link
[  197.045986][T12300] bond24: (slave vlan0): Opening slave failed
[  197.174119][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'.
[  197.422428][T12333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'.
[  197.439521][T12331] vxcan1 speed is unknown, defaulting to 1000
[  197.474727][T12335] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1793'.
[  197.481474][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'.
[  197.586254][T12327] vxcan1 speed is unknown, defaulting to 1000
[  197.843078][T12345] 8021q: adding VLAN 0 to HW filter on device bond24
[  197.846261][T12345] bridge6: port 1(bond24) entered blocking state
[  197.850183][T12345] bridge6: port 1(bond24) entered disabled state
[  197.854328][T12345] bond24: entered allmulticast mode
[  197.861237][T12345] bridge6: port 1(bond24) entered blocking state
[  197.863968][T12345] bridge6: port 1(bond24) entered forwarding state
[  198.278390][ T1091] bridge6: port 1(bond24) entered disabled state
[  198.377553][T12375] validate_nla: 1 callbacks suppressed
[  198.377566][T12375] netlink: 'syz.0.1802': attribute type 16 has an invalid length.
[  198.383967][T12375] netlink: 'syz.0.1802': attribute type 17 has an invalid length.
[  198.505752][T12382] netlink: 'syz.1.1806': attribute type 1 has an invalid length.
[  198.524825][T12382] 8021q: adding VLAN 0 to HW filter on device bond30
[  198.534229][T12382] bond30: (slave wlan0): Enslaving as an active interface with a down link
[  198.768250][T12395] IPVS: Unknown mcast interface: veth1_to_bridge
[  198.771882][T12395] IPVS: Unknown mcast interface: veth1_to_bridge
[  198.775143][T12395] IPVS: Unknown mcast interface: veth1_to_bridge
[  198.778032][T12395] IPVS: Unknown mcast interface: veth1_to_bridge
[  198.824751][T12400] IPVS: Unknown mcast interface: veth1_to_bridge
[  199.021712][T12404] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  199.044098][T12404] 8021q: adding VLAN 0 to HW filter on device bond31
[  199.056304][T12404] bond30: (slave wlan0): Releasing active interface
[  199.065230][T12404] bond31: (slave wlan0): Enslaving as an active interface with a down link
[  199.185115][T12414] netlink: 'syz.0.1816': attribute type 10 has an invalid length.
[  199.261097][T12420] IPVS: Unknown mcast interface: veth1_to_bridge
[  199.346363][T12426] vxcan1 speed is unknown, defaulting to 1000
[  199.420782][T12432] netlink: 'syz.0.1822': attribute type 16 has an invalid length.
[  199.424174][T12432] netlink: 'syz.0.1822': attribute type 17 has an invalid length.
[  199.434541][T12432] net_ratelimit: 15 callbacks suppressed
[  199.434549][T12432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  199.956220][T12439] nicvf0: entered promiscuous mode
[  199.959012][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  199.962646][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  199.967411][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  199.972409][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  199.993222][T12441] netlink: 'syz.1.1826': attribute type 1 has an invalid length.
[  200.018486][T12441] 8021q: adding VLAN 0 to HW filter on device bond32
[  200.031861][T12441] bond31: (slave wlan0): Releasing active interface
[  200.038850][T12441] bond32: (slave wlan0): Enslaving as an active interface with a down link
[  200.133495][T12446] vxcan1 speed is unknown, defaulting to 1000
[  200.289187][T12457] xfrm0: entered promiscuous mode
[  200.291534][T12457] xfrm0: entered allmulticast mode
[  200.302461][    C0] vcan0: j1939_tp_rxtimer: 0xffff888042727400: rx timeout, send abort
[  200.307469][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888042727400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  200.367030][T12459] netlink: 'syz.0.1831': attribute type 9 has an invalid length.
[  200.602904][T12468] __nla_validate_parse: 12 callbacks suppressed
[  200.602919][T12468] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1833'.
[  200.698050][T12483] IPVS: stopping backup sync thread 12484 ...
[  200.703378][T12484] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  200.777922][T12490] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1838'.
[  201.079614][T12510] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  201.079668][T12509] IPVS: stopping backup sync thread 12510 ...
[  201.083978][T12506] vxcan1 speed is unknown, defaulting to 1000
[  201.092282][T12508] netlink: 'syz.0.1845': attribute type 1 has an invalid length.
[  201.137820][T12513] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  201.144785][T12512] IPVS: stopping backup sync thread 12513 ...
[  201.445837][T12527] veth1_to_hsr: left allmulticast mode
[  201.448372][T12527] veth1_to_hsr: left promiscuous mode
[  201.480057][ T6162] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.484121][ T6162] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.487900][ T6162] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.492447][ T6162] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.496296][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'.
[  201.500249][ T6162] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.506261][ T6162] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.514060][ T6162] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  201.530252][ T6162] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.617120][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'.
[  201.742840][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'.
[  201.816501][T12556] bond0: Error: Cannot enslave bond to itself.
[  201.921919][T12568] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  201.921932][T12566] IPVS: stopping backup sync thread 12568 ...
[  201.934622][T12569] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1860'.
[  202.025529][T12579] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  202.117411][T12596] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1868'.
[  202.123586][T12592] netlink: 572 bytes leftover after parsing attributes in process `syz.2.1867'.
[  202.157944][T12598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1869'.
[  202.218332][T12608] veth1_to_bond: entered allmulticast mode
[  202.232587][T12607] veth1_to_bond: left allmulticast mode
[  202.269371][T12611] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1872'.
[  202.465346][T12625] !: renamed from dummy0
[  202.868363][T12654] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR
[  203.089196][T12680] 8021q: adding VLAN 0 to HW filter on device bond33
[  203.101502][T12680] bond32: (slave wlan0): Releasing active interface
[  203.107892][T12680] bond33: (slave wlan0): Enslaving as an active interface with a down link
[  203.214823][T12690] vxcan5: entered allmulticast mode
[  203.593322][T12710] vxcan1 speed is unknown, defaulting to 1000
[  204.675826][T12734] vxcan1 speed is unknown, defaulting to 1000
[  205.916415][T12793] __nla_validate_parse: 11 callbacks suppressed
[  205.916430][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1918'.
[  206.085981][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'.
[  206.107212][T12805] 8021q: adding VLAN 0 to HW filter on device bond25
[  206.131854][T12805] bond25: (slave batadv2): Opening slave failed
[  206.341321][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'.
[  206.485959][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'.
[  206.577358][T12853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.584316][T12853] syzkaller0: entered promiscuous mode
[  206.586939][T12853] syzkaller0: entered allmulticast mode
[  206.676093][T12853] tipc: Resetting bearer <eth:syzkaller0>
[  206.683165][T12852] tipc: Resetting bearer <eth:syzkaller0>
[  206.694276][T12852] tipc: Disabling bearer <eth:syzkaller0>
[  206.699674][T12862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1940'.
[  206.786198][T12866] vxcan1 speed is unknown, defaulting to 1000
[  206.817993][T12872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1940'.
[  207.064222][T12881] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1945'.
[  207.100173][T12883] validate_nla: 3 callbacks suppressed
[  207.100187][T12883] netlink: 'syz.2.1946': attribute type 1 has an invalid length.
[  207.105916][T12883] netlink: 'syz.2.1946': attribute type 1 has an invalid length.
[  207.122945][T12883] netlink: 'syz.2.1946': attribute type 1 has an invalid length.
[  207.130087][T12884] netlink: 'syz.2.1946': attribute type 1 has an invalid length.
[  207.203423][T12889] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  207.333076][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'.
[  207.594618][T12921] bridge0: entered allmulticast mode
[  207.646274][T12929] C: entered allmulticast mode
[  207.650339][T12929] C: left allmulticast mode
[  207.696891][T12937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.699341][T12937] IPv6: NLM_F_CREATE should be set when creating new route
[  207.757756][T12934] vxcan1 speed is unknown, defaulting to 1000
[  207.948499][T12958] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004
[  208.227611][T12973] vxcan1 speed is unknown, defaulting to 1000
[  208.249783][T12977] netlink: 'syz.0.1973': attribute type 10 has an invalid length.
[  208.466836][T12979] vxcan1 speed is unknown, defaulting to 1000
[  208.695132][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1976'.
[  208.863262][T12988] netlink: 'syz.2.1975': attribute type 6 has an invalid length.
[  209.164167][T13011] netlink: 'syz.1.1983': attribute type 1 has an invalid length.
[  209.226375][T13011] 8021q: adding VLAN 0 to HW filter on device bond34
[  209.259113][T13007] bond34: (slave veth5): Enslaving as an active interface with a down link
[  209.328806][T13007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.335455][T13007] bond34: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  209.370979][T13020] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  209.375396][T13017] IPVS: stopping backup sync thread 13020 ...
[  209.512619][T13031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1988'.
[  209.625403][T13027] vxcan1 speed is unknown, defaulting to 1000
[  209.846388][T13036] vxcan1 speed is unknown, defaulting to 1000
[  209.874965][T13052] tunl0: entered allmulticast mode
[  210.119906][T13063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.535106][T13103] netlink: 'syz.2.2012': attribute type 13 has an invalid length.
[  210.538529][T13103] netlink: 'syz.2.2012': attribute type 17 has an invalid length.
[  210.671261][T13103] 8021q: adding VLAN 0 to HW filter on device team0
[  210.691023][T13103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.716715][T13107] vti0: entered promiscuous mode
[  210.859290][T13117] netlink: 'syz.0.2016': attribute type 1 has an invalid length.
[  210.882735][T13117] 8021q: adding VLAN 0 to HW filter on device bond25
[  210.915211][T13117] bond24: (slave wlan0): Releasing active interface
[  210.920970][T13117] bond25: (slave wlan0): Opening slave failed
[  210.949607][T13117] bond25: (slave vlan0): Opening slave failed
[  211.025759][T13123] __nla_validate_parse: 3 callbacks suppressed
[  211.025774][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'.
[  211.158339][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'.
[  211.161497][T13140] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  211.173110][T13141] netlink: 468 bytes leftover after parsing attributes in process `syz.1.2020'.
[  211.181454][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[  211.281555][T13142] batman_adv: batadv0: Interface deactivated: dummy0
[  211.287260][T13142] xfrm0: left promiscuous mode
[  211.289217][T13142] xfrm0: left allmulticast mode
[  211.307135][T13142] geneve5: left promiscuous mode
[  211.309223][T13142] geneve5: left allmulticast mode
[  211.319184][T13142] vti0: left promiscuous mode
[  211.324139][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  211.328713][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.332641][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  211.335713][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.338659][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  211.342886][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.346863][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  211.350007][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  211.369596][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'.
[  211.379688][T13154] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2023'.
[  211.396092][T13154] 8021q: adding VLAN 0 to HW filter on device team0
[  211.523396][T13162] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2026'.
[  211.527192][T13162] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2026'.
[  211.924632][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'.
[  211.939049][T13136] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  211.955067][T13180] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2033'.
[  212.044515][T13183] bond35: (slave vxcan7): The slave device specified does not support setting the MAC address
[  212.049497][T13183] bond35: (slave vxcan7): Error -95 calling set_mac_address
[  212.155328][T13195] vxcan1 speed is unknown, defaulting to 1000
[  212.199566][T13193] syzkaller0: entered promiscuous mode
[  212.208219][T13193] syzkaller0: entered allmulticast mode
[  212.221962][T13188] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  212.225294][T13188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.468678][T13210] xfrm1: entered promiscuous mode
[  212.471081][T13210] xfrm1: entered allmulticast mode
[  212.750400][T13233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  212.840105][T13242] IPVS: Unknown mcast interface: veth1_to_bridge
[  213.126016][T13269] validate_nla: 8 callbacks suppressed
[  213.126032][T13269] netlink: 'syz.0.2061': attribute type 4 has an invalid length.
[  213.132025][T13271] netlink: 'syz.0.2061': attribute type 4 has an invalid length.
[  213.138368][T13270] netlink: 'syz.1.2062': attribute type 4 has an invalid length.
[  213.402493][T13299] IPVS: Unknown mcast interface: veth1_to_bridge
[  213.457590][T13303] IPVS: Unknown mcast interface: veth1_to_bridge
[  213.555990][T13317] netlink: 'syz.0.2076': attribute type 4 has an invalid length.
[  213.578404][T13323] netlink: 'syz.0.2077': attribute type 1 has an invalid length.
[  213.615802][T13323] bond26: entered promiscuous mode
[  213.620328][T13323] bond26: entered allmulticast mode
[  213.622816][T13323] 8021q: adding VLAN 0 to HW filter on device bond26
[  213.673747][T13326] vxcan1 speed is unknown, defaulting to 1000
[  213.894257][T13328] vxcan1 speed is unknown, defaulting to 1000
[  214.057441][T13337] netlink: 'syz.2.2078': attribute type 6 has an invalid length.
[  214.604837][T13366] bond23: (slave wlan0): Releasing active interface
[  214.609709][T13368] netlink: 'syz.1.2090': attribute type 1 has an invalid length.
[  214.651585][T13368] bond36: (slave gretap3): making interface the new active one
[  214.654678][T13368] bond36: (slave gretap3): Enslaving as an active interface with an up link
[  214.782000][T13384] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  214.786651][T13382] IPVS: stopping backup sync thread 13384 ...
[  214.792479][T13380] nbd: socks must be embedded in a SOCK_ITEM attr
[  214.802045][T13380] block nbd1: shutting down sockets
[  215.215706][T13414] netlink: 'syz.2.2102': attribute type 1 has an invalid length.
[  215.246653][T13414] vlan0: entered allmulticast mode
[  215.248773][T13414] bond27: entered allmulticast mode
[  215.283492][ T8428] smc: removing ib device syz2
[  215.357882][T13417] netlink: 'syz.1.2103': attribute type 1 has an invalid length.
[  215.384811][T13417] 8021q: adding VLAN 0 to HW filter on device bond37
[  215.912745][T13438] syzkaller0: entered promiscuous mode
[  215.915230][T13438] syzkaller0: entered allmulticast mode
[  216.092148][T13417] delete_channel: no stack
[  216.318369][T13448] netlink: 'syz.1.2111': attribute type 10 has an invalid length.
[  216.964842][T13440] batman_adv: batadv0: Removing interface: dummy0
[  216.978837][T13446] bond33: (slave wlan0): Releasing active interface
[  216.982755][T13446] bond26: (slave gretap2): Releasing active interface
[  217.003722][T13446] bond34: (slave veth5): Releasing active interface
[  217.009575][T13446] bond36: (slave gretap3): Releasing active interface
[  217.018625][T13452] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  217.045762][T13449] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  217.052920][T13449] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  217.089401][T13457] __nla_validate_parse: 24 callbacks suppressed
[  217.089411][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'.
[  217.133092][T13461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2117'.
[  217.536291][T13497] syzkaller0: entered promiscuous mode
[  217.538075][T13497] syzkaller0: entered allmulticast mode
[  217.541679][T13497] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  217.585728][T13501] tap0: tun_chr_ioctl cmd 1074025680
[  217.589529][T13501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.598586][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2130'.
[  217.614269][T13501] D: renamed from syzkaller0
[  217.616717][T13501] tipc: Disabling bearer <eth:syzkaller0>
[  217.728941][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'.
[  217.844552][T13514] netlink: 184656 bytes leftover after parsing attributes in process `syz.2.2135'.
[  217.945740][T13523] veth3: entered promiscuous mode
[  217.950105][T13523] bond14: (slave geneve3): Releasing active interface
[  217.953345][T13523] bond20: (slave gretap1): Releasing active interface
[  217.955752][T13523] gretap1: left allmulticast mode
[  217.961909][T13523] batman_adv: batadv0: Removing interface: ip6gretap3
[  217.965522][T13523] bond24: left allmulticast mode
[  217.967627][T13523] bridge6: port 1(bond24) entered disabled state
[  218.212582][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'.
[  218.304435][T13570] bond27: entered promiscuous mode
[  218.306268][T13570] bond27: entered allmulticast mode
[  218.308193][T13570] 8021q: adding VLAN 0 to HW filter on device bond27
[  218.328965][T13571] bond28: entered promiscuous mode
[  218.331826][T13571] bond28: entered allmulticast mode
[  218.333870][T13571] 8021q: adding VLAN 0 to HW filter on device bond28
[  218.525009][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'.
[  218.558952][T13588] 8021q: adding VLAN 0 to HW filter on device bond29
[  218.583986][T13588] bond29: (slave batadv1): Opening slave failed
[  218.786198][T13597] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2156'.
[  219.206357][T13603] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.702521][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  219.712338][T13609] validate_nla: 1 callbacks suppressed
[  219.712347][T13609] netlink: 'syz.2.2160': attribute type 1 has an invalid length.
[  219.716701][T13609] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2160'.
[  219.822036][T13622] netlink: 'syz.1.2162': attribute type 1 has an invalid length.
[  219.824544][T13622] netlink: 'syz.1.2162': attribute type 1 has an invalid length.
[  219.842760][T13628] netlink: 'syz.0.2164': attribute type 7 has an invalid length.
[  219.868884][T13628] : entered promiscuous mode
[  219.915187][T13639] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  219.919498][T13638] netlink: 'syz.0.2165': attribute type 1 has an invalid length.
[  219.954351][T13642] IPVS: Unknown mcast interface: veth1_to_bridge
[  219.987009][T13645] netlink: 'syz.2.2163': attribute type 16 has an invalid length.
[  219.992789][T13645] netlink: 'syz.2.2163': attribute type 17 has an invalid length.
[  220.019633][T13648] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  220.027919][T13644] IPVS: stopping backup sync thread 13648 ...
[  220.033506][T13647] netlink: 'syz.1.2169': attribute type 3 has an invalid length.
[  220.122109][T13650] netlink: 'syz.1.2170': attribute type 1 has an invalid length.
[  220.134239][T13650] 8021q: adding VLAN 0 to HW filter on device bond38
[  220.145201][T13650] bond38: (slave gretap4): making interface the new active one
[  220.148257][T13650] bond38: (slave gretap4): Enslaving as an active interface with an up link
[  220.327004][T13664] sctp: [Deprecated]: syz.0.2176 (pid 13664) Use of int in max_burst socket option deprecated.
[  220.327004][T13664] Use struct sctp_assoc_value instead
[  220.340991][T13664] netlink: 'syz.0.2176': attribute type 1 has an invalid length.
[  220.473744][T13678] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  220.478012][T13677] IPVS: stopping backup sync thread 13678 ...
[  220.600726][T13684] bond39: (slave geneve3): making interface the new active one
[  220.604604][T13684] bond39: (slave geneve3): Enslaving as an active interface with an up link
[  220.607825][T12183] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  220.613091][T12183] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  220.623426][T13684] macsec2: entered promiscuous mode
[  220.625261][T13684] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  220.628516][T13684] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  220.639266][T12183] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  220.646732][T12183] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  220.742405][T13710] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  220.746710][T13696] IPVS: stopping backup sync thread 13710 ...
[  221.240938][T13738] 8021q: adding VLAN 0 to HW filter on device team0
[  221.244861][T13738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  222.867486][T13786] __nla_validate_parse: 17 callbacks suppressed
[  222.867496][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2210'.
[  222.918557][T13791] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2210'.
[  222.994336][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'.
[  223.023515][T13799] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2215'.
[  223.126317][T13806] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2219'.
[  223.154505][T13810] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2221'.
[  223.157503][T13810] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2221'.
[  223.265290][T13822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.279119][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'.
[  223.281124][T13823] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2225'.
[  223.399145][T13834] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  223.405505][T13832] IPVS: stopping backup sync thread 13834 ...
[  223.432666][T13835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2228'.
[  223.565310][T13841] openvswitch: netlink: Invalid VLAN frame
[  223.962451][T13871] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001
[  224.426805][T13894] IPVS: stopping backup sync thread 13895 ...
[  224.429465][T13895] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  224.816536][T13904] validate_nla: 13 callbacks suppressed
[  224.816547][T13904] netlink: 'syz.0.2248': attribute type 2 has an invalid length.
[  224.921703][T13913] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  225.183253][T13936] 8021q: adding VLAN 0 to HW filter on device bond30
[  225.191780][T13936] bond22: (slave geneve4): Releasing active interface
[  225.416863][T13953] openvswitch: netlink: IPv6 tunnel dst address is zero
[  225.469549][T13956] netlink: 'syz.0.2262': attribute type 16 has an invalid length.
[  225.476428][T13956] netlink: 'syz.0.2262': attribute type 17 has an invalid length.
[  225.529379][T13956] 8021q: adding VLAN 0 to HW filter on device team0
[  225.537862][T13956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.070076][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  226.183901][T13967] netlink: 'syz.1.2267': attribute type 1 has an invalid length.
[  226.343945][T13978] netlink: 'syz.0.2272': attribute type 1 has an invalid length.
[  226.358438][T13978] 8021q: adding VLAN 0 to HW filter on device bond31
[  226.371813][T13978] bond31: (slave bridge0): Enslaving as an active interface with an up link
[  226.378734][T13979] tunl0: left allmulticast mode
[  226.404786][T13979] vlan0: left promiscuous mode
[  226.407568][T13979] vxcan3: left allmulticast mode
[  226.410141][T13979] gretap2: left promiscuous mode
[  226.412118][T13979] bond28: left promiscuous mode
[  226.413878][T13979] vlan4: left allmulticast mode
[  226.415634][T13979] vlan1: left allmulticast mode
[  226.417612][T13979] veth0_vlan: left allmulticast mode
[  226.430351][T13979] nicvf0: left promiscuous mode
[  226.440310][T13979] vxcan5: left allmulticast mode
[  226.443840][T13979] bridge0: left allmulticast mode
[  226.466638][ T5872] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.470506][ T5872] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.476727][ T5872] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.482486][ T5872] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.485979][T13986] netlink: 'syz.0.2273': attribute type 12 has an invalid length.
[  226.492674][ T5872] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.495958][ T5872] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.499250][ T5872] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  226.506101][ T5872] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  226.668681][T14004] netlink: 'syz.1.2277': attribute type 1 has an invalid length.
[  226.859961][T14003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.675968][T14051] IPv6: sit2: Disabled Multicast RS
[  227.678987][T14051] sit2: entered allmulticast mode
[  227.738342][T14059] netlink: 'syz.0.2296': attribute type 1 has an invalid length.
[  227.769298][T14059] 8021q: adding VLAN 0 to HW filter on device bond32
[  227.777139][T14059] bond32: (slave wlan0): Opening slave failed
[  227.787339][T14059] vlan0: entered allmulticast mode
[  227.790984][T14059] bond32: (slave vlan0): Opening slave failed
[  227.985053][T14076] netlink: 'syz.1.2301': attribute type 21 has an invalid length.
[  227.988278][T14076] netlink: 'syz.1.2301': attribute type 22 has an invalid length.
[  227.996221][T14076] __nla_validate_parse: 24 callbacks suppressed
[  227.996233][T14076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2301'.
[  228.035044][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2304'.
[  228.122249][T14085] delete_channel: no stack
[  228.152005][T14093] wlan0: mtu greater than device maximum
[  228.196649][T14098] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2310'.
[  228.201993][T14098] unsupported nla_type 58
[  228.472639][T14047] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  228.475856][T14047] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  228.485473][T14047] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  228.487573][T14047] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  228.499657][T14047] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  228.505000][T14047] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  228.520355][T14047] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  228.525202][T14047] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  228.529054][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.2.2292 Not tainted syzkaller #0 PREEMPT(full) 
[  228.533085][T14047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  228.537112][T14047] RIP: 0010:klist_remove+0x14a/0x340
[  228.539227][T14047] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 d9 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea d8 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  228.546823][T14047] RSP: 0018:ffffc90002a57800 EFLAGS: 00010202
[  228.549214][T14047] RAX: 000000000000000b RBX: ffff88803f2ad640 RCX: 0000000000000000
[  228.551853][T14047] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  228.554356][T14047] RBP: ffffc90002a57900 R08: ffffffff8f8a1e83 R09: 1ffffffff1f143d0
[  228.557218][T14047] R10: dffffc0000000000 R11: fffffbfff1f143d1 R12: 0000000000000000
[  228.560105][T14047] R13: 1ffff110214bd28c R14: ffff88810a5e9460 R15: dffffc0000000000
[  228.563244][T14047] FS:  00007f557cea66c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  228.566573][T14047] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  228.568881][T14047] CR2: 00007fed1247bfc8 CR3: 0000000108fb6000 CR4: 00000000000006f0
[  228.571998][T14047] Call Trace:
[  228.573506][T14047]  <TASK>
[  228.574785][T14047]  ? __pfx_klist_remove+0x10/0x10
[  228.576885][T14047]  ? __pfx_kobject_move+0x10/0x10
[  228.578975][T14047]  ? do_raw_spin_unlock+0x4d/0x240
[  228.581151][T14047]  ? get_device_parent+0x366/0x3a0
[  228.583335][T14047]  device_move+0x193/0x700
[  228.585241][T14047]  hci_conn_del_sysfs+0xb8/0x170
[  228.587345][T14047]  hci_conn_del+0xc33/0x11b0
[  228.589340][T14047]  hci_conn_hash_flush+0x191/0x230
[  228.591475][T14047]  hci_dev_close_sync+0xaef/0x1330
[  228.593578][T14047]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  228.595870][T14047]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  228.598268][T14047]  hci_dev_do_close+0x2f/0x90
[  228.600116][T14047]  hci_rfkill_set_block+0x21d/0x2e0
[  228.602266][T14047]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  228.604608][T14047]  rfkill_set_block+0x1d2/0x440
[  228.606550][T14047]  rfkill_fop_write+0x44b/0x570
[  228.608489][T14047]  ? __pfx_rfkill_fop_write+0x10/0x10
[  228.610724][T14047]  ? security_file_permission+0x40/0x290
[  228.613044][T14047]  ? rw_verify_area+0x255/0x4d0
[  228.615099][T14047]  ? __lock_acquire+0xab9/0xd20
[  228.617115][T14047]  ? __pfx_rfkill_fop_write+0x10/0x10
[  228.619267][T14047]  vfs_write+0x27e/0xb30
[  228.620968][T14047]  ? __pfx_vfs_write+0x10/0x10
[  228.622928][T14047]  ? __fget_files+0x2a/0x420
[  228.624843][T14047]  ? __fget_files+0x2a/0x420
[  228.626447][T14047]  ? __fget_files+0x3a0/0x420
[  228.627917][T14047]  ? __fget_files+0x2a/0x420
[  228.629477][T14047]  ksys_write+0x145/0x250
[  228.630931][T14047]  ? __pfx_ksys_write+0x10/0x10
[  228.632837][T14047]  ? rcu_is_watching+0x15/0xb0
[  228.634618][T14047]  ? do_syscall_64+0xbe/0x3b0
[  228.636155][T14047]  do_syscall_64+0xfa/0x3b0
[  228.637647][T14047]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.639371][T14047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.641400][T14047]  ? exc_page_fault+0x9f/0xf0
[  228.643357][T14047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  228.645706][T14047] RIP: 0033:0x7f557bf8eba9
[  228.647562][T14047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  228.655332][T14047] RSP: 002b:00007f557cea6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  228.658629][T14047] RAX: ffffffffffffffda RBX: 00007f557c1d5fa0 RCX: 00007f557bf8eba9
[  228.661857][T14047] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005
[  228.665003][T14047] RBP: 00007f557c011e19 R08: 0000000000000000 R09: 0000000000000000
[  228.668299][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  228.671637][T14047] R13: 00007f557c1d6038 R14: 00007f557c1d5fa0 R15: 00007ffe566c6348
[  228.674954][T14047]  </TASK>
[  228.676039][T14047] Modules linked in:
[  228.677651][T14047] ---[ end trace 0000000000000000 ]---
[  228.683346][T14047] RIP: 0010:klist_remove+0x14a/0x340
[  228.685675][T14047] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 09 d9 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ea d8 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  228.693975][T14047] RSP: 0018:ffffc90002a57800 EFLAGS: 00010202
[  228.696486][T14047] RAX: 000000000000000b RBX: ffff88803f2ad640 RCX: 0000000000000000
[  228.699721][T14047] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  228.703103][T14047] RBP: ffffc90002a57900 R08: ffffffff8f8a1e83 R09: 1ffffffff1f143d0
[  228.706382][T14047] R10: dffffc0000000000 R11: fffffbfff1f143d1 R12: 0000000000000000
[  228.709580][T14047] R13: 1ffff110214bd28c R14: ffff88810a5e9460 R15: dffffc0000000000
[  228.713714][T14047] FS:  00007f557cea66c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  228.717360][T14047] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  228.720125][T14047] CR2: 00007fed1247bfc8 CR3: 0000000108fb6000 CR4: 00000000000006f0
[  228.723380][T14047] Kernel panic - not syncing: Fatal exception
[  228.726645][T14047] Kernel Offset: disabled
[  228.728508][T14047] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:27:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005f6f RDI=0000000000005f70 RBP=00000000000003f8 RSP=ffffc90002a57030
R8 =ffff8880217c0237 R9 =1ffff110042f8046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b00916 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f557cea66c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fed1247bfc8 CR3=0000000108fb6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000245 0000000038341d6c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=0000000000000271 0000000038346c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88810bf87000 RBP=1ffffffff1b7b28f RSP=ffffc90002e87670
R8 =ffffffff8fa3a637 R9 =0000000000000000 R10=ffffed10217f0c00 R11=fffffbfff1f474c7
R12=fffa80010bf86000 R13=fffa800000000000 R14=1ffffffff1b7b28d R15=0000000000000001
RIP=ffffffff8b78fffe RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fed1249d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fed117d7dac CR3=0000000037aba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=a0001000068b8004 0100000808060601 XMM03=060a748000080006 1000201000060171
XMM04=0000000000000000 0000000000000000 XMM05=000055557644e546 000055557644dfa0
XMM06=0000000000000000 0000000000000000 XMM07=0afc000800041000 141000060170f200
XMM08=10000a10003e1000 060a748000080006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
