last executing test programs:

1.112496468s ago: executing program 2 (id=2014):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069102e00000000009500010000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)

1.112356489s ago: executing program 2 (id=2015):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000004851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003400000095"], &(0x7f00000006c0)='syzkaller\x00'}, 0x94)

1.040150044s ago: executing program 2 (id=2017):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0)

981.765477ms ago: executing program 2 (id=2019):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0xf)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
close(r7)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000100), 0x0}, 0x20)
close(r6)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r12}, @CGW_SRC_IF={0x8, 0x9, r12}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

597.673198ms ago: executing program 0 (id=2029):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x40000)

543.502359ms ago: executing program 0 (id=2031):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x4, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e, 0xe]}}, 0x0, 0x2c}, 0x28)

541.856429ms ago: executing program 1 (id=2032):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

481.355669ms ago: executing program 0 (id=2033):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=@newpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0x0, 0x0, 0x8}}, [@sec_ctx={0xc, 0x10, {0x8}}]}, 0xc4}}, 0x0)

481.061184ms ago: executing program 1 (id=2034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004e0001"], 0x28}}, 0x0)

480.738908ms ago: executing program 0 (id=2035):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000000040)="b4433c908668fd848967db691bb6e2def187e69f73bed0711f5ba4277a7aaf1729", 0x21)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010200f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

474.362112ms ago: executing program 1 (id=2036):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)

391.948767ms ago: executing program 1 (id=2037):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)

330.685139ms ago: executing program 1 (id=2038):
shutdown(0xffffffffffffffff, 0x1)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52)

232.163044ms ago: executing program 1 (id=2039):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040), 0x4)
sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x4}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c)

109.920439ms ago: executing program 2 (id=2040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0)

109.568933ms ago: executing program 2 (id=2041):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
unshare(0x400)
vmsplice(r0, 0x0, 0x0, 0x9)

404.442µs ago: executing program 0 (id=2042):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001840)="efe15a38f4dc7768963f2f6e9e0356de1ae15bb72719b131ee10a0e67746ae48ce5428ee179c094c78a3d0b5456acc9f2465228811897903ca6c999bec34104324", 0x41}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000040))

0s ago: executing program 0 (id=2043):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49338' (ED25519) to the list of known hosts.
syzkaller login: [   56.682374][ T5785] cgroup: Unknown subsys name 'net'
[   56.801387][ T5785] cgroup: Unknown subsys name 'cpuset'
[   56.812824][ T5785] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.707739][ T5785] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.512459][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.516365][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.532356][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.535725][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.539559][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.544338][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.547826][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.552653][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.556177][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.559877][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.621458][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.625083][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.628310][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.632205][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.635684][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.969882][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   64.992397][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   65.018085][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   65.174849][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.179326][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.182785][ T5849] bridge_slave_0: entered allmulticast mode
[   65.186748][ T5849] bridge_slave_0: entered promiscuous mode
[   65.212038][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.214844][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.217693][ T5845] bridge_slave_0: entered allmulticast mode
[   65.221179][ T5845] bridge_slave_0: entered promiscuous mode
[   65.224875][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.227125][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.229439][ T5849] bridge_slave_1: entered allmulticast mode
[   65.233214][ T5849] bridge_slave_1: entered promiscuous mode
[   65.256904][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.259341][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.262083][ T5845] bridge_slave_1: entered allmulticast mode
[   65.265358][ T5845] bridge_slave_1: entered promiscuous mode
[   65.281075][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.284798][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.287721][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.291563][ T5854] bridge_slave_0: entered allmulticast mode
[   65.294705][ T5854] bridge_slave_0: entered promiscuous mode
[   65.311430][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.314779][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.317605][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.320023][ T5854] bridge_slave_1: entered allmulticast mode
[   65.323423][ T5854] bridge_slave_1: entered promiscuous mode
[   65.365700][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.371223][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.385252][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.390565][ T5849] team0: Port device team_slave_0 added
[   65.396006][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.408516][ T5849] team0: Port device team_slave_1 added
[   65.449752][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.452688][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.461594][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.475799][ T5854] team0: Port device team_slave_0 added
[   65.479362][ T5854] team0: Port device team_slave_1 added
[   65.483417][ T5845] team0: Port device team_slave_0 added
[   65.485775][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.487983][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.497225][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.502640][ T5845] team0: Port device team_slave_1 added
[   65.554384][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.556629][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.566302][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.570955][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.573951][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.582976][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.595332][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.597856][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.607604][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.614391][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.616755][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.624702][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.674740][ T5849] hsr_slave_0: entered promiscuous mode
[   65.678429][ T5849] hsr_slave_1: entered promiscuous mode
[   65.723798][ T5854] hsr_slave_0: entered promiscuous mode
[   65.726134][ T5854] hsr_slave_1: entered promiscuous mode
[   65.728593][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   65.731595][ T5854] Cannot create hsr debugfs directory
[   65.757570][ T5845] hsr_slave_0: entered promiscuous mode
[   65.760957][ T5845] hsr_slave_1: entered promiscuous mode
[   65.763720][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   65.765908][ T5845] Cannot create hsr debugfs directory
[   66.115213][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.123061][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.128822][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.142366][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.173212][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.187357][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.196865][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.204772][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.256202][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.263305][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.269531][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.276670][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.416991][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.426479][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.445551][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.464559][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   66.474757][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   66.494180][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   66.499367][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.502184][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.508646][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.511060][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.524187][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.526468][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.532556][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.535083][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.543825][  T142] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.546551][  T142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.582825][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.585074][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.591913][   T54] Bluetooth: hci1: command tx timeout
[   66.652067][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.671271][   T54] Bluetooth: hci2: command tx timeout
[   66.673951][   T54] Bluetooth: hci0: command tx timeout
[   66.868071][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.876094][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.932905][ T5849] veth0_vlan: entered promiscuous mode
[   66.942808][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.962565][ T5849] veth1_vlan: entered promiscuous mode
[   66.987853][ T5854] veth0_vlan: entered promiscuous mode
[   67.011497][ T5854] veth1_vlan: entered promiscuous mode
[   67.015457][ T5849] veth0_macvtap: entered promiscuous mode
[   67.020947][ T5849] veth1_macvtap: entered promiscuous mode
[   67.046894][ T5845] veth0_vlan: entered promiscuous mode
[   67.063133][ T5845] veth1_vlan: entered promiscuous mode
[   67.067948][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.091674][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.103227][ T5854] veth0_macvtap: entered promiscuous mode
[   67.117554][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.123731][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.127605][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.147075][ T5854] veth1_macvtap: entered promiscuous mode
[   67.159441][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.168886][ T5845] veth0_macvtap: entered promiscuous mode
[   67.199190][ T5845] veth1_macvtap: entered promiscuous mode
[   67.223884][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.257286][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.275140][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.286840][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.287405][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.290079][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.316506][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.333746][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.357773][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.359439][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.361771][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.366264][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.377611][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.399593][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.417672][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.423191][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.477920][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.511490][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.514112][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.612294][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.614962][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.628888][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.640055][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.648366][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.651380][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.784240][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.836566][ T5917] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   67.839656][ T5917] netlink: 'syz.2.5': attribute type 2 has an invalid length.
[   67.850757][ T5917] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.855442][ T5917] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   67.858207][ T5917] netlink: 'syz.2.5': attribute type 2 has an invalid length.
[   67.867958][ T5917] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.889497][ T5917] Zero length message leads to an empty skb
[   67.914125][ T5923] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   68.290673][ T5942] ieee802154 phy0 wpan0: encryption failed: -22
[   68.342470][ T5929] syzkaller0: entered promiscuous mode
[   68.344727][ T5929] syzkaller0: entered allmulticast mode
[   68.484709][ T5944] netlink: 332 bytes leftover after parsing attributes in process `syz.2.15'.
[   68.492109][ T5944] netlink: 104 bytes leftover after parsing attributes in process `syz.2.15'.
[   68.495429][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15'.
[   68.626781][ T5948] sctp: [Deprecated]: syz.2.17 (pid 5948) Use of int in max_burst socket option.
[   68.626781][ T5948] Use struct sctp_assoc_value instead
[   68.690443][ T5234] Bluetooth: hci1: command tx timeout
[   68.751094][ T5234] Bluetooth: hci0: command tx timeout
[   68.752872][ T5234] Bluetooth: hci2: command tx timeout
[   68.846154][ T5954] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.763704][ T6003] netlink: 96 bytes leftover after parsing attributes in process `syz.2.36'.
[   69.808654][ T6003] vlan2: entered allmulticast mode
[   69.825791][ T6003] gretap0: entered allmulticast mode
[   70.076624][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'.
[   70.492856][ T6045] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   70.508951][ T6045] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   70.678950][ T6057] netlink: 'syz.0.62': attribute type 3 has an invalid length.
[   70.684510][ T6057] netlink: 'syz.0.62': attribute type 3 has an invalid length.
[   70.751691][   T54] Bluetooth: hci1: command tx timeout
[   70.831221][   T54] Bluetooth: hci2: command tx timeout
[   70.831253][ T5234] Bluetooth: hci0: command tx timeout
[   70.851473][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   70.880531][ T6068] openvswitch: netlink: IP tunnel dst address not specified
[   70.893042][ T6065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.013252][ T6074] netlink: 96 bytes leftover after parsing attributes in process `syz.0.69'.
[   71.316759][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.319342][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.629549][ T6106] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   71.642927][ T6106] hsr_slave_1: entered allmulticast mode
[   71.868464][ T6111] netlink: 'syz.0.82': attribute type 4 has an invalid length.
[   72.683652][ T6153] syzkaller1: entered promiscuous mode
[   72.685810][ T6153] syzkaller1: entered allmulticast mode
[   72.830936][ T5234] Bluetooth: hci1: command tx timeout
[   72.850723][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'.
[   72.910984][   T54] Bluetooth: hci2: command tx timeout
[   72.913506][ T5234] Bluetooth: hci0: command tx timeout
[   73.235921][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'.
[   73.347612][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'.
[   73.418023][ T6181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.110494][ T6216] openvswitch: netlink: Missing key (keys=40, expected=80)
[   74.227700][ T6224] netlink: 'syz.0.134': attribute type 13 has an invalid length.
[   74.232794][ T6224] netlink: 'syz.0.134': attribute type 17 has an invalid length.
[   74.265846][ T6224] gretap0: refused to change device tx_queue_len
[   74.268797][ T6224] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   74.596501][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'.
[   75.037508][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'.
[   75.064295][ T6274] erspan0: entered promiscuous mode
[   75.066806][ T6274] macvtap1: entered promiscuous mode
[   75.068696][ T6274] macvtap1: entered allmulticast mode
[   75.073747][ T6274] erspan0: entered allmulticast mode
[   75.089471][ T6274] erspan0: left allmulticast mode
[   75.094239][ T6274] erspan0: left promiscuous mode
[   75.171419][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'.
[   75.174096][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'.
[   75.198089][ T6277] netlink: 'syz.2.159': attribute type 13 has an invalid length.
[   75.206253][ T6277] netlink: 'syz.2.159': attribute type 12 has an invalid length.
[   75.741755][ T6298] netlink: 'syz.1.167': attribute type 10 has an invalid length.
[   75.784806][ T6298] team0: Port device dummy0 added
[   75.793764][ T6298] netlink: 'syz.1.167': attribute type 10 has an invalid length.
[   75.808481][ T6298] team0: Port device dummy0 removed
[   75.820886][ T6298] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   77.564975][ T6353] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[   77.568422][ T6353] netlink: 224 bytes leftover after parsing attributes in process `syz.1.190'.
[   78.128203][ T6369] netlink: 'syz.1.197': attribute type 5 has an invalid length.
[   78.424623][ T6386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.687567][ T6399] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'.
[   78.898734][ T6416] netlink: 'syz.0.220': attribute type 11 has an invalid length.
[   78.907973][ T6416] netlink: 'syz.0.220': attribute type 11 has an invalid length.
[   78.912925][ T6418] netlink: 'syz.1.221': attribute type 29 has an invalid length.
[   78.916378][ T6416] netlink: 224 bytes leftover after parsing attributes in process `syz.0.220'.
[   78.922760][ T6418] netlink: 'syz.1.221': attribute type 29 has an invalid length.
[   78.931284][ T6418] netlink: 500 bytes leftover after parsing attributes in process `syz.1.221'.
[   78.945369][ T6418] unsupported nla_type 58
[   79.215429][ T6443] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   79.220802][ T6442] IPVS: stopping backup sync thread 6443 ...
[   79.227477][ T6442] netlink: 260 bytes leftover after parsing attributes in process `syz.1.233'.
[   79.235520][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'.
[   79.239287][ T6442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.233'.
[   79.274988][ T6445] netlink: 'syz.0.234': attribute type 2 has an invalid length.
[   79.495041][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'.
[   79.579148][ T6462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.966870][ T6475] syzkaller0: entered promiscuous mode
[   79.969142][ T6475] syzkaller0: entered allmulticast mode
[   80.132695][ T6483] batadv0: entered promiscuous mode
[   80.135565][ T6483] vlan3: entered promiscuous mode
[   80.154673][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'.
[   80.324751][ T6498] netlink: 'syz.2.258': attribute type 3 has an invalid length.
[   80.327206][ T6498] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.258'.
[   80.342871][ T6499] netlink: 248 bytes leftover after parsing attributes in process `syz.1.260'.
[   80.472952][ T6505] netlink: 'syz.2.263': attribute type 1 has an invalid length.
[   80.596336][ T6523] netlink: 'syz.0.271': attribute type 10 has an invalid length.
[   80.602152][ T6524] hsr0: entered promiscuous mode
[   80.604590][ T6524] hsr0: entered allmulticast mode
[   80.610440][ T6524] hsr_slave_0: entered allmulticast mode
[   80.613231][ T6524] hsr_slave_1: entered allmulticast mode
[   81.181390][ T6574] netlink: 'syz.2.289': attribute type 4 has an invalid length.
[   81.374664][ T6581] netlink: 'syz.1.293': attribute type 2 has an invalid length.
[   81.377848][ T6581] netlink: 'syz.1.293': attribute type 1 has an invalid length.
[   82.209740][ T6626] tipc: Started in network mode
[   82.216591][ T6626] tipc: Node identity 46399964d6a, cluster identity 4711
[   82.219600][ T6626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.229958][ T6626] syzkaller0: entered promiscuous mode
[   82.234542][ T6626] syzkaller0: entered allmulticast mode
[   82.248357][ T6626] tipc: Resetting bearer <eth:syzkaller0>
[   82.259122][ T6623] tipc: Resetting bearer <eth:syzkaller0>
[   82.272182][ T6623] tipc: Disabling bearer <eth:syzkaller0>
[   83.023723][ T6666] netlink: 'syz.0.332': attribute type 11 has an invalid length.
[   83.152433][ T6672] netlink: 'syz.1.335': attribute type 29 has an invalid length.
[   83.158772][ T6672] netlink: 'syz.1.335': attribute type 29 has an invalid length.
[   83.308621][   T24] IPVS: starting estimator thread 0...
[   83.423057][ T6683] IPVS: using max 37 ests per chain, 88800 per kthread
[   83.449407][ T6696] netlink: 'syz.2.346': attribute type 66 has an invalid length.
[   83.759406][ T6721] delete_channel: no stack
[   83.877362][ T6730] __nla_validate_parse: 8 callbacks suppressed
[   83.877380][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[   83.886330][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[   84.039838][ T6738] Driver unsupported XDP return value 0 on prog  (id 53) dev N/A, expect packet loss!
[   84.136330][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'.
[   84.485700][ T6758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.538124][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'.
[   84.614147][ T6770] netlink: 248 bytes leftover after parsing attributes in process `syz.0.380'.
[   84.765591][ T6784] tipc: Started in network mode
[   84.767652][ T6784] tipc: Node identity 7, cluster identity 4711
[   84.782399][ T6784] tipc: Node number set to 7
[   84.802443][ T6788] netlink: 'syz.0.387': attribute type 11 has an invalid length.
[   84.843534][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'.
[   85.004969][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'.
[   85.023890][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'.
[   85.595583][ T6826] bridge0: port 3(erspan0) entered blocking state
[   85.597827][ T6826] bridge0: port 3(erspan0) entered disabled state
[   85.602263][ T6826] erspan0: entered allmulticast mode
[   85.610954][ T6826] erspan0: left allmulticast mode
[   85.677649][ T6832] ieee802154 phy0 wpan0: encryption failed: -22
[   85.768028][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.772134][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.856771][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.863788][ T6832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.878134][ T6832] hsr0: left promiscuous mode
[   85.941730][ T6832] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[   86.044655][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.047552][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.076115][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.078914][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.283189][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.424'.
[   86.286575][ T6865] tc_dump_action: action bad kind
[   86.533496][ T6886] syzkaller0: entered promiscuous mode
[   86.535681][ T6886] syzkaller0: entered allmulticast mode
[   86.673669][   T10] cfg80211: failed to load regulatory.db
[   87.515597][ T6903] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.578375][ T6903] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.631050][ T6903] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.656627][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   87.661098][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   87.664532][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   87.668095][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   87.711260][ T6903] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.757970][ T6929] netlink: 88 bytes leftover after parsing attributes in process `syz.1.451'.
[   87.853803][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.866933][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.875060][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.893668][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.055724][ T6955] syzkaller1: entered promiscuous mode
[   88.063331][ T6955] syzkaller1: entered allmulticast mode
[   88.974258][ T7035] __nla_validate_parse: 4 callbacks suppressed
[   88.974269][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[   89.140524][ T7051] netlink: 'syz.1.508': attribute type 13 has an invalid length.
[   89.464798][ T7072] IPv6: sit1: Disabled Multicast RS
[   90.732664][ T7119] nbd: device at index 2 is going down
[   90.812910][ T7130] netlink: 'syz.2.540': attribute type 2 has an invalid length.
[   90.868304][ T7135] erspan1: entered promiscuous mode
[   90.931767][ T7138] netlink: 14 bytes leftover after parsing attributes in process `syz.1.538'.
[   91.125995][ T7138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.140840][ T7138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.146051][ T7138] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   91.149516][ T7138] bond0 (unregistering): Released all slaves
[   91.169655][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'.
[   91.198259][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[   91.252345][ T7158] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.279722][ T7158] bond_slave_0: entered promiscuous mode
[   91.282101][ T7158] bond_slave_1: entered promiscuous mode
[   91.286020][ T7158] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   91.293003][ T7158] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[   91.377016][ T7168] netlink: 'syz.0.555': attribute type 13 has an invalid length.
[   91.394320][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[   91.477972][ T7170] netlink: 452 bytes leftover after parsing attributes in process `syz.2.556'.
[   91.804570][ T7186] netlink: 'syz.0.563': attribute type 11 has an invalid length.
[   91.807511][ T7186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.563'.
[   92.148722][ T7210] Bluetooth: MGMT ver 1.23
[   92.193043][ T7214] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   92.288792][ T7226] vlan0: entered promiscuous mode
[   92.408831][ T7224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.807741][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.607'.
[   93.011698][ T7293] netlink: 'syz.1.612': attribute type 4 has an invalid length.
[   93.014710][ T7293] netlink: 17 bytes leftover after parsing attributes in process `syz.1.612'.
[   93.075288][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[   94.015020][ T7354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.018009][ T7354] syzkaller0: entered promiscuous mode
[   94.020332][ T7354] syzkaller0: entered allmulticast mode
[   94.047348][ T7354] tipc: Resetting bearer <eth:syzkaller0>
[   94.055094][ T7353] tipc: Resetting bearer <eth:syzkaller0>
[   94.072403][ T7353] tipc: Disabling bearer <eth:syzkaller0>
[   94.374029][ T7389] trusted_key: syz.0.657 sent an empty control message without MSG_MORE.
[   94.567074][ T7407] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[   94.648914][ T7407] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   94.660794][ T7407] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   94.697836][ T7419] netlink: 'syz.2.671': attribute type 21 has an invalid length.
[   94.715573][ T7417] gretap1: entered promiscuous mode
[   94.732574][ T7417] bond0: (slave gretap1): making interface the new active one
[   94.744420][ T7417] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   95.044985][ T7436] __nla_validate_parse: 5 callbacks suppressed
[   95.045006][ T7436] netlink: 104 bytes leftover after parsing attributes in process `syz.1.677'.
[   95.241081][ T5234] Bluetooth: hci2: command tx timeout
[   95.431113][ T7457] netlink: 'syz.2.687': attribute type 1 has an invalid length.
[   95.453546][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'.
[   95.477361][ T7457] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.524583][ T7461] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.527670][ T7461] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   95.551789][ T7461] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   95.577093][ T7457] gretap1: entered promiscuous mode
[   95.582423][ T7457] bond2: (slave gretap1): making interface the new active one
[   95.585559][ T7457] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   95.598308][ T7457] macvlan3: entered promiscuous mode
[   95.604410][ T7457] macvlan3: entered allmulticast mode
[   95.607215][ T7457] bond2: entered promiscuous mode
[   95.609879][ T7457] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   95.615728][ T7457] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   95.623459][ T7457] bond2: left promiscuous mode
[   95.762871][ T7472] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.768029][ T7472] bond0: (slave bond1): Enslaving as an active interface with an up link
[   96.186869][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'.
[   96.286717][ T7508] netlink: 'syz.1.709': attribute type 1 has an invalid length.
[   96.319297][ T7510] netlink: 'syz.0.707': attribute type 9 has an invalid length.
[   96.323022][ T7510] netlink: 'syz.0.707': attribute type 6 has an invalid length.
[   96.330069][ T7508] bond1: entered promiscuous mode
[   96.334940][ T7508] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.349811][ T7504] unknown channel width for channel at 909000KHz?
[   96.360484][ T7504] unknown channel width for channel at 909000KHz?
[   96.369009][ T7504] unknown channel width for channel at 909000KHz?
[   96.373473][ T7508] bond1: (slave bridge2): making interface the new active one
[   96.379142][ T7508] bridge2: entered promiscuous mode
[   96.391329][ T7508] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   96.700351][ T7525] syzkaller0: entered promiscuous mode
[   96.702125][ T7525] syzkaller0: entered allmulticast mode
[   97.104280][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'.
[   97.630041][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'.
[   97.708779][ T7538] veth0: entered promiscuous mode
[   98.007803][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'.
[   98.092038][ T7564] netlink: 92 bytes leftover after parsing attributes in process `syz.2.733'.
[   98.200489][ T7566] netlink: 'syz.1.734': attribute type 4 has an invalid length.
[   98.599135][ T7596] Bluetooth: MGMT ver 1.23
[   98.806934][   T33] audit: type=1800 audit(1755194962.280:2): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.756" name="memory.events" dev="tmpfs" ino=1136 res=0 errno=0
[   98.827848][   T33] audit: type=1804 audit(1755194962.290:3): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.756" name="/newroot/222/memory.events" dev="tmpfs" ino=1136 res=1 errno=0
[   99.208282][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[   99.416961][ T7660] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[   99.419514][ T7660] netlink: 76 bytes leftover after parsing attributes in process `syz.0.778'.
[   99.506138][ T7664] netlink: 'syz.0.780': attribute type 2 has an invalid length.
[   99.509105][ T7664] netlink: 'syz.0.780': attribute type 8 has an invalid length.
[   99.513025][ T7664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.780'.
[  100.501287][ T7697] netlink: 224 bytes leftover after parsing attributes in process `syz.0.796'.
[  100.505030][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.796'.
[  100.738251][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'.
[  101.667187][ T7724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.670399][ T7724] IPv6: NLM_F_CREATE should be set when creating new route
[  101.672864][ T7724] IPv6: NLM_F_CREATE should be set when creating new route
[  101.866084][ T7736] netlink: zone id is out of range
[  101.867716][ T7736] netlink: zone id is out of range
[  101.870000][ T7736] netlink: zone id is out of range
[  101.872701][ T7736] netlink: zone id is out of range
[  101.874784][ T7736] netlink: zone id is out of range
[  101.887080][ T7736] netlink: zone id is out of range
[  101.888687][ T7736] netlink: zone id is out of range
[  101.890479][ T7736] netlink: zone id is out of range
[  101.892076][ T7736] netlink: zone id is out of range
[  101.894540][ T7736] netlink: zone id is out of range
[  102.038180][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'.
[  105.082743][ T7815] syzkaller1: entered promiscuous mode
[  105.085473][ T7815] syzkaller1: entered allmulticast mode
[  105.238101][ T7825] bridge0: port 3(gretap0) entered blocking state
[  105.242148][ T7825] bridge0: port 3(gretap0) entered disabled state
[  105.244981][ T7825] gretap0: entered allmulticast mode
[  105.248708][ T7825] gretap0: entered promiscuous mode
[  105.347142][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'.
[  105.393829][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'.
[  105.402479][ T7837] netlink: 'syz.2.856': attribute type 1 has an invalid length.
[  105.417599][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'.
[  105.424127][ T7840] netlink: 84 bytes leftover after parsing attributes in process `syz.1.857'.
[  105.463168][ T7837] bond3: (slave bridge3): making interface the new active one
[  105.466794][ T7837] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  105.747926][ T7867] netlink: 60 bytes leftover after parsing attributes in process `syz.1.866'.
[  105.824873][ T7875] netlink: 52 bytes leftover after parsing attributes in process `syz.0.868'.
[  105.896427][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'.
[  106.779249][ T7898] netlink: 'syz.2.876': attribute type 12 has an invalid length.
[  106.782979][ T7898] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.876'.
[  107.097334][ T7923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.886'.
[  107.166931][ T7923] team0: Port device team_slave_0 removed
[  107.469145][ T7953] netlink: 'syz.1.901': attribute type 9 has an invalid length.
[  107.473875][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'.
[  107.484664][ T7953] macvlan2: entered promiscuous mode
[  107.487833][ T7953] hsr0: entered promiscuous mode
[  107.490065][ T7953] macvlan2: entered allmulticast mode
[  107.509191][ T2209] IPVS: starting estimator thread 0...
[  107.610295][ T7958] IPVS: using max 45 ests per chain, 108000 per kthread
[  108.028447][ T7997] netlink: 'syz.0.921': attribute type 11 has an invalid length.
[  108.031807][ T7997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'.
[  108.258250][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.932'.
[  108.522762][ T8039] gtp0: entered promiscuous mode
[  108.565538][ T8041] gretap0: left allmulticast mode
[  108.568182][ T8041] gretap0: left promiscuous mode
[  108.573766][ T8041] bridge0: port 3(gretap0) entered disabled state
[  108.583662][ T8041] bridge_slave_0: left allmulticast mode
[  108.586859][ T8041] bridge_slave_0: left promiscuous mode
[  108.589794][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.596559][ T8041] bridge_slave_1: left allmulticast mode
[  108.599045][ T8041] bridge_slave_1: left promiscuous mode
[  108.603700][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.614919][ T8041] team0: Port device team_slave_0 removed
[  108.618761][ T8041] team0: Port device team_slave_1 removed
[  108.624955][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.629841][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.642337][ T8041] net_ratelimit: 305 callbacks suppressed
[  108.642355][ T8041] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  108.835362][ T8059] netlink: 'syz.0.946': attribute type 13 has an invalid length.
[  108.838507][ T8059] netlink: 'syz.0.946': attribute type 17 has an invalid length.
[  108.875966][ T8059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.941332][ T8067] bond0: entered promiscuous mode
[  108.943827][ T8067] bond0: left promiscuous mode
[  108.979038][ T8071] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  109.425829][ T8103] netlink: 488 bytes leftover after parsing attributes in process `syz.2.966'.
[  109.867248][ T5716] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  109.965251][ T8150] syzkaller0: entered promiscuous mode
[  109.967551][ T8150] syzkaller0: entered allmulticast mode
[  110.119120][ T8089] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  110.837447][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'.
[  111.144667][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1003'.
[  111.310445][ T5234] Bluetooth: hci0: command 0x0c20 tx timeout
[  111.569224][ T8215] pim6reg9: entered allmulticast mode
[  111.714727][ T8233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1024'.
[  111.718685][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'.
[  111.724134][ T8233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1024'.
[  111.729294][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'.
[  111.735235][ T8233] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1024'.
[  111.833438][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  111.837325][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'.
[  112.097991][ T8261] netlink: 'syz.2.1039': attribute type 11 has an invalid length.
[  112.174701][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'.
[  112.245965][ T8270] netlink: del zone limit has 4 unknown bytes
[  112.335208][ T8273] vlan0: left promiscuous mode
[  112.347940][ T8273] macvtap1: left promiscuous mode
[  112.358247][ T8277] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  112.365407][ T8273] erspan1: left promiscuous mode
[  112.379860][ T8273] gretap1: left promiscuous mode
[  112.706817][ T8305] sock: sock_set_timeout: `syz.2.1058' (pid 8305) tries to set negative timeout
[  114.173932][ T8345] openvswitch: netlink: IPv4 tun info is not correct
[  115.360374][ T8378] syzkaller1: entered promiscuous mode
[  115.362906][ T8378] syzkaller1: entered allmulticast mode
[  115.609558][ T8388] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  115.748738][ T8400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.753654][ T8400] syzkaller0: entered promiscuous mode
[  115.756080][ T8400] syzkaller0: entered allmulticast mode
[  115.771167][ T8400] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  115.787135][ T8400] tipc: Resetting bearer <eth:syzkaller0>
[  115.839012][ T5874] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  116.074652][ T8429] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.078301][ T8429] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.125156][ T8436] veth0: entered promiscuous mode
[  116.252843][ T8442] veth1: entered promiscuous mode
[  116.782336][ T5312] tipc: Node number set to 2425985380
[  116.886969][ T8426] veth0: left promiscuous mode
[  117.128296][ T8477] __nla_validate_parse: 3 callbacks suppressed
[  117.128316][ T8477] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1135'.
[  117.187468][ T8481] tipc: Started in network mode
[  117.189206][ T8481] tipc: Node identity c6087c0042a8, cluster identity 4711
[  117.196919][ T8481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.201937][ T8481] syzkaller0: entered promiscuous mode
[  117.204286][ T8481] syzkaller0: entered allmulticast mode
[  117.227299][ T8481] tipc: Resetting bearer <eth:syzkaller0>
[  117.233863][ T8480] tipc: Resetting bearer <eth:syzkaller0>
[  117.245937][ T8480] tipc: Disabling bearer <eth:syzkaller0>
[  117.299748][ T8489] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  117.842132][ T8520] netlink: 'syz.0.1155': attribute type 1 has an invalid length.
[  117.845538][ T8520] nbd: error processing sock list
[  117.848347][ T8520] block nbd0: shutting down sockets
[  119.647374][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1198'.
[  119.679489][ T8636] netlink: 'syz.1.1198': attribute type 1 has an invalid length.
[  120.270591][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  120.312094][ T8700] netlink: 'syz.2.1223': attribute type 15 has an invalid length.
[  120.315441][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1223'.
[  120.554106][ T8712] dummy0: entered allmulticast mode
[  120.556717][ T8711] dummy0: left allmulticast mode
[  120.882466][ T8741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.382528][ T8780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1263'.
[  121.706603][ T8815] batadv_slave_1: entered promiscuous mode
[  121.710909][ T8814] batadv_slave_1: left promiscuous mode
[  121.828138][ T8828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1283'.
[  121.834704][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'.
[  121.943798][ T8839] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1289'.
[  121.949322][ T8839] syzkaller1: entered promiscuous mode
[  121.952238][ T8839] syzkaller1: entered allmulticast mode
[  122.188100][ T8857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'.
[  122.193575][ T8857] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  122.438805][ T8880] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  122.486097][ T8885] netlink: 'syz.0.1312': attribute type 1 has an invalid length.
[  122.502657][ T8885] 8021q: adding VLAN 0 to HW filter on device bond2
[  122.526798][ T8885] vlan2: entered promiscuous mode
[  122.528670][ T8885] bond2: entered promiscuous mode
[  122.532415][ T8885] vlan2: entered allmulticast mode
[  122.534099][ T8885] bond2: entered allmulticast mode
[  122.545821][ T8885] bond2: (slave gretap1): making interface the new active one
[  122.548310][ T8885] gretap1: entered promiscuous mode
[  122.550077][ T8885] gretap1: entered allmulticast mode
[  122.556180][ T8885] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  122.676110][ T8898] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1318'.
[  122.688718][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1318'.
[  122.692727][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1318'.
[  123.075171][ T8939] netlink: 'syz.0.1336': attribute type 1 has an invalid length.
[  123.078625][ T8939] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1336'.
[  123.082822][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'.
[  123.893816][ T8957] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1343'.
[  123.897225][ T8957] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  123.907377][ T8957] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  124.053598][ T8968] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.163724][ T8977] netlink: 'syz.2.1354': attribute type 3 has an invalid length.
[  124.236656][ T8982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  124.358246][ T8994] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1362'.
[  124.931354][ T9057] lo speed is unknown, defaulting to 1000
[  124.951715][ T9057] lo speed is unknown, defaulting to 1000
[  124.955772][ T9057] lo speed is unknown, defaulting to 1000
[  125.030038][ T9066] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.181766][ T9057] infiniband syz0: set down
[  125.183959][ T9057] infiniband syz0: added lo
[  125.193164][   T47] lo speed is unknown, defaulting to 1000
[  125.232504][ T9057] RDS/IB: syz0: added
[  125.234976][ T9057] smc: adding ib device syz0 with port count 1
[  125.237819][ T9057] smc:    ib device syz0 port 1 has pnetid 
[  125.245182][ T9057] lo speed is unknown, defaulting to 1000
[  125.310515][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'.
[  125.383259][ T9057] lo speed is unknown, defaulting to 1000
[  125.495056][ T9057] lo speed is unknown, defaulting to 1000
[  125.612157][   T47] lo speed is unknown, defaulting to 1000
[  125.623372][ T9056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.631442][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'.
[  125.761731][ T9110] syzkaller0: entered promiscuous mode
[  125.764028][ T9110] syzkaller0: entered allmulticast mode
[  126.978236][ T9129] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  127.007911][ T9131] netlink: 'syz.2.1426': attribute type 21 has an invalid length.
[  127.068743][ T9133] bond0 (unregistering): (slave gretap1): Releasing active interface
[  127.078668][ T9133] bond0 (unregistering): Released all slaves
[  127.608999][ T9168] IPv6: Can't replace route, no match found
[  127.672449][ T9174] netlink: 'syz.0.1445': attribute type 1 has an invalid length.
[  127.766757][ T9178] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  127.792487][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  127.802690][ T9178] bridge_slave_0: left allmulticast mode
[  127.806281][ T9178] bridge_slave_0: left promiscuous mode
[  127.812605][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.822980][ T9178] bridge_slave_1: left allmulticast mode
[  127.825087][ T9178] bridge_slave_1: left promiscuous mode
[  127.827623][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.835736][ T9178] bond0: (slave bond_slave_0): Releasing backup interface
[  127.844451][ T9178] bond0: (slave bond_slave_1): Releasing backup interface
[  127.859611][ T9178] team0: Port device team_slave_1 removed
[  127.865453][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.867817][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.872535][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.875594][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.886882][ T9178] bond0: (slave bond1): Releasing backup interface
[  127.893091][ T9178] bond2: (slave gretap1): Releasing active interface
[  127.895846][ T9178] gretap1: left promiscuous mode
[  127.898066][ T9178] gretap1: left allmulticast mode
[  127.916178][ T9184] netlink: 'syz.0.1447': attribute type 10 has an invalid length.
[  127.918721][ T9184] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  127.926089][ T9184] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  128.006986][ T9178] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  128.011482][ T9178] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.071943][ T9192] netlink: 'syz.2.1453': attribute type 2 has an invalid length.
[  128.078522][ T9194] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  128.084817][ T9192] : entered promiscuous mode
[  128.132564][ T9196] bond_slave_0: left promiscuous mode
[  128.135343][ T9196] bond_slave_1: left promiscuous mode
[  128.173820][ T9196] bond1: (slave macvlan2): Releasing backup interface
[  128.193368][ T9196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.208689][ T9196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.224713][ T9196] bond0 (unregistering): Released all slaves
[  128.947155][ T9257] __nla_validate_parse: 2 callbacks suppressed
[  128.947172][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'.
[  128.961355][ T9257] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  128.964418][ T9257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.095297][ T9269] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  129.116907][ T9269] bond0 (unregistering): Released all slaves
[  129.360125][ T9301] openvswitch: netlink: Flow key attribute not present in set flow.
[  129.465658][ T9313] netlink: 'syz.2.1506': attribute type 1 has an invalid length.
[  129.469222][ T9313] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1506'.
[  129.507043][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'.
[  129.514592][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'.
[  129.818706][ T9352] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1523'.
[  129.822683][ T9352] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1523'.
[  130.058701][ T9370] netlink: 'syz.1.1533': attribute type 1 has an invalid length.
[  130.076571][ T9370] netlink: 'syz.1.1533': attribute type 2 has an invalid length.
[  130.157305][ T9380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1537'.
[  130.214181][ T9385] syzkaller1: entered promiscuous mode
[  130.216328][ T9385] syzkaller1: entered allmulticast mode
[  130.548444][ T9397] lo speed is unknown, defaulting to 1000
[  130.554576][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'.
[  130.596403][   T54] Bluetooth: hci2: link tx timeout
[  130.599348][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  130.602737][   T54] Bluetooth: hci2: link tx timeout
[  130.604373][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.607203][   T54] Bluetooth: hci2: link tx timeout
[  130.609225][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  130.613311][   T54] Bluetooth: hci2: link tx timeout
[  130.614995][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.617399][   T54] Bluetooth: hci2: link tx timeout
[  130.619373][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  130.622756][   T54] Bluetooth: hci2: link tx timeout
[  130.624606][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.626999][   T54] Bluetooth: hci2: link tx timeout
[  130.628860][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  130.632829][   T54] Bluetooth: hci2: link tx timeout
[  130.634466][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.799013][ T9414] netlink: 'syz.0.1552': attribute type 6 has an invalid length.
[  130.804755][ T9414] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1552'.
[  130.815355][ T9412] openvswitch: netlink: IPv4 tun info is not correct
[  131.201876][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1563'.
[  131.887155][ T9509] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  131.982641][ T9524] lo speed is unknown, defaulting to 1000
[  132.193568][ T9541] netlink: 'syz.0.1612': attribute type 1 has an invalid length.
[  132.261758][ T9543] Bluetooth: MGMT ver 1.23
[  132.275444][   T10] IPVS: starting estimator thread 0...
[  132.360987][ T9547] IPVS: using max 63 ests per chain, 151200 per kthread
[  132.672473][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  132.754572][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.159105][ T9602] netlink: 'syz.2.1635': attribute type 1 has an invalid length.
[  133.465947][ T9618] netlink: 'syz.0.1643': attribute type 11 has an invalid length.
[  133.946575][ T9644] netlink: 'syz.1.1656': attribute type 10 has an invalid length.
[  134.123419][ T9661] tipc: Enabled bearer <eth:gre0>, priority 10
[  134.343195][ T9683] __nla_validate_parse: 4 callbacks suppressed
[  134.343206][ T9683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1672'.
[  134.661672][ T9705] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1684'.
[  134.732237][ T9707] netlink: zone id is out of range
[  134.734635][ T9707] netlink: zone id is out of range
[  134.763688][ T9707] netlink: set zone limit has 4 unknown bytes
[  134.830506][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  135.132452][ T9735] netlink: 'syz.1.1698': attribute type 10 has an invalid length.
[  135.246528][ T9750] netlink: 'syz.2.1706': attribute type 13 has an invalid length.
[  135.544705][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'.
[  135.616790][ T9769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.620930][ T9769] syzkaller0: entered promiscuous mode
[  135.623172][ T9769] syzkaller0: entered allmulticast mode
[  135.642203][ T9769] tipc: Resetting bearer <eth:syzkaller0>
[  135.775176][ T9770] tipc: Resetting bearer <eth:syzkaller0>
[  135.785382][ T9768] tipc: Resetting bearer <eth:syzkaller0>
[  135.798757][ T9768] tipc: Disabling bearer <eth:syzkaller0>
[  135.806027][ T5716] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.809868][ T5716] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.814014][ T5716] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.817762][ T5716] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.153328][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'.
[  137.030828][ T9855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1750'.
[  137.404426][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'.
[  137.905571][ T9927] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1783'.
[  138.220505][ T9949] netlink: 'syz.1.1792': attribute type 13 has an invalid length.
[  138.223701][ T9949] netlink: 'syz.1.1792': attribute type 17 has an invalid length.
[  138.236380][ T9949] gretap0: entered promiscuous mode
[  138.262871][ T9949] 8021q: adding VLAN 0 to HW filter on device team0
[  138.272907][ T9949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.281624][ T6846] lo speed is unknown, defaulting to 1000
[  138.284006][ T6846] syz0: Port: 1 Link ACTIVE
[  138.292795][ T6846] lo speed is unknown, defaulting to 1000
[  138.347667][ T9949] lo speed is unknown, defaulting to 1000
[  138.604223][ T9968] netlink: 'syz.2.1799': attribute type 1 has an invalid length.
[  138.611053][ T9968] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1799'.
[  138.827971][ T9985] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1810'.
[  139.175481][T10008] lo speed is unknown, defaulting to 1000
[  139.385805][T10027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1827'.
[  139.393816][T10027] netlink: 'syz.2.1827': attribute type 1 has an invalid length.
[  139.473557][T10030] bridge_slave_0: left promiscuous mode
[  139.476122][T10030] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.483583][T10030] bridge_slave_1: left allmulticast mode
[  139.486124][T10030] bridge_slave_1: left promiscuous mode
[  139.488639][T10030] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.507948][T10030] team0: Port device team_slave_0 removed
[  139.519554][T10030] team0: Port device team_slave_1 removed
[  139.524002][T10030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.527132][T10030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.533144][T10030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.536211][T10030] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.551656][T10030] bond2: (slave gretap1): Releasing active interface
[  139.558323][T10030] bond3: (slave bridge3): Releasing active interface
[  139.587679][T10031] team0: Mode changed to "broadcast"
[  139.589645][T10032] vlan0: entered promiscuous mode
[  139.600728][T10032] team0: Port device vlan0 added
[  139.630738][T10030] tipc: Enabled bearer <eth:team0>, priority 0
[  139.803103][T10042] bridge5: entered allmulticast mode
[  139.906000][T10046] smc: adding net device bond0 with user defined pnetid SYZ2
[  140.035394][T10053] team0: Mode changed to "broadcast"
[  140.038575][T10053] vlan0: entered promiscuous mode
[  140.050555][T10053] tipc: Enabled bearer <eth:team0>, priority 0
[  140.155655][T10064] netlink: ct family unspecified
[  140.157830][T10064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.348756][T10075] lo speed is unknown, defaulting to 1000
[  140.359597][T10075] lo speed is unknown, defaulting to 1000
[  140.364147][T10075] lo speed is unknown, defaulting to 1000
[  140.368731][T10075] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  140.393942][T10075] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  140.437262][T10075] lo speed is unknown, defaulting to 1000
[  140.443131][T10075] lo speed is unknown, defaulting to 1000
[  140.447148][T10075] lo speed is unknown, defaulting to 1000
[  140.458165][T10086] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  140.678340][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1862'.
[  141.053702][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'.
[  141.225779][T10136] team0: Mode changed to "loadbalance"
[  141.597510][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1881'.
[  142.468933][T10175] netlink: 'syz.1.1892': attribute type 2 has an invalid length.
[  142.656444][T10183] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  142.838830][T10200] netlink: 'syz.1.1903': attribute type 4 has an invalid length.
[  143.694452][T10262] IPv4: Oversized IP packet from 127.202.26.0
[  144.179239][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1941'.
[  144.314172][T10291] IPv4: Oversized IP packet from 127.202.26.0
[  144.333726][T10294] netlink: 'syz.1.1947': attribute type 1 has an invalid length.
[  144.457074][T10307] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1954'.
[  144.558961][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1957'.
[  144.570551][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1957'.
[  144.574003][T10315] netlink: 'syz.0.1957': attribute type 4 has an invalid length.
[  144.610034][T10317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1958'.
[  144.659870][T10321] ip6gre1: entered promiscuous mode
[  144.949422][T10345] lo speed is unknown, defaulting to 1000
[  145.161960][T10345] lo speed is unknown, defaulting to 1000
[  145.422808][T10382] netlink: 'syz.1.1987': attribute type 30 has an invalid length.
[  145.426035][T10382] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  145.429372][T10382] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  145.679163][T10398] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1996'.
[  145.993546][T10425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.144599][T10437] netlink: 'syz.1.2013': attribute type 5 has an invalid length.
[  146.335522][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2021'.
[  146.596876][T10469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.602378][T10469] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  146.605774][T10469] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  146.609328][T10469] tipc: Resetting bearer <eth:syzkaller0>
[  146.626991][T10469] tipc: Resetting bearer <eth:syzkaller0>
[  146.706952][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2030'.
[  146.793483][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2034'.
Connection to localhost closed by remote host.
[  147.640259][ T6846] tipc: Node number set to 2225110016
[  148.678240][ T6847] tipc: Disabling bearer <eth:syzkaller0>
[  148.840591][ T6847] bond1 (unregistering): Released all slaves
[  148.943648][ T6847] bond2 (unregistering): Released all slaves
[  148.954394][ T6847] smc: removing net device bond0 with user defined pnetid SYZ2
[  148.957961][ T6847] bond0 (unregistering): Released all slaves
[  149.056424][ T6847] tipc: Disabling bearer <eth:team0>
[  149.063253][ T6847] tipc: Left network mode
[  149.359190][ T6847] hsr_slave_0: left promiscuous mode
[  150.194654][ T6847] IPVS: stop unused estimator thread 0...
[  150.225931][ T6847] ------------[ cut here ]------------
[  150.227708][ T6847] WARNING: CPU: 1 PID: 6847 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  150.230933][ T6847] Modules linked in:
[  150.232589][ T6847] CPU: 1 UID: 0 PID: 6847 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  150.237762][ T6847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.242074][ T6847] Workqueue: netns cleanup_net
[  150.244058][ T6847] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  150.246289][ T6847] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f8 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 f1 e1 f7 e8 91 c7 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 c7 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  150.252961][ T6847] RSP: 0018:ffffc9000687f898 EFLAGS: 00010293
[  150.255445][ T6847] RAX: ffffffff8a21e3ff RBX: ffff888112ef0000 RCX: ffff888020740000
[  150.258658][ T6847] RDX: 0000000000000000 RSI: ffffffff8dba6026 RDI: ffff888020740000
[  150.262059][ T6847] RBP: ffffc9000687f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  150.265116][ T6847] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0
[  150.267642][ T6847] R13: 1ffff92000d0ff40 R14: ffff888112ef1480 R15: dffffc0000000000
[  150.270104][ T6847] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  150.273223][ T6847] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.275305][ T6847] CR2: 00007fd1c92ce440 CR3: 00000001102d4000 CR4: 00000000000006f0
[  150.277798][ T6847] Call Trace:
[  150.278890][ T6847]  <TASK>
[  150.279875][ T6847]  xfrm_net_exit+0x2d/0x70
[  150.281434][ T6847]  ops_undo_list+0x49a/0x990
[  150.282932][ T6847]  ? __pfx_ops_undo_list+0x10/0x10
[  150.284547][ T6847]  ? do_raw_spin_unlock+0x4d/0x240
[  150.286138][ T6847]  cleanup_net+0x4c5/0x800
[  150.287824][ T6847]  ? __pfx_cleanup_net+0x10/0x10
[  150.289621][ T6847]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.291678][ T6847]  ? process_scheduled_works+0x9ef/0x17b0
[  150.293972][ T6847]  ? process_scheduled_works+0x9ef/0x17b0
[  150.296325][ T6847]  process_scheduled_works+0xae1/0x17b0
[  150.298586][ T6847]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.301140][ T6847]  worker_thread+0x8a0/0xda0
[  150.302733][ T6847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.304770][ T6847]  ? __kthread_parkme+0x7b/0x200
[  150.306401][ T6847]  kthread+0x711/0x8a0
[  150.307684][ T6847]  ? __pfx_worker_thread+0x10/0x10
[  150.309401][ T6847]  ? __pfx_kthread+0x10/0x10
[  150.310939][ T6847]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.312589][ T6847]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.314208][ T6847]  ? __pfx_kthread+0x10/0x10
[  150.315691][ T6847]  ret_from_fork+0x3fc/0x770
[  150.317155][ T6847]  ? __pfx_ret_from_fork+0x10/0x10
[  150.318732][ T6847]  ? __switch_to_asm+0x39/0x70
[  150.320543][ T6847]  ? __switch_to_asm+0x33/0x70
[  150.322113][ T6847]  ? __pfx_kthread+0x10/0x10
[  150.323634][ T6847]  ret_from_fork_asm+0x1a/0x30
[  150.325138][ T6847]  </TASK>
[  150.326125][ T6847] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  150.328421][ T6847] CPU: 1 UID: 0 PID: 6847 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  150.333162][ T6847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.337048][ T6847] Workqueue: netns cleanup_net
[  150.338752][ T6847] Call Trace:
[  150.340006][ T6847]  <TASK>
[  150.341123][ T6847]  dump_stack_lvl+0x99/0x250
[  150.342601][ T6847]  ? __asan_memcpy+0x40/0x70
[  150.344032][ T6847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.345648][ T6847]  ? __pfx__printk+0x10/0x10
[  150.347075][ T6847]  vpanic+0x281/0x750
[  150.348280][ T6847]  ? __pfx__printk+0x10/0x10
[  150.350066][ T6847]  ? __pfx_vpanic+0x10/0x10
[  150.351934][ T6847]  ? is_bpf_text_address+0x292/0x2b0
[  150.354107][ T6847]  panic+0xb9/0xc0
[  150.355673][ T6847]  ? __pfx_panic+0x10/0x10
[  150.357526][ T6847]  __warn+0x31b/0x4b0
[  150.359151][ T6847]  ? xfrm_state_fini+0x270/0x2f0
[  150.361181][ T6847]  ? xfrm_state_fini+0x270/0x2f0
[  150.363183][ T6847]  report_bug+0x2be/0x4f0
[  150.364920][ T6847]  ? xfrm_state_fini+0x270/0x2f0
[  150.366873][ T6847]  ? xfrm_state_fini+0x270/0x2f0
[  150.368809][ T6847]  ? xfrm_state_fini+0x272/0x2f0
[  150.370810][ T6847]  handle_bug+0x84/0x160
[  150.372305][ T6847]  exc_invalid_op+0x1a/0x50
[  150.373791][ T6847]  asm_exc_invalid_op+0x1a/0x20
[  150.375481][ T6847] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  150.377513][ T6847] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f8 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 f1 e1 f7 e8 91 c7 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 c7 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  150.385077][ T6847] RSP: 0018:ffffc9000687f898 EFLAGS: 00010293
[  150.387505][ T6847] RAX: ffffffff8a21e3ff RBX: ffff888112ef0000 RCX: ffff888020740000
[  150.390634][ T6847] RDX: 0000000000000000 RSI: ffffffff8dba6026 RDI: ffff888020740000
[  150.393790][ T6847] RBP: ffffc9000687f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  150.396889][ T6847] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0
[  150.400037][ T6847] R13: 1ffff92000d0ff40 R14: ffff888112ef1480 R15: dffffc0000000000
[  150.403209][ T6847]  ? xfrm_state_fini+0x26f/0x2f0
[  150.405230][ T6847]  ? xfrm_state_fini+0x26f/0x2f0
[  150.407226][ T6847]  xfrm_net_exit+0x2d/0x70
[  150.409034][ T6847]  ops_undo_list+0x49a/0x990
[  150.410919][ T6847]  ? __pfx_ops_undo_list+0x10/0x10
[  150.412966][ T6847]  ? do_raw_spin_unlock+0x4d/0x240
[  150.415027][ T6847]  cleanup_net+0x4c5/0x800
[  150.416844][ T6847]  ? __pfx_cleanup_net+0x10/0x10
[  150.418856][ T6847]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.420956][ T6847]  ? process_scheduled_works+0x9ef/0x17b0
[  150.422873][ T6847]  ? process_scheduled_works+0x9ef/0x17b0
[  150.425130][ T6847]  process_scheduled_works+0xae1/0x17b0
[  150.427353][ T6847]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.429730][ T6847]  worker_thread+0x8a0/0xda0
[  150.431525][ T6847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.434033][ T6847]  ? __kthread_parkme+0x7b/0x200
[  150.436107][ T6847]  kthread+0x711/0x8a0
[  150.437804][ T6847]  ? __pfx_worker_thread+0x10/0x10
[  150.439886][ T6847]  ? __pfx_kthread+0x10/0x10
[  150.441767][ T6847]  ? _raw_spin_unlock_irq+0x23/0x50
[  150.443917][ T6847]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.446036][ T6847]  ? __pfx_kthread+0x10/0x10
[  150.447963][ T6847]  ret_from_fork+0x3fc/0x770
[  150.449842][ T6847]  ? __pfx_ret_from_fork+0x10/0x10
[  150.451923][ T6847]  ? __switch_to_asm+0x39/0x70
[  150.453890][ T6847]  ? __switch_to_asm+0x33/0x70
[  150.455891][ T6847]  ? __pfx_kthread+0x10/0x10
[  150.457787][ T6847]  ret_from_fork_asm+0x1a/0x30
[  150.459739][ T6847]  </TASK>
[  150.461698][ T6847] Kernel Offset: disabled
[  150.463411][ T6847] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:10:13  Registers:
info registers vcpu 0

CPU#0
RAX=0d488def72135100 RBX=ffffffff81968308 RCX=0d488def72135100 RDX=0000000000000001
RSI=ffffffff8d9b6dc6 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3eb9518440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000007b0a3df 0000000000000010 XMM01=7a79730000000000 0000000023b1676a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0100000000000000 00000000000002ff
XMM06=0100000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000687f030
R8 =ffff888020980237 R9 =1ffff11004130046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9915 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd1c92ce440 CR3=00000001102d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
