last executing test programs:

2.147450543s ago: executing program 1 (id=2762):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socket$netlink(0x10, 0x3, 0x14)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800)
bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x1, 0x2, 0x8, 0x3, 0x280, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x7, r4}, 0x38)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}, 0x40480d5)
setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x100)
setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e24, @rand_addr=0x64010102}}]}, 0x110)
socket$kcm(0xa, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r10 = openat$cgroup_procs(r8, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f0000000300), 0x12)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0x0, 0x0, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
sendfile(r9, r9, 0x0, 0x10001)

2.047746076s ago: executing program 1 (id=2765):
r0 = socket$packet(0x11, 0x0, 0x300)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1e0101000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c0000000000c31f64d138743a5000000000000000000000020000000000000000000000070000000000001000000000000000000000000030000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000009007000000000000a000106000000000000000048000300"], 0x138}}, 0x20000000)

1.969345373s ago: executing program 1 (id=2766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=0x0], 0x7c}}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

1.96505857s ago: executing program 1 (id=2767):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pread64(r0, &(0x7f0000000000)=""/23, 0x17, 0x0) (async)
pread64(r0, &(0x7f0000000000)=""/23, 0x17, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000007112340000000000950000000000000060a8f3dec50da366fab00d29fd4a0752fd6ac5c8e150f868e2b4c3516de3f33a973bbff5f2db27fd373159b69e482ac8190d7fd41a28b26676de9c6747d9809766958b3b0206e0da197d1e88337e765d99055155517dc0c99fc0ae1e06fa7895abfed0d746e5854c0d7e4562e0e29741343765748aeb97a86c9352bd4f48930598c31a6a78cae3ffd5609c119263b2c0354f713941054322ebde4334eed63a736009f816b3760bedf0b3ca26574f1b82b71fd8fbbf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x88c1)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000002200)={0x7d, 0x1, 0xc, 0x3, 0x0, 0x81})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) (async)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r6, 0x0, 0x8040) (async)
sendmsg$inet(r6, 0x0, 0x8040)
close(r6) (async)
close(r6)
getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000"], 0x110}}, 0x800)
sendmsg$NFT_BATCH(r7, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'}) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x9, 'syz0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
socket(0x15, 0x5, 0x0)

1.844416207s ago: executing program 1 (id=2768):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r1=>0x0}, 0x30)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000240)="ce07a426a8d38479bdbb377e5c79c1f0c2e670aa5b4f5d48e64a197b7d11eaadfad234584c3a50b775c43a6b0aeab46c0c8c5c0e390f6e1ea9b761619193c84a1a30f7a636563d88533d0b06f6c5e0061a6383e040ca6f02bd0b556fe726763eda9a3d", &(0x7f00000003c0)=""/238, &(0x7f00000002c0)="07bda135987f9cb894f8cc0fcea715bd1463d0384a", &(0x7f0000000600)="79b593a033903a00d1c49b0e0da2ae6efa980b12a0912f6141ac95bfeb573de989a4219f3973c2b74ccf0d78006cf342d43c33cefd3b66632f052c168fce6b839b30555a68f7800f8bf4066963fc3e8b15295e6a59e288a3892f09899a8c9a7324eef36195ee38ef545d5b1731b4b7e174256d3e286e0a70cc0c730593cbd3e87fa1b4849220649bdd6d9bcb0b2c8ee94cbb82a243fcb8ab676e4b2ecd3f592cb6e6413f95ba025dfcf797eba2d06af3824c9dfc04ba5fe86759d50a3dd31ac90405b7a09d15d9328d243d", 0x3, r0, 0x4}, 0x38)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xbd}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r7=>0xffffffffffffffff, 0x5, 0x74a8, 0x10000})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00@\x00', @ANYRES16=r6, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYBLOB="0c0099000100000068000000"], 0x34}, 0x1, 0x0, 0x0, 0x830}, 0x24008000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20000000)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r8)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000480)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffe}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @private=0x7fffffff}}, 0xffffffff, 0x401, 0x101, 0x5, 0x80, 0xfffffffa, 0x9}, 0x9c)
sendmsg$SMC_PNETID_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000002000000090001007309"], 0x34}}, 0x0)
bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_RCVMTU(r11, 0x112, 0xd, &(0x7f0000000040)=0xfff8, &(0x7f0000000180)=0x2)

1.370197959s ago: executing program 0 (id=2769):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x884)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[], 0x114}], 0x1}, 0x2000c050)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newneigh={0x2c, 0x1c, 0x200, 0x70bd26, 0x25dfdbfc, {0x1c, 0x0, 0x0, r2, 0x10, 0x4, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_LINK_NETNSID={0x8, 0xa, 0xc7}]}, 0x2c}}, 0x48010)

1.250750687s ago: executing program 0 (id=2770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
syz_emit_ethernet(0x8a, &(0x7f0000000040)={@broadcast, @multicast, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2e, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x6e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@local}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0)

1.188921093s ago: executing program 0 (id=2771):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="e9be0d1a6e6dca638c6d9507c301a471b5d77a85d6eef5d566c391a4d9748f019181dd0e554ddc2ef94373e89df2e70bb1609114d7065cadca8b17130f4e4a72d33218ca3bea85adfcf713cf51da554588fd4b1ddd85897400811bcb6480493c7437635caaf8eed3f32de7e5bac1da18c5278e7aabb583b8e5d7", 0x7a}, 0x1, 0x0, 0x0, 0x24040001}, 0x20044806)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
close(0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2607040b020000002bbd7000fcdbdf25"], 0x10}}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r8, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x20000800)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0)
readv(r9, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)

600.527336ms ago: executing program 1 (id=2772):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x20}}, 0x50)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfffffeaa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r4 = socket$unix(0x1, 0x5, 0x0)
sendto$unix(r4, &(0x7f0000000080)="fc252de1ffe23526f583771b29bfb44ba61d13", 0x13, 0x4004014, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x1, 0x3, 0x0, 0x1, 0x0, 0x8}, 0x0, &(0x7f0000000200)={0x3ff, 0x100005, 0x0, 0x9, 0x0, 0x4, 0x7fffffff, 0x4}, 0x0, 0x0)
close(0x4)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r7, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x0)
sendmmsg$inet(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004)
socket$isdn(0x22, 0x2, 0x26)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)

327.365052ms ago: executing program 0 (id=2780):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async, rerun: 64)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r2, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x20, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040011}, 0xc010) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r7) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf2508000100050000000800010001000000080001000100000008000100000100"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x9, 0x200, 0xfff, 0x8, 0x8600, r11, 0x4dae, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @value=r12}, 0x50) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r6], 0x44}}, 0x0)

320.546203ms ago: executing program 0 (id=2782):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x10401, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x10000}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x50}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000))
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)

220.46958ms ago: executing program 0 (id=2783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0xff}, 0x32})
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x1, 0xfffffffe, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0x4, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb, 0x4}, 0x6, 0x3}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0xa4}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xf)
r7 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r7, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r8, 0x10, 0xc, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4c0b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40d2)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x22}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x85c)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c80140001"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)

158.204737ms ago: executing program 2 (id=2785):
unshare(0x2a020400) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="00003ac6b20000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x3505, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) (async)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x48014}, 0x4048005) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$sock(r5, &(0x7f0000003640), 0x0, 0x20040059) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16], 0x21c}}, 0x0) (async)
socket(0x1d, 0x2, 0x6) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x8, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='fsi_master_gpio_break\x00'}, 0x18) (async)
socket$netlink(0x10, 0x3, 0x0)

100.599851ms ago: executing program 2 (id=2786):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000000800014000000000080003400000000008000240000000000900010073797a30000000000900020073797a320000000005000740df000000140065e4000011000100"/148], 0x94}}, 0x0) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff2f63, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001600010027bd7000fbdbdf250a7880c8", @ANYRES32=0x0, @ANYBLOB="08000a0403000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x140)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB="00000000109445c8f02caeaccbd07ed6002d800c000180080016000600000008001c"], 0x3c}, 0x1, 0x0, 0x0, 0x24000025}, 0x0) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRESOCT=0x0, @ANYRESHEX=r3, @ANYRES16, @ANYBLOB="0e376a2d8d463da2303c2c5090417668d199ea1a337748ce8e70364f6cc60e25957e7c5b8e730383ece0e6a9f476394ef370b4ab322f9cd13ea95c20257b8cb8c00bb25fec025da05a02e9e17a3f35b9058bd00414cb7714d444cc96cd00de66ad636bf9f299874fef70eaa0", @ANYRES8=r3, @ANYRESOCT=0x0], 0x2c}}, 0x20000080)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
unshare(0x40000100) (rerun: 32)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000300)={0x1d, r7, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x3b)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000280))
socket$can_j1939(0x1d, 0x2, 0x7) (async)
sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x2, 0x1, 0x0, {0x7fffffff, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x8, 0x5}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xc, 0x1, 0xfff, 0xfff8, 0x400, 0x7fff, 0x7, 0x6252, 0x2, 0x9, 0x5, 0x8, 0x0, 0xef, 0x4, 0x3]}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x6, 0xf, 0xf462, 0x0, 0x5, 0x3ff, 0x7, 0xd, 0x7, 0x6, 0xfaba, 0x7, 0x5, 0xe8d, 0x200]}, @NL80211_ATTR_FILS_KEK={0x13, 0xf2, "b49f462173d34d03ce21d8ef81a2fe"}, @NL80211_ATTR_SSID={0x24, 0x34, @random="c68adee9e0ae1a1401a65bfa607133ff5bc295b7bad7c639cacfd8f515ca433b"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008880}, 0x4000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES32=r6], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x5, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'team0\x00'})

100.374582ms ago: executing program 2 (id=2787):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0x9}, {0x6, 0x0, 0x0, 0x8eb6}]})
write(r2, &(0x7f0000000000)="7438e828dcfb7be314e66a", 0xb)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x24}}, 0x48844)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884)

749.214µs ago: executing program 2 (id=2788):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="2400000016009fb2344655066e4bfdff09000000040000000c000a"], 0x24}}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xcd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000428"], 0x7c}}, 0x4000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x12, 0x0, 0x80, 0x2}})

350.308µs ago: executing program 2 (id=2789):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

0s ago: executing program 2 (id=2790):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8)
r2 = getpid()
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103"], 0x50}}, 0x4000850)
sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0)
sendmsg$AUDIT_SET(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x10, 0x70bd2b, 0x25dfdbfd, {0x5d, 0x1, 0x1, r2, 0x0, 0x5, 0x10000000, 0xc1d, 0x0, 0x7, 0xe86a}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4800)
bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
unshare(0x24020400)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000000)="06ff03076844268cb89e14f0080040e0ffff00febabec41177fb86dd1402e000030c62", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4)
getsockopt$sock_buf(r10, 0x1, 0x1a, 0x0, &(0x7f00000004c0))

kernel console output (not intermixed with test programs):

z.1.1116 (pid 9998) Use of struct sctp_assoc_value in delayed_ack socket option.
[  148.688451][ T9998] Use struct sctp_sack_info instead
[  148.697206][ T9998] sctp: [Deprecated]: syz.1.1116 (pid 9998) Use of int in maxseg socket option.
[  148.697206][ T9998] Use struct sctp_assoc_value instead
[  148.707884][ T9999] lo speed is unknown, defaulting to 1000
[  148.761630][T10000] geneve2: entered promiscuous mode
[  148.763331][T10000] geneve2: entered allmulticast mode
[  149.662107][T10039] siw: device registration error -23
[  149.884892][T10046] bond4: (slave gretap1): Releasing active interface
[  149.900604][T10046] bond5: (slave veth3): Releasing active interface
[  149.922677][T10046] bond6: (slave bridge5): Releasing active interface
[  149.935185][T10046] netlink: 'syz.0.1130': attribute type 10 has an invalid length.
[  149.940405][T10046] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  149.942991][T10046] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  149.946952][T10046] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  149.951930][T10046] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.955392][T10046] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.117591][T10061] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  150.200469][T10065] openvswitch: netlink: Key type 263 is out of range max 32
[  150.849221][T10072] lo speed is unknown, defaulting to 1000
[  151.009589][T10073] lo speed is unknown, defaulting to 1000
[  151.107758][T10085] macsec1: entered promiscuous mode
[  151.111824][T10085] team0: entered promiscuous mode
[  151.211199][T10092] __nla_validate_parse: 14 callbacks suppressed
[  151.211217][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'.
[  151.515532][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'.
[  151.602957][T10121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1149'.
[  151.605861][T10122] netlink: 'syz.1.1148': attribute type 16 has an invalid length.
[  151.610103][T10122] netlink: 'syz.1.1148': attribute type 17 has an invalid length.
[  152.074185][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  152.077825][T10131] openvswitch: netlink: Missing key (keys=40, expected=100)
[  152.129028][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'.
[  152.239342][T10140] ipvlan2: entered promiscuous mode
[  152.384332][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1158'.
[  152.399298][T10155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1160'.
[  152.524392][T10164] netlink: 'syz.0.1164': attribute type 9 has an invalid length.
[  152.531536][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'.
[  152.538403][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'.
[  152.550705][T10164] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  152.581665][T10172] netlink: 'syz.2.1166': attribute type 3 has an invalid length.
[  152.584533][T10172] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1166'.
[  152.649077][T10172] syzkaller0: entered promiscuous mode
[  152.650746][T10172] syzkaller0: entered allmulticast mode
[  152.681157][T10179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.684461][T10179] syzkaller0: entered promiscuous mode
[  152.688313][T10179] syzkaller0: entered allmulticast mode
[  152.708228][T10178] tipc: Resetting bearer <eth:syzkaller0>
[  152.743120][T10178] tipc: Disabling bearer <eth:syzkaller0>
[  152.883211][T10203] openvswitch: netlink: Key type 65 is out of range max 32
[  152.891667][T10203] ieee802154 phy0 wpan0: encryption failed: -22
[  152.906479][T10203] ieee802154 phy0 wpan0: encryption failed: -22
[  153.062012][T10212] lo speed is unknown, defaulting to 1000
[  153.814288][T10253] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  153.941055][T10264] syzkaller0: entered promiscuous mode
[  153.942815][T10264] syzkaller0: entered allmulticast mode
[  153.945368][T10266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.952866][T10266] syzkaller0: entered promiscuous mode
[  153.955099][T10266] syzkaller0: entered allmulticast mode
[  153.972012][T10264] macsec1: entered promiscuous mode
[  153.992349][T10268] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.081133][T10265] tipc: Resetting bearer <eth:syzkaller0>
[  154.100001][T10265] tipc: Disabling bearer <eth:syzkaller0>
[  154.872331][T10312] geneve3: entered promiscuous mode
[  154.899811][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  154.917968][ T5856] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  154.921354][ T5856] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  154.924609][ T5856] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  155.302178][T10325] only policy match revision 0 supported
[  155.302191][T10325] unable to load match
[  155.402236][T10323] vlan2: entered allmulticast mode
[  155.404228][T10323] veth1: entered allmulticast mode
[  155.572115][T10344] bridge_slave_0: default FDB implementation only supports local addresses
[  155.598884][T10350] pim6reg: entered allmulticast mode
[  155.602842][T10350] pim6reg: left allmulticast mode
[  155.741072][T10364] batman_adv: batadv0: Adding interface: gretap3
[  155.743741][T10364] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.753635][T10364] batman_adv: batadv0: Interface activated: gretap3
[  155.850290][T10380] vlan3: entered allmulticast mode
[  155.852392][T10380] veth1: entered allmulticast mode
[  155.854642][T10380] bridge8: port 1(vlan3) entered blocking state
[  155.857611][T10380] bridge8: port 1(vlan3) entered disabled state
[  155.861238][T10380] vlan3: entered promiscuous mode
[  155.867263][T10380] veth1: entered promiscuous mode
[  155.933309][T10387] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  156.086362][ T5844] Bluetooth: hci2: command tx timeout
[  156.615563][T10391] __nla_validate_parse: 19 callbacks suppressed
[  156.615582][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1229'.
[  156.924856][T10387] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  157.001297][T10394] netlink: 'syz.0.1230': attribute type 83 has an invalid length.
[  157.011087][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1230'.
[  157.108672][T10401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1233'.
[  157.172006][T10401] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  157.220984][T10415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'.
[  157.274460][T10418] syzkaller1: entered promiscuous mode
[  157.276779][T10418] syzkaller1: entered allmulticast mode
[  157.305256][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'.
[  157.542372][T10443] netlink: 'syz.0.1244': attribute type 2 has an invalid length.
[  157.592442][T10447] netlink: 'syz.0.1247': attribute type 1 has an invalid length.
[  157.600367][T10447] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1247'.
[  157.610746][T10451] netlink: 'syz.2.1246': attribute type 7 has an invalid length.
[  157.726714][T10464] netlink: 'syz.2.1250': attribute type 10 has an invalid length.
[  157.729175][T10468] syzkaller1: entered promiscuous mode
[  157.730972][T10468] syzkaller1: entered allmulticast mode
[  157.889978][T10488] netlink: 'syz.1.1258': attribute type 4 has an invalid length.
[  157.903028][T10487] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1258'.
[  157.903030][T10489] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1258'.
[  157.903093][T10487] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1258'.
[  157.908405][T10489] nbd: couldn't find a device at index 0
[  157.998484][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'.
[  158.019738][T10502] lo speed is unknown, defaulting to 1000
[  158.388040][T10520] syzkaller0: entered promiscuous mode
[  158.389998][T10520] syzkaller0: entered allmulticast mode
[  159.585596][T10530] 0{X: left allmulticast mode
[  159.603028][T10530] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  159.623517][T10532] hsr_slave_0: left promiscuous mode
[  159.631109][T10532] hsr_slave_1: left promiscuous mode
[  159.905094][T10550] syzkaller1: entered promiscuous mode
[  159.907123][T10550] syzkaller1: entered allmulticast mode
[  160.117828][T10564] netlink: 'syz.2.1277': attribute type 6 has an invalid length.
[  160.121035][T10564] netlink: 'syz.2.1277': attribute type 5 has an invalid length.
[  160.138739][T10561] 8021q: VLANs not supported on ipvlan1
[  160.173387][T10569] vlan3: entered allmulticast mode
[  160.175147][T10569] bridge_slave_0: entered allmulticast mode
[  160.203233][T10573] netlink: 'syz.2.1279': attribute type 10 has an invalid length.
[  160.208531][T10573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.211008][T10573] syzkaller0: entered promiscuous mode
[  160.212733][T10573] syzkaller0: entered allmulticast mode
[  160.217775][T10571] tipc: Resetting bearer <eth:syzkaller0>
[  160.236166][T10571] tipc: Disabling bearer <eth:syzkaller0>
[  160.348130][T10578] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  160.358409][T10579] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  160.374893][T10579] syz_tun (unregistering): left allmulticast mode
[  160.384132][T10578] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  160.469042][T10578] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  160.522657][T10578] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  160.611146][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  160.623314][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  160.660388][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  160.677162][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  160.722604][T10601] lo speed is unknown, defaulting to 1000
[  161.062739][T10619] netlink: 'syz.2.1293': attribute type 11 has an invalid length.
[  161.280180][T10638] syzkaller0: entered promiscuous mode
[  161.281951][T10638] syzkaller0: entered allmulticast mode
[  162.173287][T10661] netlink: 'syz.0.1307': attribute type 4 has an invalid length.
[  162.342650][T10664] __nla_validate_parse: 17 callbacks suppressed
[  162.342663][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1305'.
[  162.418681][T10671] netlink: 'syz.0.1309': attribute type 10 has an invalid length.
[  162.422939][T10671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.428641][T10671] batadv0: entered promiscuous mode
[  162.430985][T10671] batadv0: entered allmulticast mode
[  162.433606][T10671] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  162.597658][   T33] audit: type=1107 audit(1755597912.396:5): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='e|VyZ&qז%=_ ``ܫmp!MX@R0MUHFTDLA]MC%W_Bx4?P⯷Ӛ^P'
[  163.041359][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'.
[  163.156724][T10702] !: renamed from dummy0
[  163.170183][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'.
[  163.421062][T10721] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1317'.
[  163.502542][T10729] sctp: [Deprecated]: syz.1.1318 (pid 10729) Use of int in maxseg socket option.
[  163.502542][T10729] Use struct sctp_assoc_value instead
[  163.817783][T10748] syzkaller1: entered promiscuous mode
[  163.825574][T10748] syzkaller1: entered allmulticast mode
[  163.870995][T10766] tun0: tun_chr_ioctl cmd 1074025681
[  163.887438][T10766] ip6tnl4: entered promiscuous mode
[  163.891492][T10766] ip6tnl4: entered allmulticast mode
[  164.229923][T10789] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  164.335266][T10806] netlink: 'syz.0.1331': attribute type 10 has an invalid length.
[  164.340849][T10805] netlink: 'syz.0.1331': attribute type 10 has an invalid length.
[  164.352664][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'.
[  164.368829][T10806] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1331'.
[  164.536415][T10828] netlink: 'syz.0.1335': attribute type 10 has an invalid length.
[  164.549448][T10828] team0: Port device dummy0 added
[  164.552087][T10828] netlink: 'syz.0.1335': attribute type 10 has an invalid length.
[  164.567531][T10828] team0: Port device dummy0 removed
[  164.571187][T10828] dummy0: entered promiscuous mode
[  164.573298][T10828] dummy0: entered allmulticast mode
[  164.575574][T10828] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  164.594294][T10830] sctp: [Deprecated]: syz.2.1339 (pid 10830) Use of int in max_burst socket option deprecated.
[  164.594294][T10830] Use struct sctp_assoc_value instead
[  164.762881][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1340'.
[  164.770335][T10833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1340'.
[  164.773422][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'.
[  165.135305][T10855] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  165.135325][T10854] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  165.321019][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'.
[  165.394615][T10874] lo speed is unknown, defaulting to 1000
[  165.633876][T10881] netlink: 'syz.1.1351': attribute type 13 has an invalid length.
[  165.653269][T10881] netlink: 'syz.1.1351': attribute type 17 has an invalid length.
[  165.664508][T10895] netlink: 'syz.2.1355': attribute type 6 has an invalid length.
[  165.707278][T10881] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.711688][T10881] 8021q: adding VLAN 0 to HW filter on device team0
[  165.717654][T10881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.566265][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  182.828149][T10913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.829858][T10914] netlink: 'syz.1.1359': attribute type 10 has an invalid length.
[  182.832944][T10913] tipc: Failed to remove unknown binding: 66,1,1/0:554867616/554867618
[  182.836851][T10914] __nla_validate_parse: 7 callbacks suppressed
[  182.836863][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1359'.
[  182.843316][T10914] bond0: option arp_all_targets: invalid value (196616)
[  182.847202][T10913] tipc: Failed to remove unknown binding: 66,1,1/0:554867616/554867618
[  182.851221][T10913] tipc: Failed to remove unknown binding: 66,1,1/0:554867616/554867618
[  182.858333][T10914] vlan3: left allmulticast mode
[  182.860294][T10914] veth1: left allmulticast mode
[  182.862074][T10914] vlan3: left promiscuous mode
[  182.863887][T10914] veth1: left promiscuous mode
[  182.866069][T10914] bridge8: port 1(vlan3) entered disabled state
[  182.898861][T10914] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  182.904033][T10914] netlink: 'syz.1.1359': attribute type 3 has an invalid length.
[  182.909168][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'.
[  182.975492][T10917] bond7: left promiscuous mode
[  182.980632][T10917] geneve3: left promiscuous mode
[  182.988138][T10917] vlan2: left allmulticast mode
[  182.990127][T10917] veth1: left allmulticast mode
[  182.991911][T10917] batman_adv: batadv0: Interface deactivated: gretap3
[  183.018973][ T5856] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.028615][ T5856] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.059107][ T5856] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.062679][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'.
[  183.067049][ T5856] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  183.086853][T10924] netlink: 'syz.2.1364': attribute type 2 has an invalid length.
[  183.611873][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'.
[  183.611902][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'.
[  183.627449][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'.
[  183.706496][T10957] bond0: (slave dummy0): Releasing backup interface
[  183.708797][T10957] dummy0: left promiscuous mode
[  183.710507][T10957] dummy0: left allmulticast mode
[  183.712820][T10957] bond0: (slave batadv0): Releasing backup interface
[  183.715252][T10957] batadv0: left promiscuous mode
[  183.717003][T10957] batadv0: left allmulticast mode
[  183.719613][T10957] bond0: (slave wlan1): Releasing backup interface
[  183.723071][T10957] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  183.725192][T10957] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  183.728185][T10957] batman_adv: batadv0: Removing interface: gretap3
[  183.965476][T10962] netlink: 'syz.0.1373': attribute type 10 has an invalid length.
[  183.970907][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'.
[  183.974292][T10962] bond0: option arp_all_targets: invalid value (196616)
[  184.008006][T10962] netlink: 'syz.0.1373': attribute type 1 has an invalid length.
[  184.013164][T10962] netlink: 'syz.0.1373': attribute type 3 has an invalid length.
[  184.019547][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  184.099045][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'.
[  184.099287][T10973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1377'.
[  184.174666][ T5856] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.180749][ T5856] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.185496][ T5856] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.190136][ T5856] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.460571][T11002] netlink: 'syz.1.1383': attribute type 1 has an invalid length.
[  184.695893][ T6256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.698685][ T6256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.710057][ T6256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.713115][ T6256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.796306][T11031] pim6reg: entered allmulticast mode
[  185.041136][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.043928][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.347449][T11088] netlink: 'syz.1.1406': attribute type 2 has an invalid length.
[  185.370672][T11088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.435926][T11097] pimreg3: entered allmulticast mode
[  185.875088][T11142] sctp: [Deprecated]: syz.2.1415 (pid 11142) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.875088][T11142] Use struct sctp_sack_info instead
[  185.954342][T11148] syzkaller0: entered promiscuous mode
[  185.957914][T11148] syzkaller0: entered allmulticast mode
[  186.025617][T11152] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  186.094449][T11159] lo speed is unknown, defaulting to 1000
[  186.376357][T11169] vlan4: entered promiscuous mode
[  186.378090][T11169] hsr_slave_1: entered promiscuous mode
[  186.381029][T11169] vlan4: entered allmulticast mode
[  186.511813][T11181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.768692][T11202] netlink: 'syz.1.1428': attribute type 24 has an invalid length.
[  186.771223][T11202] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  187.241496][T11240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  187.464397][T11250] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  187.498957][T11250] tipc: Resetting bearer <eth:syzkaller0>
[  187.504412][T11249] tipc: Resetting bearer <eth:syzkaller0>
[  188.155209][T11255] validate_nla: 2 callbacks suppressed
[  188.155222][T11255] netlink: 'syz.2.1444': attribute type 10 has an invalid length.
[  188.159796][T11255] __nla_validate_parse: 46 callbacks suppressed
[  188.159805][T11255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1444'.
[  188.528551][   T52] tipc: Node number set to 219556701
[  188.642007][T11249] tipc: Disabling bearer <eth:syzkaller0>
[  188.646802][T11252] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  188.657283][T11255] team0: Port device geneve0 added
[  188.660230][ T5856] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.671148][ T5856] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.674187][ T5856] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.683775][ T5856] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.774982][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'.
[  188.813473][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1449'.
[  188.985092][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  190.295399][T11303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.301520][T11303] syzkaller0: entered promiscuous mode
[  190.303281][T11303] syzkaller0: entered allmulticast mode
[  190.329269][T11302] tipc: Resetting bearer <eth:syzkaller0>
[  190.347242][T11302] tipc: Disabling bearer <eth:syzkaller0>
[  190.381358][T11310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1464'.
[  190.438736][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'.
[  190.441586][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'.
[  190.451426][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'.
[  190.455142][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'.
[  190.560783][T11337] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1471'.
[  190.628076][T11342] syz_tun: entered allmulticast mode
[  190.642332][T11342] dvmrp1: entered allmulticast mode
[  190.664046][T11335] syz_tun: left allmulticast mode
[  190.737851][T11349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.906806][T11357] infiniband syz!: set down
[  190.908358][T11357] infiniband syz!: added team_slave_0
[  190.931299][T11357] RDS/IB: syz!: added
[  190.932752][T11357] smc: adding ib device syz! with port count 1
[  190.935024][T11357] smc:    ib device syz! port 1 has pnetid 
[  191.219050][T11371] 8021q: adding VLAN 0 to HW filter on device team0
[  191.223681][T11371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.230688][   T52] lo speed is unknown, defaulting to 1000
[  191.234099][   T52] syz0: Port: 1 Link ACTIVE
[  191.237273][   T52] lo speed is unknown, defaulting to 1000
[  191.905055][T11394] lo speed is unknown, defaulting to 1000
[  192.184842][T11402] team0: Port device macvlan1 added
[  192.498367][T11417] netlink: 'syz.0.1492': attribute type 1 has an invalid length.
[  192.534212][T11417] 8021q: adding VLAN 0 to HW filter on device bond8
[  192.568120][T11417] bond8: (slave geneve4): making interface the new active one
[  192.572111][T11417] bond8: (slave geneve4): Enslaving as an active interface with an up link
[  192.587384][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.593698][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.609334][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.612338][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.684139][T11429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.700234][T11428] tipc: Disabling bearer <eth:syzkaller0>
[  192.748127][T11435] sock: sock_set_timeout: `syz.1.1496' (pid 11435) tries to set negative timeout
[  192.755860][T11437] syzkaller1: entered promiscuous mode
[  192.762846][T11437] syzkaller1: entered allmulticast mode
[  192.892934][T11448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.930393][T11455] netlink: 'syz.0.1503': attribute type 12 has an invalid length.
[  193.031038][T11469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.186037][T11488] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  193.188297][T11488] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  193.190436][T11488] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  193.193439][T11488] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  193.195599][T11488] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  193.253045][T11490] __nla_validate_parse: 9 callbacks suppressed
[  193.253059][T11490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'.
[  193.268242][T11490] pim6reg: entered allmulticast mode
[  193.271547][T11490] pim6reg: left allmulticast mode
[  193.388347][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1517'.
[  193.452625][  T975] lo speed is unknown, defaulting to 1000
[  193.454834][  T975] syz0: Port: 1 Link DOWN
[  193.457033][  T975] lo speed is unknown, defaulting to 1000
[  193.462250][T11509] pim6reg1: entered promiscuous mode
[  193.464781][T11509] pim6reg1: entered allmulticast mode
[  193.513773][T11510] dvmrp1: left allmulticast mode
[  193.590534][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'.
[  193.603803][T11515] veth0_to_team: entered promiscuous mode
[  193.613028][T11515] veth0_to_team: entered allmulticast mode
[  193.645156][T11519] bridge0: entered allmulticast mode
[  193.673224][T11526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1525'.
[  193.719503][T11532] lo speed is unknown, defaulting to 1000
[  193.763084][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1527'.
[  193.784645][T11536] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1527'.
[  193.848894][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.900561][T11535] netlink: 'syz.2.1526': attribute type 13 has an invalid length.
[  193.905279][T11535] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1526'.
[  193.959311][T11541] sctp: [Deprecated]: syz.2.1526 (pid 11541) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.959311][T11541] Use struct sctp_sack_info instead
[  193.989869][T11541] ieee802154 phy0 wpan0: encryption failed: -90
[  194.072545][T11552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1531'.
[  194.090904][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1531'.
[  194.234335][T11558] tc_dump_action: action bad kind
[  194.465599][T11570] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.470812][T11570] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.520993][T11571] 8021q: adding VLAN 0 to HW filter on device batadv1
[  194.524087][T11571] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  194.529469][T11571] team0: Failed to send options change via netlink (err -105)
[  194.532231][T11571] team0: Port device batadv1 added
[  194.567911][T11570] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.571360][T11570] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.662934][T11570] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.667082][T11570] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.729467][T11570] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  194.736095][T11570] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.758028][T11578] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  194.901524][ T5874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.905336][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.963971][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.966943][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.977234][ T5874] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.983963][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.997532][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'.
[  195.009211][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.011953][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.132712][T11589] netlink: 'syz.0.1544': attribute type 4 has an invalid length.
[  195.335112][T11591] 8021q: adding VLAN 0 to HW filter on device bond9
[  195.373096][T11591] bond8: (slave geneve4): Releasing active interface
[  195.409550][T11591] team0: Port device batadv1 removed
[  195.431118][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.433679][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.446512][ T5856] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.459666][ T5856] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  195.748731][T11598] net_ratelimit: 252 callbacks suppressed
[  195.748744][T11598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.766455][  T975] tipc: Node number set to 1435509220
[  195.823532][T11606] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  195.921872][T11619] netlink: 'syz.1.1554': attribute type 29 has an invalid length.
[  196.046480][T11628] netlink: 'syz.1.1556': attribute type 8 has an invalid length.
[  196.310281][T11639] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  197.477285][T11657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.934121][T11695] netlink: 'syz.2.1575': attribute type 1 has an invalid length.
[  197.937370][T11695] netlink: 'syz.2.1575': attribute type 4 has an invalid length.
[  197.940863][T11697] netlink: 'syz.1.1576': attribute type 12 has an invalid length.
[  197.982485][T11701] netlink: 'syz.1.1578': attribute type 10 has an invalid length.
[  197.985207][T11701] bond0: (slave wlan1): refused to change device type
[  197.996136][T11701] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.999406][T11701] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.052291][T11708] netlink: 'syz.0.1581': attribute type 13 has an invalid length.
[  198.055507][T11708] gretap0: refused to change device tx_queue_len
[  198.058453][T11708] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  198.280960][T11722] __nla_validate_parse: 10 callbacks suppressed
[  198.280977][T11722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1584'.
[  198.288977][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'.
[  198.507168][T11725] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1585'.
[  198.510224][T11725] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  198.512834][T11725] openvswitch: netlink: Message has 1 unknown bytes.
[  198.517511][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'.
[  198.528641][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'.
[  198.661810][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'.
[  199.008030][T11742] netlink: 'syz.0.1589': attribute type 12 has an invalid length.
[  199.011583][T11741] netlink: 'syz.0.1589': attribute type 12 has an invalid length.
[  199.532622][T11757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1593'.
[  199.537592][T11757] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1593'.
[  199.591353][T11757] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  199.594972][T11757] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  199.760763][T11762] netlink: 'syz.1.1594': attribute type 1 has an invalid length.
[  199.777571][T11762] 8021q: adding VLAN 0 to HW filter on device bond6
[  199.792258][T11762] bond6: (slave bridge10): making interface the new active one
[  199.795555][T11762] bond6: (slave bridge10): Enslaving as an active interface with an up link
[  199.808673][T11762] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  199.884145][T11762] syz.1.1594 (11762) used greatest stack depth: 19384 bytes left
[  199.902109][T11765] netlink: 'syz.1.1595': attribute type 9 has an invalid length.
[  199.981684][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'.
[  200.290492][T11780] netlink: 'syz.1.1600': attribute type 10 has an invalid length.
[  200.293347][T11780] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1600'.
[  200.297313][T11780] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  200.453197][T11799] syzkaller1: entered promiscuous mode
[  200.455469][T11799] syzkaller1: entered allmulticast mode
[  200.479717][T11801] syzkaller1: entered promiscuous mode
[  200.481926][T11801] syzkaller1: entered allmulticast mode
[  200.738052][T11814] netlink: 'syz.2.1609': attribute type 10 has an invalid length.
[  200.833118][T11824] netlink: 'syz.2.1612': attribute type 10 has an invalid length.
[  200.994715][T11836] netlink: 'syz.2.1615': attribute type 11 has an invalid length.
[  201.002117][T11837] netlink: 'syz.2.1615': attribute type 11 has an invalid length.
[  201.309625][T11859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.313071][T11859] syzkaller0: entered promiscuous mode
[  201.315344][T11859] syzkaller0: entered allmulticast mode
[  201.330215][T11859] tipc: Resetting bearer <eth:syzkaller0>
[  201.334832][T11858] tipc: Resetting bearer <eth:syzkaller0>
[  201.344675][T11858] tipc: Disabling bearer <eth:syzkaller0>
[  201.461748][T11863] 8021q: adding VLAN 0 to HW filter on device batadv1
[  201.465120][T11863] team0: Port device batadv1 added
[  201.470158][T11863] netlink: 'syz.2.1623': attribute type 11 has an invalid length.
[  201.572038][T11867] netlink: 'syz.2.1624': attribute type 10 has an invalid length.
[  201.579495][ T5856] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.582978][ T5856] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.586513][ T5856] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.589804][ T5856] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.773669][T11879] lo speed is unknown, defaulting to 1000
[  202.017785][T11891] netlink: 'syz.1.1628': attribute type 1 has an invalid length.
[  202.038178][T11891] bond7: entered promiscuous mode
[  202.040439][T11891] 8021q: adding VLAN 0 to HW filter on device bond7
[  202.058977][T11891] 8021q: adding VLAN 0 to HW filter on device bond7
[  202.061713][T11891] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  202.065740][T11891] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  202.074003][T11891] bond7: (slave wireguard0): making interface the new active one
[  202.077114][T11891] wireguard0: entered promiscuous mode
[  202.080415][T11891] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  202.089709][T11891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  202.092401][T11891] IPv6: NLM_F_CREATE should be set when creating new route
[  202.095091][T11891] IPv6: NLM_F_CREATE should be set when creating new route
[  202.102152][T11891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  202.220454][T11908] bond6: (slave bridge10): Releasing active interface
[  202.230159][T11908] bond7: (slave wireguard0): Releasing backup interface
[  202.233650][T11908] wireguard0: left promiscuous mode
[  202.265068][T11909] syzkaller1: tun_chr_ioctl cmd 1074025677
[  202.268195][T11909] syzkaller1: linktype set to 778
[  202.282790][T11908] team0: Unable to change to the same mode the team is in
[  202.373667][T11913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.483689][T11920] batadv0: entered promiscuous mode
[  202.485383][T11920] batadv0: entered allmulticast mode
[  202.489623][T11920] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  202.557344][T11922] sctp: [Deprecated]: syz.2.1637 (pid 11922) Use of int in maxseg socket option.
[  202.557344][T11922] Use struct sctp_assoc_value instead
[  202.562183][T11922] syzkaller1: entered promiscuous mode
[  202.563924][T11922] syzkaller1: entered allmulticast mode
[  202.630108][T11925] Can't find ip_set type hash:net,yface
[  202.909766][T11945] syzkaller0: entered promiscuous mode
[  202.911726][T11945] syzkaller0: entered allmulticast mode
[  203.098077][T11965] netlink: 'syz.1.1651': attribute type 11 has an invalid length.
[  203.113497][T11965] netlink: 'syz.1.1651': attribute type 11 has an invalid length.
[  203.178724][T11969] openvswitch: netlink: Flow actions attr not present in new flow.
[  203.334222][T11989] __nla_validate_parse: 15 callbacks suppressed
[  203.334238][T11989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1655'.
[  203.339900][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'.
[  203.367530][T11990] lo speed is unknown, defaulting to 1000
[  203.378401][T11991] syzkaller1: entered promiscuous mode
[  203.380719][T11991] syzkaller1: entered allmulticast mode
[  203.516524][T11986] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1656'.
[  204.330592][T11998] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  204.338070][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'.
[  204.400736][T12007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1662'.
[  204.433584][T12005] validate_nla: 2 callbacks suppressed
[  204.433601][T12005] netlink: 'syz.0.1661': attribute type 2 has an invalid length.
[  204.508123][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'.
[  204.510828][T12013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1664'.
[  204.539283][T12012] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1663'.
[  204.627941][T12018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  205.160976][T12038] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  205.348777][T12046] nbd: socks must be embedded in a SOCK_ITEM attr
[  205.351529][T12046] block nbd3: shutting down sockets
[  205.428608][T12052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1674'.
[  205.520621][T12060] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1678'.
[  205.525316][T12062] netlink: 'syz.1.1679': attribute type 4 has an invalid length.
[  205.532471][T12062] nbd: couldn't find a device at index 0
[  205.570724][T12060] lo speed is unknown, defaulting to 1000
[  205.571067][T12065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.593483][T12065] tipc: Resetting bearer <eth:syzkaller0>
[  205.601601][T12064] tipc: Resetting bearer <eth:syzkaller0>
[  205.626619][T12064] tipc: Disabling bearer <eth:syzkaller0>
[  205.672090][   T55] Bluetooth: hci2: link tx timeout
[  205.674148][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.680032][ T5844] Bluetooth: hci2: link tx timeout
[  205.681824][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.684660][ T5844] Bluetooth: hci2: link tx timeout
[  205.686995][ T5844] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  205.784538][T12077] ipvlan1: entered promiscuous mode
[  205.791093][T12077] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  205.813434][T12076] netlink: 'syz.1.1683': attribute type 7 has an invalid length.
[  205.908223][T12080] netlink: 'syz.0.1684': attribute type 1 has an invalid length.
[  205.930109][T12080] bond10: entered promiscuous mode
[  205.932529][T12080] 8021q: adding VLAN 0 to HW filter on device bond10
[  205.965851][T12080] 8021q: adding VLAN 0 to HW filter on device bond10
[  205.969262][T12080] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  205.974807][T12080] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  205.984106][T12080] bond10: (slave wireguard0): making interface the new active one
[  205.987350][T12080] wireguard0: entered promiscuous mode
[  205.990900][T12080] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  206.273848][T12112] openvswitch: netlink: IPv4 tunnel dst address is zero
[  206.364442][T12128] netlink: 'syz.0.1696': attribute type 1 has an invalid length.
[  206.393918][T12128] bond11: entered promiscuous mode
[  206.395898][T12128] 8021q: adding VLAN 0 to HW filter on device bond11
[  206.548932][T12144] chnl_net:caif_netlink_parms(): no params data found
[  206.696259][T12150] ieee802154 phy0 wpan0: encryption failed: -22
[  207.074032][T12195] gtp0: entered promiscuous mode
[  207.075710][T12195] gtp0: entered allmulticast mode
[  207.129573][T12197] bond12: entered promiscuous mode
[  207.131221][T12197] bond12: entered allmulticast mode
[  207.133210][T12197] 8021q: adding VLAN 0 to HW filter on device bond12
[  207.210098][T12200] wireguard1: entered promiscuous mode
[  207.212256][T12200] wireguard1: entered allmulticast mode
[  207.543455][T12219] netlink: 'syz.0.1722': attribute type 1 has an invalid length.
[  207.546533][T12219] netlink: 'syz.0.1722': attribute type 5 has an invalid length.
[  207.585641][T12221] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.633153][T12221] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.682723][T12221] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.686450][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  207.760354][T12221] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  207.859173][T12238] netlink: 'syz.2.1728': attribute type 1 has an invalid length.
[  207.884858][T12238] 8021q: adding VLAN 0 to HW filter on device bond15
[  207.898311][ T5874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.901651][T12241] netlink: 'syz.1.1729': attribute type 1 has an invalid length.
[  207.915612][T12238] veth13: entered promiscuous mode
[  207.960012][T12241] 8021q: adding VLAN 0 to HW filter on device bond8
[  207.971457][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.983305][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  208.007034][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  208.084416][T12249] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  208.093091][T12249] netlink: 'syz.1.1732': attribute type 10 has an invalid length.
[  208.096833][T12249] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  208.099109][T12249] bond0: (slave wlan1): refused to change device type
[  208.102803][T12249] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  208.103974][T12254] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  208.106592][T12249] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  208.143556][T12254] team0: Port device macvlan1 removed
[  208.148044][T12254] team0: Port device geneve0 removed
[  208.152632][T12254] bond2: (slave gretap1): Releasing active interface
[  208.157422][T12254] bond8: (slave bond9): Releasing backup interface
[  208.161503][T12254] bond11: (slave veth5): Releasing active interface
[  208.165008][T12254] batman_adv: batadv0: Removing interface: ip6gretap1
[  208.171578][T12254] bond13: (slave gretap0): Releasing backup interface
[  208.182107][T12254] team0: Port device batadv1 removed
[  208.237325][T12257] ipvlan1: left promiscuous mode
[  208.241392][T12257] bond10: left promiscuous mode
[  208.243280][T12257] wireguard0: left promiscuous mode
[  208.255064][T12257] bond11: left promiscuous mode
[  208.261660][T12257] gtp0: left promiscuous mode
[  208.263757][T12257] gtp0: left allmulticast mode
[  208.270669][T12257] bond12: left promiscuous mode
[  208.272874][T12257] bond12: left allmulticast mode
[  208.289711][ T5874] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.292863][ T5874] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.295806][ T5874] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.300107][T12259] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  208.302787][ T5874] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  208.345592][T12261] __nla_validate_parse: 14 callbacks suppressed
[  208.345604][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'.
[  208.352142][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'.
[  208.355637][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'.
[  208.420746][T12264] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  208.423680][T12264] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  208.430601][T12264] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  208.631016][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'.
[  208.634577][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'.
[  208.803033][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'.
[  208.854438][T12272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1737'.
[  208.861032][T12272] openvswitch: netlink: Flow key attr not present in new flow.
[  208.958907][T12280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.987558][T12280] tipc: Disabling bearer <eth:syzkaller0>
[  209.015826][T12287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.022701][T12287] syzkaller0: entered promiscuous mode
[  209.024844][T12287] syzkaller0: entered allmulticast mode
[  209.046844][T12287] tipc: Resetting bearer <eth:syzkaller0>
[  209.051146][T12286] tipc: Resetting bearer <eth:syzkaller0>
[  209.066897][T12286] tipc: Disabling bearer <eth:syzkaller0>
[  209.295412][T12307] veth1_to_bond: entered allmulticast mode
[  209.351674][T12305] veth1_to_bond: left allmulticast mode
[  209.390026][ T6242] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  209.414293][T12312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'.
[  209.761207][T12332] validate_nla: 3 callbacks suppressed
[  209.761219][T12332] netlink: 'syz.0.1751': attribute type 4 has an invalid length.
[  209.765344][T12332] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1751'.
[  209.800723][T12339] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1752'.
[  209.928904][T12349] netlink: 'syz.0.1755': attribute type 9 has an invalid length.
[  210.308759][T12390] lo speed is unknown, defaulting to 1000
[  210.322496][T12392] netlink: 'syz.2.1767': attribute type 10 has an invalid length.
[  210.762180][T12413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.790941][T12413] tipc: Disabling bearer <eth:syzkaller0>
[  210.849249][T12418] netlink: 'syz.0.1775': attribute type 10 has an invalid length.
[  210.852903][T12418] 8021q: adding VLAN 0 to HW filter on device team0
[  210.857264][T12418] team0: entered promiscuous mode
[  210.859231][T12418] team0: entered allmulticast mode
[  210.861160][T12418] bond0: (slave team0): Enslaving as an active interface with a down link
[  210.995938][T12429] sctp: [Deprecated]: syz.1.1777 (pid 12429) Use of struct sctp_assoc_value in delayed_ack socket option.
[  210.995938][T12429] Use struct sctp_sack_info instead
[  211.189131][T12434] veth0_to_team: left promiscuous mode
[  211.191007][T12434] veth0_to_team: left allmulticast mode
[  211.241093][T12434] bond7: left promiscuous mode
[  211.283873][T12440] pim6reg1: entered promiscuous mode
[  211.295025][T12440] pim6reg1: entered allmulticast mode
[  211.358164][T12447] pim6reg1: entered promiscuous mode
[  211.359979][T12447] pim6reg1: entered allmulticast mode
[  211.500552][T12460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.503166][T12460] syzkaller0: entered promiscuous mode
[  211.504909][T12460] syzkaller0: entered allmulticast mode
[  211.518988][T12457] netlink: 'syz.2.1786': attribute type 19 has an invalid length.
[  211.521894][T12460] netlink: 'syz.1.1787': attribute type 2 has an invalid length.
[  211.537398][T12459] tipc: Resetting bearer <eth:syzkaller0>
[  211.552662][T12459] tipc: Disabling bearer <eth:syzkaller0>
[  211.659604][T12468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.662461][T12468] D: renamed from syzkaller0
[  211.665824][T12468] tipc: Disabling bearer <eth:syzkaller0>
[  211.732180][T12472] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  211.854818][T12485] tipc: New replicast peer: 255.255.255.255
[  211.858768][T12485] tipc: Enabled bearer <udp:syz2>, priority 6
[  211.862060][T12485] tipc: Disabling bearer <udp:syz2>
[  211.892000][T12488] netlink: 'syz.1.1796': attribute type 1 has an invalid length.
[  211.944496][T12496] pimreg: entered allmulticast mode
[  211.995397][T12507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.001750][T12504] syzkaller0: entered promiscuous mode
[  212.003532][T12504] syzkaller0: entered allmulticast mode
[  212.024573][T12507] tipc: Resetting bearer <eth:syzkaller0>
[  212.041593][T12507] tipc: Disabling bearer <eth:syzkaller0>
[  212.122627][T12519] IPVS: Unknown mcast interface: vcan0
[  212.183217][T12529] netlink: 'syz.2.1810': attribute type 16 has an invalid length.
[  212.185671][T12529] netlink: 'syz.2.1810': attribute type 17 has an invalid length.
[  212.303914][T12537] netlink: 'syz.0.1812': attribute type 10 has an invalid length.
[  212.401858][T12546] syzkaller1: entered promiscuous mode
[  212.403822][T12546] syzkaller1: entered allmulticast mode
[  212.573630][T12581] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  212.620400][T12589] team0: Mode "" not found
[  212.655105][T12597] batadv_slave_1: entered promiscuous mode
[  212.827744][T12593] batadv_slave_1: left promiscuous mode
[  213.358668][T12663] __nla_validate_parse: 41 callbacks suppressed
[  213.358685][T12663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'.
[  213.417342][T12663] macvlan0: entered promiscuous mode
[  213.419621][T12663] macvlan0: entered allmulticast mode
[  213.422670][T12663] bond13: (slave macvlan0): Opening slave failed
[  213.442335][T12670] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  213.526502][T12672] bond0: entered promiscuous mode
[  213.528987][T12672] bond0: left promiscuous mode
[  213.534461][T12673] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  213.680395][T12681] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  213.774461][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'.
[  213.784579][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1855'.
[  213.790533][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'.
[  213.829007][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1854'.
[  213.836270][T12695] openvswitch: netlink: Flow key attr not present in new flow.
[  213.854534][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'.
[  214.015337][T12704] syzkaller0: entered promiscuous mode
[  214.017306][T12704] syzkaller0: entered allmulticast mode
[  215.132797][T12712] kthread_run failed with err -4
[  215.159023][T12721] netlink: 'syz.2.1863': attribute type 2 has an invalid length.
[  215.161856][T12721] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1863'.
[  215.193188][T12725] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20003
[  215.265766][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1868'.
[  215.271007][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1868'.
[  215.298190][T12735] netlink: 'syz.2.1867': attribute type 5 has an invalid length.
[  215.312151][T12744] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1870'.
[  215.341610][T12746] openvswitch: netlink: Message has 8 unknown bytes.
[  215.460244][T12753] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.520775][T12756] netlink: 'syz.2.1872': attribute type 29 has an invalid length.
[  215.593525][T12762] netlink: 'syz.0.1876': attribute type 7 has an invalid length.
[  215.640715][T12764] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  215.640717][T12765] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  215.673252][T12765] veth11: entered promiscuous mode
[  215.675523][T12764] erspan0: entered allmulticast mode
[  215.862302][T12778] netlink: 'syz.0.1880': attribute type 21 has an invalid length.
[  215.866455][T12778] bond0: (slave team0): Releasing backup interface
[  215.869032][T12778] team0: left promiscuous mode
[  215.870855][T12778] team0: left allmulticast mode
[  215.878842][T12778] bond0: (slave wlan1): Releasing backup interface
[  215.882698][T12778] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  215.889612][T12778] bond10: (slave wireguard0): Releasing backup interface
[  215.901795][T12778] unknown channel width for channel at 909000KHz?
[  215.905722][T12778] unknown channel width for channel at 909000KHz?
[  215.910393][T12778] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  215.998183][T12782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.187363][T12792] netlink: 'syz.1.1884': attribute type 12 has an invalid length.
[  216.197971][T12790] tap0: tun_chr_ioctl cmd 1074025680
[  216.206730][T12790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.209620][T12790] D: renamed from syzkaller0
[  216.223247][T12790] tipc: Disabling bearer <eth:syzkaller0>
[  216.235016][T12798] netlink: 'syz.1.1885': attribute type 2 has an invalid length.
[  216.240470][T12790] netlink: 'syz.0.1883': attribute type 1 has an invalid length.
[  216.255717][T12798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.272928][T12790] batadv3: entered promiscuous mode
[  216.275207][T12790] batadv3: entered allmulticast mode
[  216.335214][T12805] pimreg: entered allmulticast mode
[  216.444191][T12821] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  216.485450][T12828] siw: device registration error -23
[  217.631371][T12881] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  217.717027][T12890] erspan0: left allmulticast mode
[  217.733845][T12890] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  217.744150][T12890] veth11: left promiscuous mode
[  219.039615][T12911] __nla_validate_parse: 17 callbacks suppressed
[  219.039630][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1914'.
[  219.070201][T12911] bridge0 (unregistering): left allmulticast mode
[  219.344278][T12934] lo speed is unknown, defaulting to 1000
[  219.655033][T12942] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1923'.
[  219.715971][T12947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1924'.
[  219.730027][T12947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.143414][T12959] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  220.301967][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'.
[  220.451022][T12979] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1934'.
[  220.463863][T12979] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1934'.
[  220.474046][T12979] netlink: 66 bytes leftover after parsing attributes in process `syz.1.1934'.
[  220.477003][T12979] netlink: 167 bytes leftover after parsing attributes in process `syz.1.1934'.
[  220.479590][T12979] netlink: 254 bytes leftover after parsing attributes in process `syz.1.1934'.
[  220.482266][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1934'.
[  220.764153][T12992] syz.0.1938: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  220.784405][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.0.1938 Not tainted syzkaller #0 PREEMPT(full) 
[  220.784429][T12992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.784439][T12992] Call Trace:
[  220.784446][T12992]  <TASK>
[  220.784473][T12992]  dump_stack_lvl+0x189/0x250
[  220.784500][T12992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.784520][T12992]  ? __pfx__printk+0x10/0x10
[  220.784541][T12992]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  220.784557][T12992]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  220.784575][T12992]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  220.784593][T12992]  warn_alloc+0x214/0x310
[  220.784618][T12992]  ? stack_depot_save_flags+0x40/0x860
[  220.784641][T12992]  ? __pfx_warn_alloc+0x10/0x10
[  220.784664][T12992]  ? kasan_save_track+0x4f/0x80
[  220.784682][T12992]  ? xskq_create+0x56/0x170
[  220.784701][T12992]  ? xsk_init_queue+0xb0/0x110
[  220.784717][T12992]  ? xsk_setsockopt+0x4dc/0x8d0
[  220.784732][T12992]  ? do_sock_setsockopt+0x17c/0x1b0
[  220.784774][T12992]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  220.784787][T12992]  ? do_syscall_64+0xfa/0x3b0
[  220.784808][T12992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.784822][T12992]  __vmalloc_node_range_noprof+0x125/0x12f0
[  220.784849][T12992]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  220.784863][T12992]  ? __kasan_kmalloc+0x93/0xb0
[  220.784875][T12992]  vmalloc_user_noprof+0xad/0xf0
[  220.784887][T12992]  ? xskq_create+0xbf/0x170
[  220.784897][T12992]  xskq_create+0xbf/0x170
[  220.784909][T12992]  xsk_init_queue+0xb0/0x110
[  220.784920][T12992]  xsk_setsockopt+0x4dc/0x8d0
[  220.784931][T12992]  ? __pfx_xsk_setsockopt+0x10/0x10
[  220.784940][T12992]  ? __pfx_aa_sk_perm+0x10/0x10
[  220.784954][T12992]  ? aa_sock_opt_perm+0xff/0x1b0
[  220.784970][T12992]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  220.784980][T12992]  ? __pfx_xsk_setsockopt+0x10/0x10
[  220.784990][T12992]  do_sock_setsockopt+0x17c/0x1b0
[  220.785001][T12992]  __x64_sys_setsockopt+0x13f/0x1b0
[  220.785011][T12992]  do_syscall_64+0xfa/0x3b0
[  220.785022][T12992]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.785033][T12992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.785041][T12992]  ? exc_page_fault+0x9f/0xf0
[  220.785053][T12992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.785061][T12992] RIP: 0033:0x7ff790f8ebe9
[  220.785070][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.785078][T12992] RSP: 002b:00007ff791e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  220.785088][T12992] RAX: ffffffffffffffda RBX: 00007ff7911b5fa0 RCX: 00007ff790f8ebe9
[  220.785094][T12992] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  220.785099][T12992] RBP: 00007ff791011e19 R08: 0000000000000004 R09: 0000000000000000
[  220.785104][T12992] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  220.785109][T12992] R13: 00007ff7911b6038 R14: 00007ff7911b5fa0 R15: 00007ffe4f1320b8
[  220.785123][T12992]  </TASK>
[  220.785128][T12992] Mem-Info:
[  220.810367][T12995] syzkaller0: entered promiscuous mode
[  220.815848][T12992] active_anon:5437 inactive_anon:0 isolated_anon:0
[  220.815848][T12992]  active_file:1428 inactive_file:38271 isolated_file:0
[  220.815848][T12992]  unevictable:1768 dirty:81 writeback:0
[  220.815848][T12992]  slab_reclaimable:10535 slab_unreclaimable:97809
[  220.815848][T12992]  mapped:18268 shmem:2456 pagetables:1021
[  220.815848][T12992]  sec_pagetables:0 bounce:0
[  220.815848][T12992]  kernel_misc_reclaimable:0
[  220.815848][T12992]  free:246506 free_pcp:22096 free_cma:0
[  220.820531][T12995] syzkaller0: entered allmulticast mode
[  220.822718][T12992] Node 0 active_anon:12148kB inactive_anon:0kB active_file:4556kB inactive_file:144720kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27984kB dirty:300kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7564kB pagetables:2020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  220.918407][T12992] Node 1 active_anon:9600kB inactive_anon:0kB active_file:1156kB inactive_file:8364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45088kB dirty:24kB writeback:0kB shmem:5036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5792kB pagetables:1996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  220.951469][T12992] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  220.964448][T12992] lowmem_reserve[]: 0 811 811 811 811
[  220.966445][T12992] Node 0 DMA32 free:174520kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12148kB inactive_anon:0kB active_file:4556kB inactive_file:144720kB unevictable:3536kB writepending:300kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:45372kB local_pcp:19836kB free_cma:0kB
[  220.980428][T12992] lowmem_reserve[]: 0 0 0 0 0
[  220.982849][T12992] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  220.993456][T12992] lowmem_reserve[]: 0 0 854 854 854
[  220.998132][T12992] Node 1 Normal free:336696kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9600kB inactive_anon:0kB active_file:1156kB inactive_file:8364kB unevictable:3536kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:44672kB local_pcp:24280kB free_cma:0kB
[  221.008304][T12992] lowmem_reserve[]: 0 0 0 0 0
[  221.009987][T12992] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  221.014392][T12992] Node 0 DMA32: 654*4kB (UM) 194*8kB (UME) 213*16kB (UME) 114*32kB (ME) 172*64kB (UM) 94*128kB (UME) 40*256kB (UME) 22*512kB (UME) 2*1024kB (M) 5*2048kB (UE) 26*4096kB (UM) = 174552kB
[  221.022558][T12992] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  221.028473][T12992] Node 1 Normal: 1016*4kB (UME) 171*8kB (UE) 168*16kB (UME) 220*32kB (UME) 161*64kB (UME) 37*128kB (UM) 3*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 8*2048kB (UM) 69*4096kB (UM) = 336632kB
[  221.041420][T12992] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  221.044249][T12992] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  221.054399][T12992] 42155 total pagecache pages
[  221.057247][T12992] 0 pages in swap cache
[  221.058844][T12992] Free swap  = 124996kB
[  221.060182][T12992] Total swap = 124996kB
[  221.061592][T12992] 786301 pages RAM
[  221.062908][T12992] 0 pages HighMem/MovableOnly
[  221.064429][T12992] 241331 pages reserved
[  221.066114][T12992] 0 pages cma reserved
[  222.123843][T13014] lo speed is unknown, defaulting to 1000
[  222.127256][T13014] lo speed is unknown, defaulting to 1000
[  222.130206][T13014] lo speed is unknown, defaulting to 1000
[  222.278307][T13018] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  222.283520][T13018] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  222.298478][T13014] infiniband syz0: set down
[  222.300568][T13014] infiniband syz0: added lo
[  222.302560][  T975] lo speed is unknown, defaulting to 1000
[  222.306333][T13014] syz0: rxe_create_cq: returned err = -12
[  222.308633][T13014] infiniband syz0: Couldn't create ib_mad CQ
[  222.312161][T13014] infiniband syz0: Couldn't open port 1
[  222.333514][T13014] RDS/IB: syz0: added
[  222.335226][T13014] smc: adding ib device syz0 with port count 1
[  222.338504][T13014] smc:    ib device syz0 port 1 has pnetid 
[  222.342869][  T975] lo speed is unknown, defaulting to 1000
[  222.348218][T13014] lo speed is unknown, defaulting to 1000
[  222.551799][T13014] lo speed is unknown, defaulting to 1000
[  222.793283][T13014] lo speed is unknown, defaulting to 1000
[  223.276573][T13080] validate_nla: 2 callbacks suppressed
[  223.276617][T13080] netlink: 'syz.1.1958': attribute type 15 has an invalid length.
[  223.281360][T13080] netlink: 'syz.1.1958': attribute type 18 has an invalid length.
[  223.659370][T13092] syzkaller0: entered promiscuous mode
[  223.661506][T13092] syzkaller0: entered allmulticast mode
[  223.775841][T13104] netlink: 'syz.1.1966': attribute type 2 has an invalid length.
[  223.954726][T13112] netlink: 'syz.1.1970': attribute type 12 has an invalid length.
[  224.053892][T13121] netlink: 'syz.1.1972': attribute type 9 has an invalid length.
[  224.058843][T13121] __nla_validate_parse: 12 callbacks suppressed
[  224.058857][T13121] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1972'.
[  224.150346][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1974'.
[  224.251885][T13134] netlink: 'syz.1.1976': attribute type 2 has an invalid length.
[  224.307594][T13134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.329473][  T975] lo speed is unknown, defaulting to 1000
[  224.332219][  T975] syz0: Port: 1 Link ACTIVE
[  224.334292][  T975] lo speed is unknown, defaulting to 1000
[  224.399848][T13141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1976'.
[  224.405591][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'.
[  225.867713][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1981'.
[  225.975845][T13171] netlink: 'syz.1.1983': attribute type 12 has an invalid length.
[  225.981999][T13171] netlink: 'syz.1.1983': attribute type 4 has an invalid length.
[  226.090640][T13181] netlink: ct family unspecified
[  226.093562][T13181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.179035][T13188] syz_tun: entered promiscuous mode
[  226.182310][T13188] batadv_slave_0: entered promiscuous mode
[  226.185608][T13188] hsr0: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  226.190261][T13188] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  226.196591][T13188] hsr0: entered allmulticast mode
[  226.198637][T13188] syz_tun: entered allmulticast mode
[  226.200741][T13188] batadv_slave_0: entered allmulticast mode
[  226.203927][T13184] syzkaller1: entered promiscuous mode
[  226.209470][T13184] syzkaller1: entered allmulticast mode
[  226.215940][T13184] openvswitch: netlink: Key type 537 is out of range max 32
[  226.444362][T13197] netlink: 'syz.2.1991': attribute type 7 has an invalid length.
[  226.452363][T13197] netlink: 'syz.2.1991': attribute type 8 has an invalid length.
[  226.780099][T13216] syzkaller0: entered promiscuous mode
[  226.781990][T13216] syzkaller0: entered allmulticast mode
[  228.246932][T13243] lo speed is unknown, defaulting to 1000
[  228.312488][T13249] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  228.433157][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2006'.
[  228.436539][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'.
[  228.447929][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'.
[  228.524337][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'.
[  228.529796][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2004'.
[  228.605238][T13261] lo speed is unknown, defaulting to 1000
[  228.742652][T13243] lo speed is unknown, defaulting to 1000
[  229.142497][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2010'.
[  229.164102][T13268] lo speed is unknown, defaulting to 1000
[  229.193091][T13261] lo speed is unknown, defaulting to 1000
[  229.520497][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'.
[  229.624003][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'.
[  229.778394][T13293] netlink: 'syz.1.2018': attribute type 1 has an invalid length.
[  229.781353][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'.
[  229.792467][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'.
[  229.796448][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  229.866581][T13268] lo speed is unknown, defaulting to 1000
[  229.994332][T13305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2022'.
[  230.016400][T13305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2022'.
[  230.040155][T13305] lo speed is unknown, defaulting to 1000
[  230.080246][T13309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2022'.
[  230.083193][T13309] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2022'.
[  230.149247][T13308] netlink: 'syz.1.2023': attribute type 11 has an invalid length.
[  231.160048][T13305] lo speed is unknown, defaulting to 1000
[  231.893251][T13328] netlink: 'syz.1.2029': attribute type 1 has an invalid length.
[  232.045001][T13333] syzkaller0: entered promiscuous mode
[  232.046861][T13333] syzkaller0: entered allmulticast mode
[  232.121166][T13335] lo speed is unknown, defaulting to 1000
[  232.320402][T13336] netlink: 'syz.2.2031': attribute type 2 has an invalid length.
[  232.514465][T13350] syzkaller0: entered promiscuous mode
[  232.516931][T13350] syzkaller0: entered allmulticast mode
[  232.785863][T13335] lo speed is unknown, defaulting to 1000
[  232.807616][T13373] netlink: 'syz.0.2043': attribute type 2 has an invalid length.
[  232.821503][T13365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.837135][T13373] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  232.854462][T13373] veth0_to_team: entered promiscuous mode
[  232.857342][T13373] veth0_to_team: entered allmulticast mode
[  232.901777][T13365] siw: device registration error -23
[  232.985341][T13379] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  232.993845][T13379] netlink: 'syz.0.2045': attribute type 1 has an invalid length.
[  233.750826][ T7813] lo speed is unknown, defaulting to 1000
[  233.752566][ T7813] syz0: Port: 1 Link DOWN
[  233.754571][ T7813] lo speed is unknown, defaulting to 1000
[  233.840220][T13410] sctp: [Deprecated]: syz.1.2051 (pid 13410) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.840220][T13410] Use struct sctp_sack_info instead
[  233.891311][T13412] netlink: 'syz.1.2052': attribute type 1 has an invalid length.
[  233.940530][T13412] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  233.960074][T13412] veth13: entered promiscuous mode
[  233.963563][T13412] bond10: (slave veth13): Enslaving as a backup interface with a down link
[  233.971107][T13412] 8021q: adding VLAN 0 to HW filter on device bond10
[  233.971359][   T13] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  234.015947][T13426] netlink: 'syz.1.2056': attribute type 8 has an invalid length.
[  234.044115][T13428] netlink: 'syz.0.2057': attribute type 4 has an invalid length.
[  234.067541][T13430] syzkaller1: entered promiscuous mode
[  234.069362][T13430] syzkaller1: entered allmulticast mode
[  234.086369][   T12] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  234.182232][T13439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.185114][T13439] syzkaller0: entered promiscuous mode
[  234.187630][T13439] syzkaller0: entered allmulticast mode
[  234.197038][T13439] tipc: Resetting bearer <eth:syzkaller0>
[  234.201297][T13438] tipc: Resetting bearer <eth:syzkaller0>
[  234.211420][T13438] tipc: Disabling bearer <eth:syzkaller0>
[  234.224552][T13441] netlink: 'syz.0.2063': attribute type 6 has an invalid length.
[  234.358787][T13450] netlink: 'syz.0.2065': attribute type 1 has an invalid length.
[  234.382159][T13450] __nla_validate_parse: 15 callbacks suppressed
[  234.382175][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'.
[  234.401130][T13450] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  234.406132][T13450] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  234.451616][T13453] gretap4: entered promiscuous mode
[  234.455211][T13453] bond14: (slave gretap4): making interface the new active one
[  234.458943][T13453] bond14: (slave gretap4): Enslaving as an active interface with an up link
[  234.589276][T13462] syzkaller0: entered promiscuous mode
[  234.590979][T13462] syzkaller0: entered allmulticast mode
[  235.971480][T13491] siw: device registration error -23
[  236.009475][T13495] team0: Device veth1_macvtap failed to register rx_handler
[  236.024247][T13494] lo speed is unknown, defaulting to 1000
[  236.096834][T13504] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  236.143075][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'.
[  236.311576][T13516] pim6reg1: entered promiscuous mode
[  236.313231][T13516] pim6reg1: entered allmulticast mode
[  236.441901][T13518] netlink: 'syz.0.2079': attribute type 1 has an invalid length.
[  236.470323][T13494] lo speed is unknown, defaulting to 1000
[  236.539232][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'.
[  236.562934][T13520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2080'.
[  236.571343][T13520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2080'.
[  236.664511][ T8324] block nbd3: Receive control failed (result -32)
[  236.738825][T13534] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  236.742316][T13535] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  236.789593][T13537] lo speed is unknown, defaulting to 1000
[  237.033785][T13551] netlink: 'syz.1.2087': attribute type 12 has an invalid length.
[  237.039986][T13551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2087'.
[  237.078642][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'.
[  237.519115][T13537] lo speed is unknown, defaulting to 1000
[  237.873665][T13572] tipc: New replicast peer: 255.255.255.255
[  237.877246][T13572] tipc: Enabled bearer <udp:syz2>, priority 6
[  237.982980][T13577] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  237.999067][T13575] pim6reg1: entered promiscuous mode
[  238.009829][T13575] pim6reg1: entered allmulticast mode
[  238.062774][T13582] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2093'.
[  238.098049][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'.
[  238.149695][T13583] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2091'.
[  238.268869][T13583] 8021q: adding VLAN 0 to HW filter on device bond11
[  238.272536][T13583] bond11: entered promiscuous mode
[  238.299848][T13583] team0: Port device bond11 added
[  238.374292][T13597] netlink: 'syz.2.2094': attribute type 14 has an invalid length.
[  238.415284][T13597] netlink: 'syz.2.2094': attribute type 14 has an invalid length.
[  238.553380][T13605] team0: Port device gtp1 added
[  238.587045][T13608] netlink: 'syz.2.2096': attribute type 1 has an invalid length.
[  238.721646][T13623] geneve5: entered promiscuous mode
[  238.724361][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.728191][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.731967][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.735786][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.924144][T13631] netlink: 'syz.0.2103': attribute type 12 has an invalid length.
[  238.980380][T13636] bond0: down delay (5) is not a multiple of miimon (33271), value rounded to 0 ms
[  238.987694][T13636] bond0: option all_slaves_active: invalid value (7)
[  239.046680][T13644] netlink: 'syz.0.2107': attribute type 1 has an invalid length.
[  239.062700][T13644] 8021q: adding VLAN 0 to HW filter on device bond15
[  239.068876][T13644] erspan0: entered allmulticast mode
[  239.257492][T13651] nbd: socks must be embedded in a SOCK_ITEM attr
[  239.260561][T13651] block nbd4: shutting down sockets
[  239.263796][T13649] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  239.457616][T13656] __nla_validate_parse: 6 callbacks suppressed
[  239.457631][T13656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2109'.
[  239.467357][T13653] bond18 (unregistering): Released all slaves
[  239.559778][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2110'.
[  239.596847][T13663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2111'.
[  239.779325][T13669] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2113'.
[  239.853430][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'.
[  240.161913][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'.
[  240.175459][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'.
[  240.398299][T13715] netlink: 'syz.0.2123': attribute type 41 has an invalid length.
[  240.479142][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'.
[  240.482060][T13734] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  240.484766][T13734] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  240.599175][T13755] netlink: 'syz.1.2133': attribute type 1 has an invalid length.
[  240.835551][T13779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'.
[  240.839482][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'.
[  242.052464][T13792] : tun_chr_ioctl cmd 2147767520
[  242.371895][T13814] bridge6: port 1(veth15) entered blocking state
[  242.374111][T13814] bridge6: port 1(veth15) entered disabled state
[  242.376343][T13814] veth15: entered allmulticast mode
[  242.378997][T13814] veth15: entered promiscuous mode
[  242.385623][T13814] bridge6: port 2(veth0_to_bond) entered blocking state
[  242.389742][T13814] bridge6: port 2(veth0_to_bond) entered disabled state
[  242.393373][T13814] veth0_to_bond: entered allmulticast mode
[  242.396445][T13814] veth0_to_bond: entered promiscuous mode
[  242.470260][T13822] netlink: 'syz.0.2146': attribute type 21 has an invalid length.
[  242.480962][T13822] tipc: Enabled bearer <udp:syz0>, priority 6
[  242.530496][T13826] netlink: 'syz.2.2147': attribute type 5 has an invalid length.
[  242.772656][T13857] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  243.078501][T13869] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  243.363806][T13888] 8021q: adding VLAN 0 to HW filter on device batadv2
[  243.370703][T13888] batadv2: entered promiscuous mode
[  243.373230][T13888] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  243.380284][T13888] team0: Failed to send options change via netlink (err -105)
[  243.383916][T13888] team0: Port device batadv2 added
[  243.734400][T13924] syzkaller1: entered promiscuous mode
[  243.739584][T13924] syzkaller1: entered allmulticast mode
[  243.743508][T13924] openvswitch: netlink: Key type 10512 is out of range max 32
[  244.511075][T13995] netlink: 'syz.2.2184': attribute type 322 has an invalid length.
[  244.513979][T13995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.519882][T13996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.545645][T13998] __nla_validate_parse: 16 callbacks suppressed
[  244.545659][T13998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2185'.
[  244.689296][T14004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2187'.
[  244.693128][T14003] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2187'.
[  244.750740][T14002] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  245.127752][T14012] netlink: 'syz.1.2190': attribute type 1 has an invalid length.
[  245.569117][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'.
[  245.572850][T14020] erspan0: left allmulticast mode
[  245.575571][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'.
[  245.615432][T14023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2195'.
[  245.652824][T14026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2196'.
[  245.689453][T14030] netpci0: tun_chr_ioctl cmd 1074025681
[  245.693427][T14030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.745058][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'.
[  245.749733][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'.
[  245.753216][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'.
[  245.764949][T14032] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.774583][T14032] bond0: (slave rose0): Enslaving as an active interface with an up link
[  246.102064][T14053] syzkaller1: entered promiscuous mode
[  246.104305][T14053] syzkaller1: entered allmulticast mode
[  246.512915][T14061] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  246.639703][T14071] syzkaller1: entered promiscuous mode
[  246.642048][T14071] syzkaller1: entered allmulticast mode
[  246.645680][T14071] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  246.796074][T14073] netlink: 'syz.0.2205': attribute type 1 has an invalid length.
[  246.942679][ T6254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.945636][ T6254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.891665][T14152] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  247.895734][T14152] veth0_to_bond: left allmulticast mode
[  247.900288][T14152] veth0_to_bond: left promiscuous mode
[  247.902108][T14152] bridge6: port 2(veth0_to_bond) entered disabled state
[  247.914199][T14152] team0: Port device gtp1 removed
[  247.917709][T14152] veth15: left allmulticast mode
[  247.919306][T14152] veth15: left promiscuous mode
[  247.920506][T14154] netlink: 'syz.1.2231': attribute type 1 has an invalid length.
[  247.920938][T14152] bridge6: port 1(veth15) entered disabled state
[  247.940574][T14152] netlink: 'syz.2.2230': attribute type 10 has an invalid length.
[  247.943015][T14152] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  248.064022][T14172] netlink: 'syz.1.2237': attribute type 1 has an invalid length.
[  248.092839][T14172] 8021q: adding VLAN 0 to HW filter on device bond13
[  248.103758][T14172] bond13: entered promiscuous mode
[  248.215772][T14194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  248.220869][T14194] syzkaller0: entered promiscuous mode
[  248.222716][T14194] syzkaller0: entered allmulticast mode
[  248.241717][T14198] netlink: 'syz.2.2246': attribute type 2 has an invalid length.
[  248.434437][T14209] lo speed is unknown, defaulting to 1000
[  248.554698][T14226] netlink: 'syz.1.2250': attribute type 13 has an invalid length.
[  248.559806][T14226] netlink: 'syz.1.2250': attribute type 17 has an invalid length.
[  248.658491][T14226] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.662504][T14226] 8021q: adding VLAN 0 to HW filter on device team0
[  248.667357][T14226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  248.673591][ T7813] lo speed is unknown, defaulting to 1000
[  248.675614][ T7813] syz0: Port: 1 Link ACTIVE
[  248.686831][ T7813] lo speed is unknown, defaulting to 1000
[  248.708190][T14227] lo speed is unknown, defaulting to 1000
[  248.914048][T14209] lo speed is unknown, defaulting to 1000
[  249.157937][T14230] netlink: 'syz.2.2251': attribute type 9 has an invalid length.
[  249.180091][T14227] lo speed is unknown, defaulting to 1000
[  249.867686][T14226] syz.1.2250 (14226) used greatest stack depth: 18848 bytes left
[  250.161575][T14266] __nla_validate_parse: 49 callbacks suppressed
[  250.161586][T14266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2256'.
[  250.183222][T14266] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.258155][T14266] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.334121][T14266] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.428522][T14266] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.692192][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2259'.
[  251.771053][ T5910] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.790554][T14279] lo speed is unknown, defaulting to 1000
[  251.790651][ T6144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.810925][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.844897][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.946765][T14291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.956954][T14291] syzkaller0: entered promiscuous mode
[  251.959059][T14291] syzkaller0: entered allmulticast mode
[  251.972389][T14291] tipc: Resetting bearer <eth:syzkaller0>
[  251.976777][T14290] tipc: Resetting bearer <eth:syzkaller0>
[  251.989227][T14290] tipc: Disabling bearer <eth:syzkaller0>
[  252.138282][T14303] syzkaller0: entered promiscuous mode
[  252.140536][T14303] syzkaller0: entered allmulticast mode
[  252.214805][T14279] lo speed is unknown, defaulting to 1000
[  252.904577][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2266'.
[  252.959527][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'.
[  252.983519][T14311] macvtap1: entered promiscuous mode
[  252.985559][T14311] erspan0: entered promiscuous mode
[  252.988095][T14311] macvtap1: entered allmulticast mode
[  252.990214][T14311] erspan0: entered allmulticast mode
[  253.056330][T14311] 8021q: adding VLAN 0 to HW filter on device bond18
[  253.110647][T14311] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  253.115970][T14311] bond18: (slave macvlan0): Enslaving as a backup interface with a down link
[  253.311337][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'.
[  253.343889][T14327] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  253.608673][T14345] netlink: 186180 bytes leftover after parsing attributes in process `syz.2.2275'.
[  253.713839][T14353] tipc: Enabling of bearer <et:g> rejected, media not registered
[  253.857742][T14366] validate_nla: 95 callbacks suppressed
[  253.857760][T14366] netlink: 'syz.0.2277': attribute type 13 has an invalid length.
[  253.863027][T14366] netlink: 'syz.0.2277': attribute type 17 has an invalid length.
[  253.902005][T14366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.950928][T14364] lo speed is unknown, defaulting to 1000
[  254.103888][T14381] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2286'.
[  254.123058][T14381] bond18: (slave macvlan0): Releasing backup interface
[  254.390967][T14364] lo speed is unknown, defaulting to 1000
[  254.786227][T14406] tipc: Trying to set illegal importance in message
[  254.786962][T14408] netlink: 'syz.1.2293': attribute type 2 has an invalid length.
[  254.795031][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2293'.
[  254.804533][T14406] syzkaller1: entered promiscuous mode
[  254.817710][T14406] syzkaller1: entered allmulticast mode
[  254.981745][T14412] bond10: (slave ip6gretap1): Removing an active aggregator
[  254.999060][T14412] bond10: (slave ip6gretap1): Releasing backup interface
[  255.001524][T14412] bond10: (slave ip6gretap1): the permanent HWaddr of slave - b2:96:d9:c4:dc:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  255.001589][T14415] netlink: 'syz.1.2295': attribute type 10 has an invalid length.
[  255.041780][T14412] bond10: (slave veth13): Releasing backup interface
[  255.051107][T14412] bond11: left promiscuous mode
[  255.065581][T14412] team0: Port device bond11 removed
[  255.073088][T14412] batadv2: left promiscuous mode
[  255.090671][T14412] team0: Port device batadv2 removed
[  255.102188][T14415] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  255.117082][T14416] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  255.123332][T14416] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  255.291553][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.354979][T14424] syz_tun: entered allmulticast mode
[  255.367309][T14422] syz_tun: left allmulticast mode
[  255.606160][T14430] lo speed is unknown, defaulting to 1000
[  255.855354][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  255.928268][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2301'.
[  256.005755][T14445] lo speed is unknown, defaulting to 1000
[  256.028920][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'.
[  256.049299][T14430] lo speed is unknown, defaulting to 1000
[  256.051487][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2303'.
[  256.101091][T14447] netlink: 'syz.2.2303': attribute type 1 has an invalid length.
[  256.897685][T14445] lo speed is unknown, defaulting to 1000
[  257.341336][T14479] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  257.525180][T14498] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2313'.
[  257.792051][T14517] netlink: 'syz.0.2317': attribute type 1 has an invalid length.
[  257.794631][T14517] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2317'.
[  258.089003][T14539] netlink: 'syz.2.2323': attribute type 21 has an invalid length.
[  258.091533][T14539] netlink: 'syz.2.2323': attribute type 22 has an invalid length.
[  258.094264][T14539] netlink: 'syz.2.2323': attribute type 23 has an invalid length.
[  258.117662][T14539] netlink: 'syz.2.2323': attribute type 25 has an invalid length.
[  258.138907][T14539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2323'.
[  258.512489][T14564] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2329'.
[  258.558167][T14564] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2329'.
[  258.717108][T14579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2331'.
[  259.783395][T14597] validate_nla: 1 callbacks suppressed
[  259.783406][T14597] netlink: 'syz.0.2337': attribute type 1 has an invalid length.
[  259.789926][T14600] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  259.821028][ T3028] smc: removing ib device syz!
[  259.831022][T14593] macvlan0: entered allmulticast mode
[  259.833435][T14593] veth1_vlan: entered allmulticast mode
[  259.836295][T14593] macvlan0: entered promiscuous mode
[  259.838971][T14593] team0: Port device macvlan0 added
[  259.892790][T14609] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  259.951546][T14615] netlink: 'syz.2.2340': attribute type 11 has an invalid length.
[  259.994897][T14617] delete_channel: no stack
[  260.053554][T14621] macvlan0: left promiscuous mode
[  260.059867][T14621] veth1_vlan: left allmulticast mode
[  260.070359][T14621] team0: Port device macvlan0 removed
[  260.077257][T14621] bond0: (slave wlan1): Releasing backup interface
[  260.143944][T14622] team0: Mode changed to "broadcast"
[  260.302554][T14626] macvlan0: left allmulticast mode
[  260.304621][T14626] veth1_macvtap: left promiscuous mode
[  260.312673][T14626] hsr0: left allmulticast mode
[  260.314246][T14626] syz_tun: left allmulticast mode
[  260.315937][T14626] batadv_slave_0: left allmulticast mode
[  260.323465][T14626] veth13: left promiscuous mode
[  260.325622][T14626] bond13: left promiscuous mode
[  260.328037][ T5313] lo speed is unknown, defaulting to 1000
[  260.330106][ T5313] syz0: Port: 1 Link DOWN
[  260.331634][ T5313] lo speed is unknown, defaulting to 1000
[  260.333743][T14631] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  260.341840][T14631] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  260.390915][T14636] netlink: 'syz.2.2348': attribute type 2 has an invalid length.
[  260.588722][T14656] netlink: 'syz.0.2355': attribute type 2 has an invalid length.
[  260.593091][T14660] netlink: 'syz.1.2351': attribute type 21 has an invalid length.
[  260.611389][T14654] erspan0: left allmulticast mode
[  260.613060][T14654] erspan0: left promiscuous mode
[  260.621389][T14660] netlink: 'syz.1.2351': attribute type 1 has an invalid length.
[  260.721308][T14675] netlink: 'syz.2.2358': attribute type 10 has an invalid length.
[  260.724216][T14675] !: entered promiscuous mode
[  260.727513][T14675] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  260.815564][T14681] 8021q: adding VLAN 0 to HW filter on device bond16
[  260.822208][T14684] netlink: 'syz.2.2361': attribute type 1 has an invalid length.
[  260.826245][T14684] netlink: 'syz.2.2361': attribute type 1 has an invalid length.
[  260.829713][T14684] netlink: 'syz.2.2361': attribute type 2 has an invalid length.
[  260.848100][T14681] bond16: (slave bridge9): Enslaving as an active interface with an up link
[  260.859797][T14684] geneve2: entered promiscuous mode
[  260.870945][T14684] __nla_validate_parse: 15 callbacks suppressed
[  260.870960][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'.
[  260.893682][ T6144] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.900414][ T6144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.905617][ T6144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.910145][ T6144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.085608][T14695] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  261.115383][T14697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2365'.
[  261.134676][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'.
[  261.290905][T14705] syzkaller0: entered promiscuous mode
[  261.295961][T14705] syzkaller0: entered allmulticast mode
[  261.502525][T14726] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  261.869530][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'.
[  261.909761][T14734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.952401][T14741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2377'.
[  261.971759][T14731] IPVS: Error connecting to the multicast addr
[  262.018351][T14746] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.095883][T14752] 8021q: adding VLAN 0 to HW filter on device team0
[  262.101647][T14752] !: left promiscuous mode
[  262.104622][T14752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  262.112306][ T5313] lo speed is unknown, defaulting to 1000
[  262.114960][ T5313] sz1: Port: 1 Link ACTIVE
[  262.222151][T14746] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.234399][ T5313] lo speed is unknown, defaulting to 1000
[  262.244192][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.247519][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.250282][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.252966][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.262119][T14746] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.351947][T14746] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.481600][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.491737][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.504595][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.517133][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.677000][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2381'.
[  262.751752][T14767] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2382'.
[  262.755254][T14767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'.
[  262.977354][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'.
[  262.984303][T14787] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  263.055693][T14790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2389'.
[  263.482163][T14829] openvswitch: netlink: Flow actions attr not present in new flow.
[  263.501319][T14826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.537634][T14823] lo speed is unknown, defaulting to 1000
[  263.730045][T14823] lo speed is unknown, defaulting to 1000
[  264.069112][T14853] tipc: Resetting bearer <ib:ip6gre0>
[  264.078814][T14853] batadv0: left promiscuous mode
[  264.080521][T14853] batadv0: left allmulticast mode
[  264.088359][T14853] mac80211_hwsim hwsim18 wlan0: left promiscuous mode
[  264.091911][T14853] macvtap1: left promiscuous mode
[  264.093685][T14853] macvtap1: left allmulticast mode
[  264.097907][T14853] geneve2: left promiscuous mode
[  264.101514][   T10] lo speed is unknown, defaulting to 1000
[  264.102984][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.103391][   T10] sz1: Port: 1 Link DOWN
[  264.106637][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.110141][ T5874] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.113554][ T5874] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.116613][   T10] lo speed is unknown, defaulting to 1000
[  264.421379][T14858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  264.650564][T14868] lo speed is unknown, defaulting to 1000
[  264.925672][T14888] bridge0: port 1(erspan0) entered blocking state
[  264.933051][T14888] bridge0: port 1(erspan0) entered disabled state
[  264.935307][T14888] erspan0: entered allmulticast mode
[  264.940245][T14888] erspan0: left allmulticast mode
[  265.001760][T14889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.010642][T14886] tipc: Resetting bearer <eth:syzkaller0>
[  266.192003][T14886] tipc: Disabling bearer <eth:syzkaller0>
[  266.197258][T14868] lo speed is unknown, defaulting to 1000
[  266.293827][T14902] __nla_validate_parse: 8 callbacks suppressed
[  266.293838][T14902] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2420'.
[  266.383480][T14909] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  266.563857][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'.
[  266.854739][T14939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2428'.
[  266.944154][T14939] smc: net device bond0 applied user defined pnetid SYZ2
[  266.948954][T14939] smc: net device bond0 erased user defined pnetid SYZ2
[  267.204281][T14957] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2431'.
[  268.642574][T14980] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1
[  268.725855][T14999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.731531][T14995] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  268.733844][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'.
[  268.746469][T14999] tipc: Disabling bearer <eth:syzkaller0>
[  268.835423][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2447'.
[  268.842142][T15006] 8021q: VLANs not supported on gre0
[  268.893691][T15019] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2448'.
[  269.071336][T15037] openvswitch: netlink: Message has 24 unknown bytes.
[  269.073819][T15037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.155682][T15042] sctp: [Deprecated]: syz.1.2452 (pid 15042) Use of struct sctp_assoc_value in delayed_ack socket option.
[  269.155682][T15042] Use struct sctp_sack_info instead
[  269.197726][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.236858][T15045] 8021q: adding VLAN 0 to HW filter on device bond14
[  269.249180][T15045] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2453'.
[  269.252461][T15045] validate_nla: 11 callbacks suppressed
[  269.252471][T15045] netlink: 'syz.1.2453': attribute type 1 has an invalid length.
[  269.450440][T15066] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2455'.
[  269.453239][T15066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.102574][T15123] netlink: 'syz.0.2461': attribute type 9 has an invalid length.
[  270.188429][T15131] netlink: 'syz.2.2465': attribute type 2 has an invalid length.
[  270.327002][T15148] netlink: 'syz.2.2468': attribute type 8 has an invalid length.
[  270.378196][T15151] ipvlan2: entered promiscuous mode
[  270.383350][T15151] bridge0: port 1(ipvlan2) entered blocking state
[  270.385957][T15151] bridge0: port 1(ipvlan2) entered disabled state
[  270.389948][T15151] ipvlan2: entered allmulticast mode
[  270.392070][T15151] bridge0: entered allmulticast mode
[  270.399865][T15151] ipvlan2: left allmulticast mode
[  270.401900][T15151] bridge0: left allmulticast mode
[  270.722619][T15176] syzkaller1: entered promiscuous mode
[  270.724525][T15176] syzkaller1: entered allmulticast mode
[  270.892939][T15179] netlink: 'syz.1.2476': attribute type 13 has an invalid length.
[  270.913844][T15179] lo speed is unknown, defaulting to 1000
[  271.151097][T15185] netlink: 'syz.0.2478': attribute type 1 has an invalid length.
[  271.159595][T15179] lo speed is unknown, defaulting to 1000
[  271.292981][   T57] block nbd4: Receive control failed (result -32)
[  271.449312][T15198] syzkaller0: entered promiscuous mode
[  271.451085][T15198] syzkaller0: entered allmulticast mode
[  271.698308][T15200] __nla_validate_parse: 7 callbacks suppressed
[  271.698319][T15200] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2481'.
[  272.838810][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'.
[  272.909139][T15217] wg0 speed is unknown, defaulting to 1000
[  272.912032][T15217] wg0 speed is unknown, defaulting to 1000
[  272.926380][T15217] wg0 speed is unknown, defaulting to 1000
[  273.358153][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2487'.
[  273.397543][T15217] infiniband syz2: set down
[  273.402363][T15217] infiniband syz2: added wg0
[  273.404570][ T7814] wg0 speed is unknown, defaulting to 1000
[  273.454908][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'.
[  273.465739][T15217] RDS/IB: syz2: added
[  273.467343][T15217] smc: adding ib device syz2 with port count 1
[  273.474549][T15217] smc:    ib device syz2 port 1 has pnetid 
[  273.485000][ T7814] wg0 speed is unknown, defaulting to 1000
[  273.488199][T15217] wg0 speed is unknown, defaulting to 1000
[  273.515378][T15245] netlink: 'syz.2.2489': attribute type 2 has an invalid length.
[  273.524617][T15245] k*]: entered promiscuous mode
[  273.549816][   T52] lo speed is unknown, defaulting to 1000
[  273.551676][   T52] sz1: Port: 1 Link ACTIVE
[  273.554813][   T52] lo speed is unknown, defaulting to 1000
[  273.559020][T15245] veth0_to_team: entered promiscuous mode
[  273.561071][T15245] veth0_to_team: entered allmulticast mode
[  273.707145][T15258] tipc: Enabling of bearer <ib:caif0> rejected, max 3 bearers permitted
[  273.753331][T15217] wg0 speed is unknown, defaulting to 1000
[  273.929679][T15277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2495'.
[  273.978394][T15217] wg0 speed is unknown, defaulting to 1000
[  273.978494][T15277] lo speed is unknown, defaulting to 1000
[  274.125629][T15217] wg0 speed is unknown, defaulting to 1000
[  274.225578][T15277] lo speed is unknown, defaulting to 1000
[  274.291067][T15281] netlink: 'syz.0.2496': attribute type 1 has an invalid length.
[  274.725009][T15310] lo speed is unknown, defaulting to 1000
[  274.739795][T15308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2504'.
[  274.742786][T15308] netlink: 'syz.1.2504': attribute type 7 has an invalid length.
[  274.745846][T15308] netlink: 'syz.1.2504': attribute type 8 has an invalid length.
[  274.752878][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'.
[  274.835267][T15308] syzkaller0: entered promiscuous mode
[  274.837314][T15308] syzkaller0: entered allmulticast mode
[  275.100650][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'.
[  275.104088][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2505'.
[  276.219028][T15332] netlink: 'syz.1.2509': attribute type 1 has an invalid length.
[  276.265964][T15332] 8021q: adding VLAN 0 to HW filter on device bond15
[  276.288387][T15337] 8021q: adding VLAN 0 to HW filter on device bond15
[  276.291465][T15337] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  276.297007][T15337] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  276.311134][T15310] lo speed is unknown, defaulting to 1000
[  276.341142][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'.
[  276.344852][T15332] veth15: entered promiscuous mode
[  276.351215][T15332] bond15: (slave veth15): Enslaving as an active interface with a down link
[  276.540670][T15310] wg0 speed is unknown, defaulting to 1000
[  277.124977][T15379] __nla_validate_parse: 1 callbacks suppressed
[  277.124990][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2523'.
[  277.509454][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2529'.
[  277.563426][T15397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2529'.
[  277.741038][T15420] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  277.761280][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'.
[  277.784726][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2536'.
[  277.804672][T15426] team1: entered promiscuous mode
[  277.807075][T15426] team1: entered allmulticast mode
[  277.809558][T15426] 8021q: adding VLAN 0 to HW filter on device team1
[  277.847321][T15429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.849951][T15429] syzkaller0: entered promiscuous mode
[  277.851797][T15429] syzkaller0: entered allmulticast mode
[  277.881983][T15429] tipc: Resetting bearer <eth:syzkaller0>
[  277.884232][T15429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.891590][T15429] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2537'.
[  277.895694][T15428] tipc: Resetting bearer <eth:syzkaller0>
[  277.905912][T15428] tipc: Disabling bearer <eth:syzkaller0>
[  278.209377][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2539'.
[  278.296757][T15447] netlink: 'syz.0.2541': attribute type 1 has an invalid length.
[  278.299600][T15447] netlink: 'syz.0.2541': attribute type 4 has an invalid length.
[  278.302205][T15447] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2541'.
[  278.302581][T15449] netlink: 'syz.0.2541': attribute type 1 has an invalid length.
[  278.308281][T15449] netlink: 'syz.0.2541': attribute type 4 has an invalid length.
[  278.311459][T15449] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2541'.
[  278.352980][T15451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2542'.
[  278.364720][T15451] syzkaller1: tun_chr_ioctl cmd 1074025677
[  278.371707][T15451] syzkaller1: linktype set to 778
[  278.379835][T15451] netlink: 'syz.0.2542': attribute type 1 has an invalid length.
[  278.660480][T15464] netlink: 'syz.0.2547': attribute type 58 has an invalid length.
[  279.011298][T15498] macsec2: entered promiscuous mode
[  279.013014][T15498] macsec2: entered allmulticast mode
[  279.137729][T15507] lo speed is unknown, defaulting to 1000
[  279.321167][T15507] lo speed is unknown, defaulting to 1000
[  279.418587][T15507] wg0 speed is unknown, defaulting to 1000
[  280.068843][T15530] ieee802154 phy0 wpan0: encryption failed: -22
[  280.156294][T15534] netlink: 'syz.1.2568': attribute type 10 has an invalid length.
[  280.167161][T15534] netlink: 'syz.1.2568': attribute type 10 has an invalid length.
[  280.206708][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.209201][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.250912][T15538] sctp: [Deprecated]: syz.2.2570 (pid 15538) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.250912][T15538] Use struct sctp_sack_info instead
[  280.256745][T15539] sctp: [Deprecated]: syz.2.2570 (pid 15539) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.256745][T15539] Use struct sctp_sack_info instead
[  280.322406][T15542] syzkaller0: entered promiscuous mode
[  280.324330][T15542] syzkaller0: entered allmulticast mode
[  280.518813][T15544] netlink: 'syz.0.2572': attribute type 1 has an invalid length.
[  281.575928][T15544] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  281.787970][T15575] lo speed is unknown, defaulting to 1000
[  282.071919][T15584] netlink: 'syz.1.2581': attribute type 15 has an invalid length.
[  283.065487][T15575] lo speed is unknown, defaulting to 1000
[  283.159588][T15590] __nla_validate_parse: 22 callbacks suppressed
[  283.159602][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'.
[  283.189380][T15594] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2583'.
[  283.233723][T15575] wg0 speed is unknown, defaulting to 1000
[  284.067940][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2587'.
[  284.144022][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'.
[  284.148606][T15621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2591'.
[  284.153454][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'.
[  284.158709][T15621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2591'.
[  284.360242][T15644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2598'.
[  284.360752][T15646] netlink: 'syz.1.2597': attribute type 2 has an invalid length.
[  284.365847][T15646] netlink: 'syz.1.2597': attribute type 8 has an invalid length.
[  284.383341][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'.
[  284.385761][T15646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2597'.
[  284.407074][T15649] netlink: 'syz.2.2599': attribute type 1 has an invalid length.
[  284.440307][T15649] bond21: entered promiscuous mode
[  284.449407][T15649] 8021q: adding VLAN 0 to HW filter on device bond21
[  284.568162][T15662] netlink: 'syz.1.2602': attribute type 32 has an invalid length.
[  284.574964][T15662] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  284.851348][T15683] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  284.854052][T15685] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  284.856577][T15683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.859369][T15685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.865212][T15683] netlink: 'syz.2.2606': attribute type 22 has an invalid length.
[  284.875312][ T5874] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.875339][T15683] netlink: 'syz.2.2606': attribute type 22 has an invalid length.
[  284.884850][ T5874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.894555][ T5874] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.897211][ T5874] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.081619][T15691] batadv0: entered promiscuous mode
[  285.084169][T15691] batadv0: entered allmulticast mode
[  285.086066][T15691] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  285.392393][T15717] pimreg: left allmulticast mode
[  285.489831][   T33] audit: type=1800 audit(1755598035.296:6): pid=15726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2616" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=4472 res=0 errno=0
[  285.589380][T15732] validate_nla: 3 callbacks suppressed
[  285.589391][T15732] netlink: 'syz.2.2617': attribute type 1 has an invalid length.
[  285.625246][T15732] 8021q: adding VLAN 0 to HW filter on device bond22
[  285.660489][T15732] 8021q: adding VLAN 0 to HW filter on device bond22
[  285.663488][T15732] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  285.671489][T15732] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  285.753848][T15746] sctp: [Deprecated]: syz.2.2621 (pid 15746) Use of struct sctp_assoc_value in delayed_ack socket option.
[  285.753848][T15746] Use struct sctp_sack_info instead
[  285.824266][T15754] netlink: 'syz.2.2623': attribute type 1 has an invalid length.
[  285.871229][T15754] 8021q: adding VLAN 0 to HW filter on device bond23
[  285.898289][T15754] bond23: (slave veth23): Enslaving as a backup interface with a down link
[  286.114234][T15790] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  286.165307][T15802] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  286.186346][T15802] bond23: (slave veth23): Releasing backup interface
[  286.193901][T15802] netlink: 'syz.2.2635': attribute type 10 has an invalid length.
[  286.196718][T15802] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  286.215283][T15806] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  286.239480][T15802] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  286.242783][T15802] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  286.330756][T15816] syzkaller1: entered allmulticast mode
[  286.515642][T15833] bond14: (slave gretap4): Releasing active interface
[  286.535939][T15833] bond16: (slave bridge9): Releasing backup interface
[  286.554771][T15833] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  286.995782][T15854] Unsupported ieee802154 address type: 0
[  287.279459][T15887] openvswitch: netlink: IP tunnel TTL not specified.
[  287.595642][T15904] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  287.993023][T15912] netlink: 'syz.2.2667': attribute type 1 has an invalid length.
[  288.179598][T15923] __nla_validate_parse: 23 callbacks suppressed
[  288.179610][T15923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2672'.
[  288.404393][T15943] lo speed is unknown, defaulting to 1000
[  288.513162][T15951] gretap4: left promiscuous mode
[  288.515204][T15951] geneve5: left promiscuous mode
[  288.609610][T15959] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2682'.
[  288.612516][T15959] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2682'.
[  288.765951][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2686'.
[  288.777760][T15980] netlink: 'syz.0.2687': attribute type 9 has an invalid length.
[  288.780808][T15980] netlink: 'syz.0.2687': attribute type 6 has an invalid length.
[  288.822000][T15943] lo speed is unknown, defaulting to 1000
[  288.963437][T15986] netlink: 'syz.1.2688': attribute type 4 has an invalid length.
[  288.969139][T15943] wg0 speed is unknown, defaulting to 1000
[  289.148187][T15998] bond0: default FDB implementation only supports local addresses
[  289.151488][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'.
[  289.671909][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2691'.
[  289.836684][T16012] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1
[  289.972296][T16012] bond0 (unregistering): Released all slaves
[  290.250208][T16027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2697'.
[  290.320122][T16035] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  290.457690][T16051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'.
[  290.502568][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.505084][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.565498][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'.
[  290.635955][T16069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2710'.
[  290.644528][T16070] netlink: 'syz.2.2710': attribute type 1 has an invalid length.
[  290.663008][T16070] bond25: entered promiscuous mode
[  290.665341][T16070] 8021q: adding VLAN 0 to HW filter on device bond25
[  290.669690][T16076] netlink: 'syz.0.2712': attribute type 1 has an invalid length.
[  290.701895][T16076] 8021q: adding VLAN 0 to HW filter on device bond17
[  290.751669][T16081] netlink: 'syz.2.2713': attribute type 4 has an invalid length.
[  291.008466][T16096] netlink: 'syz.2.2718': attribute type 2 has an invalid length.
[  291.871111][T16121] netlink: 'syz.0.2725': attribute type 10 has an invalid length.
[  291.882758][T16121] netlink: 'syz.0.2725': attribute type 10 has an invalid length.
[  291.889242][T16121] dummy0: entered promiscuous mode
[  291.891179][T16121] dummy0: entered allmulticast mode
[  291.893492][T16121] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  292.715136][T16137] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  292.762804][T16139] netlink: 'syz.0.2731': attribute type 21 has an invalid length.
[  292.810581][T16141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.826251][T16144] syzkaller0: entered promiscuous mode
[  292.832760][T16144] syzkaller0: entered allmulticast mode
[  292.848616][T16144] tipc: Resetting bearer <eth:syzkaller0>
[  292.858979][T16144] tipc: Disabling bearer <eth:syzkaller0>
[  293.122012][T16165] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  293.165380][T16165] batadv0: left promiscuous mode
[  293.168671][T16165] batadv0: left allmulticast mode
[  293.171578][T16165] veth0_to_team: left promiscuous mode
[  293.174094][T16165] veth0_to_team: left allmulticast mode
[  293.201651][T16165] macsec2: left promiscuous mode
[  293.203328][T16165] macsec2: left allmulticast mode
[  293.212793][T16165] bond21: left promiscuous mode
[  293.230403][T16165] bond25: left promiscuous mode
[  293.236375][ T5874] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.239740][ T5874] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.244154][ T5313] lo speed is unknown, defaulting to 1000
[  293.247648][ T5313] sz1: Port: 1 Link DOWN
[  293.250552][ T5874] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.253948][ T5313] lo speed is unknown, defaulting to 1000
[  293.256783][ T5874] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  293.295849][T16174] dvmrp1: entered allmulticast mode
[  293.336635][T16177] __nla_validate_parse: 13 callbacks suppressed
[  293.336646][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2742'.
[  293.494769][T16184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.502658][T16184] tipc: Failed to remove unknown binding: 66,1,1/1435509220:1111707925/1111707927
[  293.508880][T16184] tipc: Failed to remove unknown binding: 66,1,1/1435509220:1111707925/1111707927
[  293.512084][T16184] tipc: Failed to remove unknown binding: 66,1,1/1435509220:1111707925/1111707927
[  293.568293][T16185] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2743'.
[  293.990258][T16187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'.
[  294.081149][T16193] vxcan1: entered allmulticast mode
[  294.083549][T16193] vxcan1: left allmulticast mode
[  294.210821][T16198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2747'.
[  294.315223][T16211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2750'.
[  294.339971][T16211] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2750'.
[  294.393981][T16215] netlink: 'syz.0.2752': attribute type 1 has an invalid length.
[  294.455629][T16217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2752'.
[  294.469743][T16215] 8021q: adding VLAN 0 to HW filter on device bond18
[  294.535546][T16226] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2754'.
[  294.575122][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2756'.
[  294.592387][T16231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2756'.
[  294.930913][T16270] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  295.196697][T16281] netlink: 'syz.1.2768': attribute type 1 has an invalid length.
[  295.663538][T16292] ieee802154 phy0 wpan0: encryption failed: -90
[  296.209272][T16281] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR
[  296.222046][T16294] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  296.419640][T16322] team0: Port device sit3 added
[  296.429434][T16322] netlink: 'syz.2.2776': attribute type 1 has an invalid length.
[  296.591598][T16342] bond0: up delay (65536) is not a multiple of miimon (33271), value rounded to 33271 ms
[  296.653310][T16345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  296.685780][T16347] netlink: 'syz.2.2784': attribute type 9 has an invalid length.
[  296.842964][T16362] netlink: 'syz.2.2788': attribute type 10 has an invalid length.
[  296.872969][T16364] netlink: 'syz.2.2789': attribute type 2 has an invalid length.
[  297.046326][    C1] ==================================================================
[  297.048822][    C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  297.051492][    C1] Read of size 1 at addr ffff8880211890b0 by task swapper/1/0
[  297.054132][    C1] 
[  297.055327][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  297.055339][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.055345][    C1] Call Trace:
[  297.055351][    C1]  <IRQ>
[  297.055355][    C1]  dump_stack_lvl+0x189/0x250
[  297.055369][    C1]  ? __kasan_check_byte+0x12/0x40
[  297.055382][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.055391][    C1]  ? lock_release+0x4b/0x3e0
[  297.055404][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  297.055415][    C1]  print_report+0xca/0x240
[  297.055423][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  297.055435][    C1]  kasan_report+0x118/0x150
[  297.055446][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  297.055459][    C1]  xfrm_state_find+0x2cf2/0x5400
[  297.055476][    C1]  ? unwind_next_frame+0xa5/0x2390
[  297.055486][    C1]  ? xfrm_state_find+0x1da/0x5400
[  297.055498][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  297.055709][    C1]  ? __lock_acquire+0xab9/0xd20
[  297.055724][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  297.055739][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  297.055748][    C1]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  297.055759][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  297.055774][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  297.055790][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  297.055806][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.055829][    C1]  ? rt_set_nexthop+0x693/0xa80
[  297.055851][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  297.055866][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  297.055886][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  297.055904][    C1]  ? dst_cache_get+0x10e/0x5b0
[  297.055926][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  297.055935][    C1]  tipc_udp_xmit+0x1c3/0xaa0
[  297.055949][    C1]  ? tipc_udp_xmit+0xa4/0xaa0
[  297.055956][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  297.055964][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  297.055974][    C1]  ? __asan_memcpy+0x40/0x70
[  297.055984][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  297.055995][    C1]  tipc_udp_send_msg+0x27f/0x3f0
[  297.056031][    C1]  tipc_bearer_xmit_skb+0x2b3/0x400
[  297.056043][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  297.056054][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  297.056066][    C1]  tipc_disc_timeout+0x580/0x6d0
[  297.056078][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  297.056092][    C1]  call_timer_fn+0x17e/0x5f0
[  297.056103][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  297.056113][    C1]  ? call_timer_fn+0xbe/0x5f0
[  297.056123][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  297.056136][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.056146][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.056157][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  297.056168][    C1]  __run_timer_base+0x61a/0x860
[  297.056178][    C1]  ? ktime_get+0x3e/0x1f0
[  297.056189][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  297.056198][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  297.056211][    C1]  run_timer_softirq+0xb7/0x180
[  297.056221][    C1]  handle_softirqs+0x286/0x870
[  297.056230][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  297.056239][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  297.056248][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  297.056258][    C1]  __irq_exit_rcu+0xca/0x1f0
[  297.056269][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  297.056285][    C1]  irq_exit_rcu+0x9/0x30
[  297.056296][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  297.056314][    C1]  </IRQ>
[  297.056320][    C1]  <TASK>
[  297.056325][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  297.056342][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  297.056362][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  297.056375][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  297.056388][    C1] RAX: 4230589abc889500 RBX: ffffffff819683a8 RCX: 4230589abc889500
[  297.056400][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b69ad RDI: ffffffff8be33300
[  297.056410][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  297.056418][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  297.056424][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  297.056431][    C1]  ? do_idle+0x1e8/0x510
[  297.056442][    C1]  default_idle+0x13/0x20
[  297.056449][    C1]  default_idle_call+0x74/0xb0
[  297.056456][    C1]  do_idle+0x1e8/0x510
[  297.056465][    C1]  ? __pfx_do_idle+0x10/0x10
[  297.056471][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.056485][    C1]  cpu_startup_entry+0x44/0x60
[  297.056492][    C1]  start_secondary+0x101/0x110
[  297.056505][    C1]  common_startup_64+0x13e/0x147
[  297.056519][    C1]  </TASK>
[  297.056522][    C1] 
[  297.214186][    C1] Allocated by task 15829:
[  297.215835][    C1]  kasan_save_track+0x3e/0x80
[  297.217312][    C1]  __kasan_slab_alloc+0x6c/0x80
[  297.218825][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  297.220473][    C1]  xfrm_state_alloc+0x24/0x2f0
[  297.221884][    C1]  xfrm_state_find+0x37d4/0x5400
[  297.223372][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  297.225376][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  297.227113][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  297.228660][    C1]  udp_sendmsg+0x142e/0x2170
[  297.230065][    C1]  __sock_sendmsg+0x19c/0x270
[  297.231550][    C1]  ____sys_sendmsg+0x52d/0x830
[  297.233092][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  297.234844][    C1]  __sys_sendmmsg+0x227/0x430
[  297.236495][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  297.238076][    C1]  do_syscall_64+0xfa/0x3b0
[  297.239526][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.241426][    C1] 
[  297.242217][    C1] Freed by task 5313:
[  297.243561][    C1]  kasan_save_track+0x3e/0x80
[  297.245210][    C1]  kasan_save_free_info+0x46/0x50
[  297.246837][    C1]  __kasan_slab_free+0x5b/0x80
[  297.248315][    C1]  kmem_cache_free+0x18f/0x400
[  297.249801][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  297.251470][    C1]  process_scheduled_works+0xae1/0x17b0
[  297.253255][    C1]  worker_thread+0x8a0/0xda0
[  297.254774][    C1]  kthread+0x711/0x8a0
[  297.256106][    C1]  ret_from_fork+0x3fc/0x770
[  297.257591][    C1]  ret_from_fork_asm+0x1a/0x30
[  297.259113][    C1] 
[  297.259858][    C1] The buggy address belongs to the object at ffff888021188d80
[  297.259858][    C1]  which belongs to the cache xfrm_state of size 928
[  297.264533][    C1] The buggy address is located 816 bytes inside of
[  297.264533][    C1]  freed 928-byte region [ffff888021188d80, ffff888021189120)
[  297.269587][    C1] 
[  297.270559][    C1] The buggy address belongs to the physical page:
[  297.273504][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021189f80 pfn:0x21188
[  297.277478][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  297.280682][    C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  297.283889][    C1] page_type: f5(slab)
[  297.285488][    C1] raw: 00fff00000000240 ffff88801ab1e500 ffffea0000e96210 ffff88801bfc6708
[  297.288854][    C1] raw: ffff888021189f80 00000000000e0004 00000000f5000000 0000000000000000
[  297.292204][    C1] head: 00fff00000000240 ffff88801ab1e500 ffffea0000e96210 ffff88801bfc6708
[  297.295592][    C1] head: ffff888021189f80 00000000000e0004 00000000f5000000 0000000000000000
[  297.299027][    C1] head: 00fff00000000002 ffffea0000846201 00000000ffffffff 00000000ffffffff
[  297.302341][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  297.305585][    C1] page dumped because: kasan: bad access detected
[  297.308119][    C1] page_owner tracks the page as allocated
[  297.310412][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6414, tgid 6413 (syz.1.139), ts 67218237784, free_ts 67089059608
[  297.317867][    C1]  post_alloc_hook+0x240/0x2a0
[  297.319807][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  297.322034][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  297.324351][    C1]  alloc_pages_mpol+0x232/0x4a0
[  297.326303][    C1]  allocate_slab+0x8a/0x370
[  297.328129][    C1]  ___slab_alloc+0xbeb/0x1410
[  297.329978][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  297.332159][    C1]  xfrm_state_alloc+0x24/0x2f0
[  297.334010][    C1]  pfkey_add+0x6e4/0x2e00
[  297.335669][    C1]  pfkey_sendmsg+0xbfe/0x1090
[  297.337551][    C1]  __sock_sendmsg+0x21c/0x270
[  297.339459][    C1]  ____sys_sendmsg+0x505/0x830
[  297.341395][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  297.343268][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  297.345216][    C1]  do_syscall_64+0xfa/0x3b0
[  297.347068][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.349419][    C1] page last free pid 6368 tgid 6368 stack trace:
[  297.351910][    C1]  __free_frozen_pages+0xbc4/0xd30
[  297.353964][    C1]  free_large_kmalloc+0x13a/0x1f0
[  297.355907][    C1]  device_release+0x9c/0x1c0
[  297.357699][    C1]  kobject_put+0x22b/0x480
[  297.359450][    C1]  netdev_run_todo+0xd2e/0xea0
[  297.361373][    C1]  tun_chr_close+0x13c/0x1c0
[  297.363262][    C1]  __fput+0x44c/0xa70
[  297.364821][    C1]  task_work_run+0x1d4/0x260
[  297.366643][    C1]  exit_to_user_mode_loop+0xec/0x110
[  297.368771][    C1]  do_syscall_64+0x2bd/0x3b0
[  297.370644][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.372964][    C1] 
[  297.373890][    C1] Memory state around the buggy address:
[  297.376122][    C1]  ffff888021188f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  297.379307][    C1]  ffff888021189000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  297.382421][    C1] >ffff888021189080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  297.385572][    C1]                                      ^
[  297.387799][    C1]  ffff888021189100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  297.390889][    C1]  ffff888021189180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  297.394033][    C1] ==================================================================
[  297.397429][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  297.400281][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  297.403800][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.407750][    C1] Call Trace:
[  297.409105][    C1]  <IRQ>
[  297.410279][    C1]  dump_stack_lvl+0x99/0x250
[  297.412143][    C1]  ? __asan_memcpy+0x40/0x70
[  297.414011][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.416111][    C1]  ? __pfx__printk+0x10/0x10
[  297.418023][    C1]  vpanic+0x281/0x750
[  297.419642][    C1]  ? __pfx_vpanic+0x10/0x10
[  297.421483][    C1]  ? asm_common_interrupt+0x26/0x40
[  297.423564][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.425630][    C1]  panic+0xb9/0xc0
[  297.427175][    C1]  ? __pfx_panic+0x10/0x10
[  297.428965][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  297.431356][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  297.433724][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  297.435742][    C1]  check_panic_on_warn+0x89/0xb0
[  297.437741][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  297.439710][    C1]  end_report+0x78/0x160
[  297.441370][    C1]  kasan_report+0x129/0x150
[  297.443088][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  297.445114][    C1]  xfrm_state_find+0x2cf2/0x5400
[  297.447042][    C1]  ? unwind_next_frame+0xa5/0x2390
[  297.449009][    C1]  ? xfrm_state_find+0x1da/0x5400
[  297.450968][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  297.453056][    C1]  ? __lock_acquire+0xab9/0xd20
[  297.455007][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  297.457500][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  297.459850][    C1]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  297.462364][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  297.464975][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  297.467355][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  297.469733][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.471817][    C1]  ? rt_set_nexthop+0x693/0xa80
[  297.473771][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  297.475915][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  297.478089][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  297.480397][    C1]  ? dst_cache_get+0x10e/0x5b0
[  297.482314][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  297.484256][    C1]  tipc_udp_xmit+0x1c3/0xaa0
[  297.486108][    C1]  ? tipc_udp_xmit+0xa4/0xaa0
[  297.487969][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  297.489946][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  297.492014][    C1]  ? __asan_memcpy+0x40/0x70
[  297.493785][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  297.495849][    C1]  tipc_udp_send_msg+0x27f/0x3f0
[  297.497867][    C1]  tipc_bearer_xmit_skb+0x2b3/0x400
[  297.499955][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  297.502096][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  297.504300][    C1]  tipc_disc_timeout+0x580/0x6d0
[  297.505831][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  297.507568][    C1]  call_timer_fn+0x17e/0x5f0
[  297.509002][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  297.510673][    C1]  ? call_timer_fn+0xbe/0x5f0
[  297.512143][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  297.513846][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.515736][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.517777][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  297.519952][    C1]  __run_timer_base+0x61a/0x860
[  297.521907][    C1]  ? ktime_get+0x3e/0x1f0
[  297.523645][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  297.525793][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  297.528307][    C1]  run_timer_softirq+0xb7/0x180
[  297.530291][    C1]  handle_softirqs+0x286/0x870
[  297.532260][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  297.533781][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  297.535349][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  297.536885][    C1]  __irq_exit_rcu+0xca/0x1f0
[  297.538351][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  297.539953][    C1]  irq_exit_rcu+0x9/0x30
[  297.541460][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  297.543176][    C1]  </IRQ>
[  297.544104][    C1]  <TASK>
[  297.545033][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  297.546891][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  297.548650][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  297.554555][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  297.556455][    C1] RAX: 4230589abc889500 RBX: ffffffff819683a8 RCX: 4230589abc889500
[  297.558902][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b69ad RDI: ffffffff8be33300
[  297.561332][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  297.563763][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  297.566201][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  297.568631][    C1]  ? do_idle+0x1e8/0x510
[  297.570002][    C1]  default_idle+0x13/0x20
[  297.571351][    C1]  default_idle_call+0x74/0xb0
[  297.572866][    C1]  do_idle+0x1e8/0x510
[  297.574172][    C1]  ? __pfx_do_idle+0x10/0x10
[  297.575575][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.577117][    C1]  cpu_startup_entry+0x44/0x60
[  297.578548][    C1]  start_secondary+0x101/0x110
[  297.579966][    C1]  common_startup_64+0x13e/0x147
[  297.581465][    C1]  </TASK>
[  297.583014][    C1] Kernel Offset: disabled
[  297.584270][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:07:27  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44deb RBX=1ffff11026cc7f61 RCX=ffff88801d2b8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000065f7e0 RSP=ffffc9000065f660
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44dd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f950acc2fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888136632f98 RBX=ffff888136632f98 RCX=4230589abc889500 RDX=0000000000000000
RSI=ffffffff8be332e0 RDI=ffffffff8be332a0 RBP=0000000000000000 RSP=ffffc900001dfce0
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed1026cc484b
R12=ffffc900001dfe00 R13=ffffffff81aab45d R14=ffffffff8dbded18 R15=dffffc0000000000
RIP=ffffffff81a65e71 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f950ace2f00 CR3=0000000115698000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=9500000020000000 b70000000c000000 XMM03=8500000000000003 b700000000000000
XMM04=89cd557cc02e6d77 6e0ecc93573178ca XMM05=a2ac04fd53e1d049 52d0a17d2dfbc54d
XMM06=9ad471202821f39d 56e1798d53ab1c01 XMM07=8702844e075ec21e 5489cd557cc02e6d
XMM08=776e0ecc93573178 ca864773955e5cc3 XMM09=0000000000000000 00007f9509e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
