last executing test programs:

2.003427407s ago: executing program 0 (id=4021):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r2 = socket$inet(0x10, 0x3, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000001200)={0x1f, 0x3}, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c000280080002"], 0x3c}}, 0x40)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0xf, 0xa, 0x801, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20000800)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_emit_ethernet(0xeb, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="d47a929aa3ae51b8818c2e8788141ca7c773b10692fea8f6c5f47cadfae009f98b220a45cc20b1303e403765d09f23b8ef136d35521581d0dc405fd9078fdcec1eb19e1f767f8aa2cedaaa29827b826a5610ab233f8b9cdf45fb0d97b6e3cb1f19386dde3fb139e7e01d6e0df35721205ea93e200b99f31b3092c04fc7c5d1b536915b21c24be75453089d0b51348b242bea38161d027273c99b2517c40e1c4cd8db7915aceedca918d081d706bf7df8071968ce18800930c45c027558fe1f7ba5dae1a5163c56361d7a8432a426855808"}}}}, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r6, 0x40047459, 0x0)

2.001538413s ago: executing program 0 (id=4023):
unshare(0x26020480) (async)
unshare(0x700)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
close(r0) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f00000002c0), &(0x7f0000000280)=0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000006380))
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, 0x1410, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bind$unix(0xffffffffffffffff, 0x0, 0x0)

1.953699179s ago: executing program 0 (id=4025):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001480)=""/83, 0x53}, {0x0}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xe3, "b0ea4e52d1f797671a2675373fc4287a0762ddaa8f71e4dae336574fc1a1f4976087866b70159e6d0472de8eea19cda1065ecc59cbf64ea0cdb1c36d3932251f8aa5b50e1e6e12bafec322285cd92cdab82b51e60ad48e8ab9ae6b55bf9f352e3874a87dfa96e9a022a19ce04871a64c0b5df63f4cf25f8c0fbea310499cf2a478245208776703548d47b1cb3068c6efffdb5f42a8ab838284db8cc9fef5d0af5ecec2b3df512e99a7a5c9349e85dba637398b14c8e3ab9dc5acfc52704c0bde875b40665a96fbbf4d69bde928d11d4442742ace756f7178f1b6d004fed4a48e731130"}, &(0x7f0000000140)=0xeb)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f00000015c0)=""/251, 0x2})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xb8000000, 0x71, 0x10, 0xaa}}, &(0x7f0000000100)='GPL\x00'}, 0x90)
ioctl$SIOCSIFMTU(r2, 0x8947, &(0x7f0000000580)={'bond0\x00', 0xfffd})

1.038643163s ago: executing program 0 (id=4045):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x6)
close(r2) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x79}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x62a}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x46, &(0x7f00000020c0)={@local, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41}}}}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async, rerun: 64)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10)
socket$inet6(0x10, 0x2, 0x4) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x44, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x22}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x4) (async)
ioctl$SIOCSIFMTU(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x10000})

979.599623ms ago: executing program 0 (id=4046):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040))
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf252100000008000300", @ANYRES32, @ANYBLOB="14002f80fc106a5efa69034e84503fe8f758e048f0e391a45f612bd7416093f4b64dccc0ab76171886289e70a0e6555577a5daab15b381fc05e0d9c2e3d9ebc4a59a1b4e3af6bae0"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x814)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c"], 0x20}}, 0x4000054)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x0, 'syzkaller1\x00', {0x1}})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffff5e, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_pressure(r5, &(0x7f0000000240)='cpu.pressure\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x40000000000004)
sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a800000000020002000000000000000003000005480002800600034000000000060003400000000006001340000100002c00018014000300fc0000000000000000000000000000001400040000000000000000000000ffffac1e000106000721000000000a000600512e3933310000000800084000000003080004400000000006000740000200000800084000000002100001800c000a80050009003a0000000800084000000001"], 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x24000000)
syz_init_net_socket$ax25(0x3, 0x3, 0x1)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
shutdown(r8, 0x1)
socket$inet6(0xa, 0x1, 0x0)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="c885a36f7937dc0580286f3d7d4d0eb9c1257cc816307919c660bafe2f796de974c3cd984708f0ada5621e84df7e0d5ac782e63921718f2a5c027d5fe0510ab7327a7a528f1f36a1ea2f500e09077cf5e36976d9256ffb22d1afc304cf69d711697c8c7b7c13340c3ebb5b43f25c5c904bc3017ed2ceda3e2d12b20b4edaaa6a4189eb3d66252e8407454837de3c6a0fab1f7a"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

699.262178ms ago: executing program 0 (id=4051):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)

458.331209ms ago: executing program 1 (id=4055):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept(r0, &(0x7f0000000180)=@nl=@unspec, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x2000001}, 0x40001)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES64=0x0, @ANYBLOB="f221108b7739d4feac0289af7d9e67d8aee69dec1b99d41c76bcabc5f1955b2ee8a1253f097d29ed77149544dda32ee582d8465a7cf74ae0777e93de465b474b09d9d5cb522a548194c7590792854bd93d76f12fb55d79d70f757b41af2e428f9c94646ad2b145ee82"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
close(0x4)
r5 = gettid()
syz_open_procfs$namespace(r5, &(0x7f00000003c0)='ns/pid_for_children\x00')
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/time_for_children\x00')
unshare(0x6a040000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x200)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r8, 0x39e)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000340)={0x4d, 0x7, 0x8, 0x105, 0x80})
write$bt_hci(r10, &(0x7f0000000080)=ANY=[], 0x6)
sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20008000)

390.564314ms ago: executing program 2 (id=4057):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x3, {{0xa, 0x4e22, 0x1000000, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0x3ffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
socket$nl_route(0x10, 0x3, 0x0)
close(r0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})

338.899221ms ago: executing program 2 (id=4058):
socket$inet(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'syz_tun\x00', 0xc201}) (async, rerun: 64)
r5 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) (async)
write$tun(r4, &(0x7f0000001780)=ANY=[@ANYBLOB="00000019000002"], 0x16e) (async, rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 32)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000004000c814002b800800012039be318e3211d8e431b8f72db9f71eb6d2ec532e66885297d159540934dcd148cdd4325be64b04a32abf8b135002b4b3df863472f380beb383fbde84275a18b49dc9c8c07557f083ac6438609ce0939151055c890c7c609f25c5628fdc5b6d6d1db7ee482bd9f845775aaa8003d9a02f3fc049e9814ed23bbb8f44b7a3be4f2cdb28314104559bd39014f973ec65380e716de90413cebcc09f25c3d970e5dc5b88291c6a728cac385c7ea93afd88b98b3b0000000000", @ANYRES32=r6, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x20004030)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0)
close(0xffffffffffffffff)

337.133682ms ago: executing program 1 (id=4059):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0xfffd, @remote}, 0xa}}, 0x26)
sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x3c, &(0x7f0000005dc0)}}], 0x1a000, 0x1)
close(0x3)

335.262988ms ago: executing program 1 (id=4060):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4040004)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000180))
unshare(0x6a040000)
socket$packet(0x11, 0x2, 0x300)
sendmsg(0xffffffffffffffff, 0x0, 0x844)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
bind$ax25(r3, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
connect$ax25(r3, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000004c0))
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000ff7f00000000000000ffdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
getsockname$packet(r4, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)

210.330977ms ago: executing program 2 (id=4061):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100))
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r3)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25410000000e0001006e1d368fc50525181f0000000f0002006e657464657673696d3000001200870001000000726f7073000000005ebe74a1cc97275bafc96d0a0740f31312c58eea824c7142f0e3ec7ccaaa74fef8ae1f02000000000000005a0cf2aa913e2f07cb11"], 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async, rerun: 64)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) (async, rerun: 32)
r10 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x24000081) (async, rerun: 32)
syz_emit_ethernet(0x76, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f02ec9", 0x40, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0x7}, @hopopts={0x87}]}}}}}}}, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r11}, 0x18)
r12 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x29, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0x2], [], r9, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010) (async, rerun: 64)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)

209.700633ms ago: executing program 1 (id=4062):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 32)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x6) (async)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x62a}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (rerun: 32)
syz_emit_ethernet(0x46, &(0x7f00000020c0)={@local, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41}}}}}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r4)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) (async)
socket$inet6(0x10, 0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$SIOCSIFMTU(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x10000})

107.206359ms ago: executing program 2 (id=4063):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x8081)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000240)=0x10000, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000380))
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x534}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@i}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x29}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0xf877, 0x4d, &(0x7f00000001c0)=""/77, 0x41100, 0x4, '\x00', r2, 0x0, r7, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xa, 0xffffffff, 0x10001}, 0x10, 0x7, r7, 0x0, &(0x7f00000009c0)=[r7, r7, r7], 0x0, 0x10, 0xfff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="3120000000009b0c76d1ee37213f68bc3510e0000014042ba008000100", @ANYRES32=r7, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x20004030)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}, {&(0x7f00000004c0)="a1dbc4d6b650f9c7c4532256806fd9a501eee4689fa454141eb7ad2305b0416910215e441f5bbfb315cbaa1aba0cf56b0793cb1f10101f62e29d6096a3e89bcab16d3d56eba9509c906cd385e9adabf8eda2986c6a45e6459901c336314828fe5e86b582afb629ff832908cb39ca163e8ffa89d9a1ff37e5ca5545d1d44a65f3a26092e3ac8c9676a7709fad8b5f5df7a9a20a37ca8f14f506bdf6aaf9a3698434fff476d6f0d3a12826819a4fd1d989145187cc20310ed67f1b967e67b9489be2d9c8f6ee96db", 0xc7}, {&(0x7f0000000640)="b8f808c0c26307b1ade690a5f2a72a5a50dcedc1c5cf9b34ac412e18d85f474b3ccb4dceb1ceb7b29239459e0c442146d9430b27fc7e9cb3d2361a08c1a0e157ddfb37537f5a37789c1c292d5e1b015e8169e588bd167ce2ae56b0e6e88bb999721aee1c8b5e19d7cd5286edc2b19d00480b64ebf11b7ee6569ed1eb9a4c59e6efc48f1c243016c7b04d6eda8d868ec46696f885c6607202a55e061105e85172451b0fed27a144719708efc4a7388a2bc2684c983d1d7c523fb8ad91d202bd70977e1353d60f223f49993123f5978ad1944d5208776286581fe5dddf5fc5d4bb7cd16a92b857eb52b6cff8fe1de2811f", 0xf0}], 0x3}, 0x0)
close(0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

106.263153ms ago: executing program 1 (id=4064):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001740)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffb, 0x5, 0x10, 0x97e, 0x1}, 0x8fdb0d3, 0x1, 0x0, 0xf, 0x1, 0x20, 0x18, 0x1a, 0x6, 0x2, {0x9, 0x2, 0x0, 0x8, 0x0, 0x1ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e1e, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1)
setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000180)=0x800001, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000040036003fb4aa4ff48a452752d00"/41], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r8, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r7}, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000400ba89ff470000"], 0x14}}, 0x24000044)
recvmmsg(r7, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10051, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c)
listen(r1, 0xb5d6)
close(r0)
r10 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)

50.724308ms ago: executing program 2 (id=4065):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'sit0\x00'}) (async)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'veth0_to_team\x00'}) (async)
r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800)
accept4$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@netrom, @null, @bcast, @rose, @netrom, @null, @rose, @rose]}, &(0x7f0000000180)=0x48, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r3=>0x0})
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000340)=r3)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000030}, 0x10004)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000480)={{0xa, 0x4e22, 0x6, @empty, 0x4}, {0xa, 0x4e21, 0xffffffff, @local, 0xe}, 0x0, {[0xfffffff7, 0x7, 0x8, 0x3, 0x5, 0x6, 0x5, 0xe]}}, 0x5c) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xac, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4689385f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x611c7a03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x203830e7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ca9e7f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x599b3e05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6925f977}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f60256e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f210458}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29096dc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f09b6be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bc82b59}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb1cfa13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0xdc}}, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r3, 0x1, 0x6, @local}, 0x10) (async, rerun: 64)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) (rerun: 64)
pipe(&(0x7f0000000840)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={<r10=>0x0, @rand_addr, @empty}, &(0x7f0000000940)=0xc)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r9, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x44}}, 0x1) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b00)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r11, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x241}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r5) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', <r14=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d00)={'wpan3\x00', <r15=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, r13, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x2000c010) (async)
r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r5)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x4c, r16, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x4ef}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4010)

50.118484ms ago: executing program 1 (id=4066):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)=ANY=[@ANYBLOB="200000006a0001002abd7000fcdbdf250000000800000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4000804) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1"], 0x254}}, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7}]}, 0x34}}, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r6=>0x0, 0x29, 0x7, 0x8, 0x9, 0x66, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x10, 0x40, 0x8}})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x800008, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x50) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @multicast1}}}}}}, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) (async)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'macsec0\x00', 0x8})

0s ago: executing program 2 (id=4067):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x200000000000001)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x50)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040))
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000080))
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x2, 0x4, 0x4, 0x4}}, 0x26)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44850}, 0x40000)

kernel console output (not intermixed with test programs):

g attributes in process `syz.1.1711'.
[  169.490202][T12061] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1716'.
[  169.493425][T12061] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1716'.
[  169.588496][T12068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1718'.
[  169.590755][ T1270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.613858][T12068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1718'.
[  169.713302][T12084] netlink: 'syz.2.1723': attribute type 4 has an invalid length.
[  169.853554][T12088] ip6erspan0: entered allmulticast mode
[  170.076212][T12099] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  170.220250][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.233039][T12105] tipc: New replicast peer: 255.255.255.255
[  170.237192][T12105] tipc: Enabled bearer <udp:syz2>, priority 10
[  170.288640][T12109] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.405180][T12123] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  171.240048][ T1270] tipc: Node number set to 1722650292
[  171.732523][   T12] syzkaller0: tun_net_xmit 76
[  171.735103][   T12] syzkaller0: tun_net_xmit 48
[  171.737413][T12165] netlink: 'syz.2.1746': attribute type 66 has an invalid length.
[  171.737731][T12161] syzkaller0: create flow: hash 3509726460 index 1
[  171.760131][   T51] syzkaller0: tun_net_xmit 76
[  171.793375][T12161] syzkaller0: delete flow: hash 3509726460 index 1
[  172.842680][ T5910] net_ratelimit: 2 callbacks suppressed
[  172.842693][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.002041][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.496426][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.247443][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.462130][T12265] __nla_validate_parse: 39 callbacks suppressed
[  174.462141][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1774'.
[  174.549031][T12273] syzkaller0: entered promiscuous mode
[  174.553948][T12273] syzkaller0: entered allmulticast mode
[  174.961920][T12311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'.
[  174.978275][T12311] pim6reg0: tun_chr_ioctl cmd 2148553947
[  175.060865][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.127065][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.166789][T12323] netlink: 'syz.1.1788': attribute type 15 has an invalid length.
[  175.311689][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1789'.
[  175.354735][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.487338][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1791'.
[  175.495601][T12340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1791'.
[  175.499380][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1791'.
[  175.503301][T12340] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1791'.
[  175.508832][T12342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1793'.
[  175.582821][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'.
[  175.588541][T12350] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1796'.
[  175.640460][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.703165][T12359] lo speed is unknown, defaulting to 1000
[  175.705771][T12359] lo speed is unknown, defaulting to 1000
[  175.717013][T12363] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  175.722632][T12359] lo speed is unknown, defaulting to 1000
[  175.729409][T12359] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  175.743402][T12359] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  175.769354][T12359] lo speed is unknown, defaulting to 1000
[  175.775360][T12359] lo speed is unknown, defaulting to 1000
[  175.778811][T12359] lo speed is unknown, defaulting to 1000
[  175.783045][T12359] lo speed is unknown, defaulting to 1000
[  175.821679][T12370] netlink: 'syz.2.1801': attribute type 1 has an invalid length.
[  175.831899][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.847480][T12370] 8021q: adding VLAN 0 to HW filter on device bond2
[  175.865943][T12370] bond2: (slave geneve2): making interface the new active one
[  175.871574][T12370] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  175.878762][ T5906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.882884][ T5906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.888404][ T5906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.934358][ T5906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.021652][   T51] lo speed is unknown, defaulting to 1000
[  176.156423][T12385] lo speed is unknown, defaulting to 1000
[  176.323174][T12390] syzkaller1: entered promiscuous mode
[  176.326702][T12390] syzkaller1: entered allmulticast mode
[  176.407550][T12395] lo speed is unknown, defaulting to 1000
[  176.716397][T12419] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  176.775840][T12421] lo speed is unknown, defaulting to 1000
[  177.266846][T12457] lo speed is unknown, defaulting to 1000
[  177.333560][T12464] netlink: 'syz.2.1821': attribute type 10 has an invalid length.
[  177.516610][T12473] lo speed is unknown, defaulting to 1000
[  177.627724][T12483] netlink: 'syz.1.1828': attribute type 9 has an invalid length.
[  177.673016][T12481] lo speed is unknown, defaulting to 1000
[  178.490914][    C1] net_ratelimit: 3 callbacks suppressed
[  178.490930][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.074030][T12545] netlink: 'syz.0.1848': attribute type 29 has an invalid length.
[  179.138652][T12545] lo speed is unknown, defaulting to 1000
[  179.165496][T12546] lo speed is unknown, defaulting to 1000
[  179.245826][   T33] audit: type=1800 audit(1756235424.374:3): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1850" name="memory.events" dev="tmpfs" ino=3221 res=0 errno=0
[  179.338735][T12561] lo speed is unknown, defaulting to 1000
[  179.412916][T12568] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  179.477144][T12570] __nla_validate_parse: 8 callbacks suppressed
[  179.477158][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'.
[  179.499106][T12570] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.506833][T12570] macvlan2: entered promiscuous mode
[  179.508610][T12570] macvlan2: entered allmulticast mode
[  179.511192][T12570] bond2: entered promiscuous mode
[  179.513835][T12570] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  179.518568][T12570] bond2: left promiscuous mode
[  179.545321][T12574] lo speed is unknown, defaulting to 1000
[  179.556547][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1853'.
[  179.673043][T12578] lo speed is unknown, defaulting to 1000
[  179.972324][T12589] lo speed is unknown, defaulting to 1000
[  179.984730][T12587] lo speed is unknown, defaulting to 1000
[  180.274928][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1858'.
[  180.561888][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  180.565514][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.598423][T12606] lo speed is unknown, defaulting to 1000
[  180.655388][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  180.658193][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  180.663007][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  180.663519][T12616] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  180.672558][T12616] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  180.677494][T12616] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  180.712888][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1867'.
[  180.791671][T12625] bond2: (slave geneve2): Releasing active interface
[  180.798148][T12623] lo speed is unknown, defaulting to 1000
[  180.801836][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.806920][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.818454][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.824089][T12625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1869'.
[  180.834955][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.118551][T12643] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  181.265456][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  181.269032][T12649] netlink: 'syz.1.1877': attribute type 30 has an invalid length.
[  181.278690][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'.
[  181.278723][ T6032] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.283446][T12649] netlink: 'syz.1.1877': attribute type 30 has an invalid length.
[  181.288607][ T6032] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.294247][ T6032] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.297688][ T6032] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.930842][T12670] lo speed is unknown, defaulting to 1000
[  182.198064][T12687] lo speed is unknown, defaulting to 1000
[  182.386041][T12701] netlink: 'syz.0.1892': attribute type 11 has an invalid length.
[  182.706464][T12735] netlink: 'syz.1.1901': attribute type 10 has an invalid length.
[  182.709280][T12735] netlink: 'syz.1.1901': attribute type 49 has an invalid length.
[  182.763588][T12740] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  182.772191][T12730] lo speed is unknown, defaulting to 1000
[  182.788617][T12743] netlink: 'syz.1.1904': attribute type 15 has an invalid length.
[  182.797867][T12743] netlink: 'syz.1.1904': attribute type 1 has an invalid length.
[  183.475461][T12815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.477979][T12816] syzkaller0: entered promiscuous mode
[  183.480290][T12816] syzkaller0: entered allmulticast mode
[  183.485045][T12815] tipc: Resetting bearer <eth:syzkaller0>
[  183.498709][T12815] tipc: Resetting bearer <eth:syzkaller0>
[  183.531950][T12815] tipc: Disabling bearer <eth:syzkaller0>
[  183.563234][T12825] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  183.635909][T12836] netlink: 'syz.1.1922': attribute type 4 has an invalid length.
[  183.799352][T12857] 8021q: adding VLAN 0 to HW filter on device team0
[  183.808240][T12857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.016156][T12872] lo speed is unknown, defaulting to 1000
[  184.236826][T12884] lo speed is unknown, defaulting to 1000
[  184.928057][T12897] __nla_validate_parse: 11 callbacks suppressed
[  184.928073][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1936'.
[  185.170330][T12906] lo speed is unknown, defaulting to 1000
[  185.616016][T12925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.623495][T12925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1943'.
[  185.629963][T12925] tipc: Resetting bearer <eth:syzkaller0>
[  185.644458][T12924] tipc: Disabling bearer <eth:syzkaller0>
[  186.003959][T12941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'.
[  186.083181][T12949] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  186.094943][T12949] gretap2: entered promiscuous mode
[  186.207915][T12964] lo speed is unknown, defaulting to 1000
[  186.586778][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1955'.
[  186.831466][T13028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.166982][T13040] lo speed is unknown, defaulting to 1000
[  187.305839][T13049] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  187.747653][T13059] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  187.856540][T13064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1972'.
[  187.898351][T13064] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  188.027645][T13070] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004
[  188.055920][T13073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1976'.
[  188.130689][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'.
[  188.156285][T13074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.243686][T13084] lo speed is unknown, defaulting to 1000
[  188.309699][T13090] lo speed is unknown, defaulting to 1000
[  188.581188][T13107] lo speed is unknown, defaulting to 1000
[  188.780498][T13117] netlink: 'syz.0.1990': attribute type 4 has an invalid length.
[  188.785082][   T51] lo speed is unknown, defaulting to 1000
[  188.788681][   T51] syz2: Port: 1 Link DOWN
[  188.795872][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'.
[  188.887510][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'.
[  188.956823][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'.
[  189.009075][T13138] lo speed is unknown, defaulting to 1000
[  189.733367][T13183] lo speed is unknown, defaulting to 1000
[  189.794585][T13184] lo speed is unknown, defaulting to 1000
[  190.116487][T13189] __nla_validate_parse: 3 callbacks suppressed
[  190.116496][T13189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2007'.
[  190.127253][T13192] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  190.176911][T13196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2009'.
[  190.184478][T13202] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001
[  190.193460][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2011'.
[  190.227792][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2012'.
[  190.231955][T13202] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  190.247408][T13202] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  190.252443][T13202] macsec1: entered promiscuous mode
[  190.254968][T13202] macsec1: entered allmulticast mode
[  190.257537][T13202] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  190.301550][T13215] tap0: tun_chr_ioctl cmd 1074025676
[  190.303679][T13215] tap0: owner set to 0
[  190.318879][T13217] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2014'.
[  190.323159][T13217] 0: renamed from hsr0
[  190.331010][T13217] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  190.334667][T13217] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.338212][T13217] 0: entered allmulticast mode
[  190.343549][T13217] hsr_slave_0: entered allmulticast mode
[  190.348370][T13217] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  190.379905][T13220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2015'.
[  190.448987][T13228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  190.524152][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2024'.
[  190.652239][T13252] lo speed is unknown, defaulting to 1000
[  190.771475][T13261] lo speed is unknown, defaulting to 1000
[  190.786700][T13254] lo speed is unknown, defaulting to 1000
[  190.944344][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2032'.
[  190.995732][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2033'.
[  191.168182][T13280] lo speed is unknown, defaulting to 1000
[  191.182045][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2036'.
[  191.194187][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.718713][T13318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.133104][T13338] : entered promiscuous mode
[  192.147642][T13338] netlink: 'syz.0.2053': attribute type 5 has an invalid length.
[  192.154618][T13338] geneve2: entered promiscuous mode
[  192.156689][T13338] geneve2: entered allmulticast mode
[  192.160889][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.164525][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  192.168076][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  192.171532][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  192.174381][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  192.283926][T13342] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  192.341753][T13348] lo speed is unknown, defaulting to 1000
[  192.485531][T13357] tc_dump_action: action bad kind
[  192.797719][T13379] lo speed is unknown, defaulting to 1000
[  192.972497][T13385] netlink: 'syz.2.2066': attribute type 1 has an invalid length.
[  193.208405][T13395] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.604997][T13419] lo speed is unknown, defaulting to 1000
[  193.683603][T13423] netlink: 'syz.2.2078': attribute type 4 has an invalid length.
[  193.843620][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.860284][ T5314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.865360][T13428] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  193.875610][ T5873] lo speed is unknown, defaulting to 1000
[  193.877944][ T5873] syz2: Port: 1 Link ACTIVE
[  193.890271][T13429] lo speed is unknown, defaulting to 1000
[  194.129092][T13454] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  194.463935][T13488] lo speed is unknown, defaulting to 1000
[  194.579383][T13493] lo speed is unknown, defaulting to 1000
[  194.763167][T13508] lo speed is unknown, defaulting to 1000
[  195.926525][    T9] net_ratelimit: 3 callbacks suppressed
[  195.926540][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.938931][T13541] __nla_validate_parse: 29 callbacks suppressed
[  195.938943][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2112'.
[  195.946841][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2112'.
[  195.997326][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2115'.
[  196.003661][T13550] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.2115'.
[  196.012119][T13548] lo speed is unknown, defaulting to 1000
[  196.104576][T13566] netlink: 'syz.2.2118': attribute type 4 has an invalid length.
[  196.479854][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.146359][T13586] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  197.155061][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.174174][T13587] lo speed is unknown, defaulting to 1000
[  197.296590][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2127'.
[  197.336077][T13599] lo speed is unknown, defaulting to 1000
[  197.444894][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2131'.
[  197.520483][ T1270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.540810][T13617] lo speed is unknown, defaulting to 1000
[  197.543847][T13617] lo speed is unknown, defaulting to 1000
[  197.546612][T13617] lo speed is unknown, defaulting to 1000
[  197.577165][T13617] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  197.610721][T13617] lo speed is unknown, defaulting to 1000
[  197.614945][T13617] lo speed is unknown, defaulting to 1000
[  197.620526][T13617] lo speed is unknown, defaulting to 1000
[  197.624909][T13617] lo speed is unknown, defaulting to 1000
[  197.658318][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'.
[  197.826207][T13628] lo speed is unknown, defaulting to 1000
[  197.830258][T13628] lo speed is unknown, defaulting to 1000
[  197.867179][ T1270] lo speed is unknown, defaulting to 1000
[  197.873941][T13634] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  197.947434][T13637] lo speed is unknown, defaulting to 1000
[  197.952483][T13637] lo speed is unknown, defaulting to 1000
[  198.064141][T13642] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  198.241054][ T1270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.284262][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'.
[  198.425890][T13674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2146'.
[  198.646754][T13685] lo speed is unknown, defaulting to 1000
[  198.651661][T13685] lo speed is unknown, defaulting to 1000
[  198.851429][T13693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2151'.
[  199.117257][T13703] IPVS: Unknown mcast interface: vxcan1
[  199.216951][T13705] openvswitch: netlink: Flow key attr not present in new flow.
[  199.370116][T13709] netlink: 'syz.0.2156': attribute type 4 has an invalid length.
[  199.395781][T13709] lo speed is unknown, defaulting to 1000
[  199.398526][T13709] lo speed is unknown, defaulting to 1000
[  199.561512][T13716] lo speed is unknown, defaulting to 1000
[  199.564359][T13716] lo speed is unknown, defaulting to 1000
[  199.847188][T13741] netlink: 'syz.2.2164': attribute type 126 has an invalid length.
[  199.958485][T13747] lo speed is unknown, defaulting to 1000
[  199.961513][T13747] lo speed is unknown, defaulting to 1000
[  200.023495][T13753] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  200.336730][T13776] xt_time: invalid argument - start or stop time greater than 23:59:59
[  200.356716][T13776] lo speed is unknown, defaulting to 1000
[  200.361083][T13776] lo speed is unknown, defaulting to 1000
[  200.674865][T13789] lo speed is unknown, defaulting to 1000
[  200.677434][T13789] lo speed is unknown, defaulting to 1000
[  200.885827][T13807] lo speed is unknown, defaulting to 1000
[  200.890704][T13807] lo speed is unknown, defaulting to 1000
[  201.110235][T13814] __nla_validate_parse: 10 callbacks suppressed
[  201.110253][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'.
[  201.115521][T13814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'.
[  201.118542][T13814] netlink: 'syz.0.2187': attribute type 14 has an invalid length.
[  201.122875][T13814] netlink: 'syz.0.2187': attribute type 13 has an invalid length.
[  201.600588][    T9] net_ratelimit: 4 callbacks suppressed
[  201.600602][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.196819][T13825] lo speed is unknown, defaulting to 1000
[  202.265320][T13825] lo speed is unknown, defaulting to 1000
[  203.036618][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2196'.
[  203.052292][T13849] lo speed is unknown, defaulting to 1000
[  203.055143][T13849] lo speed is unknown, defaulting to 1000
[  203.176860][T13857] lo speed is unknown, defaulting to 1000
[  203.183325][T13857] lo speed is unknown, defaulting to 1000
[  203.213479][T13854] lo speed is unknown, defaulting to 1000
[  203.221408][T13854] lo speed is unknown, defaulting to 1000
[  203.306629][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'.
[  203.319161][T13866] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2201'.
[  203.324535][T13866] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2201'.
[  203.349712][ T1270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.483327][T13877] tipc: Enabled bearer <udp:syz2>, priority 10
[  203.571040][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  203.613493][T13887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.616250][T13887] syzkaller0: entered promiscuous mode
[  203.618049][T13887] syzkaller0: entered allmulticast mode
[  203.643145][T13887] tipc: Resetting bearer <eth:syzkaller0>
[  203.647365][T13886] tipc: Resetting bearer <eth:syzkaller0>
[  203.656215][T13886] tipc: Disabling bearer <eth:syzkaller0>
[  203.660910][T13889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2208'.
[  203.725362][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2209'.
[  203.807407][T13901] lo speed is unknown, defaulting to 1000
[  203.819346][T13902] lo speed is unknown, defaulting to 1000
[  203.820674][T13901] lo speed is unknown, defaulting to 1000
[  203.835070][T13902] lo speed is unknown, defaulting to 1000
[  203.893784][T13907] lo speed is unknown, defaulting to 1000
[  203.912017][T13907] lo speed is unknown, defaulting to 1000
[  204.186368][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2215'.
[  204.233009][T13918] lo speed is unknown, defaulting to 1000
[  204.236110][T13918] lo speed is unknown, defaulting to 1000
[  204.402477][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.609685][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  205.933622][T13976] lo speed is unknown, defaulting to 1000
[  205.936317][T13976] lo speed is unknown, defaulting to 1000
[  206.271358][T13992] lo speed is unknown, defaulting to 1000
[  206.275097][T13992] lo speed is unknown, defaulting to 1000
[  207.014245][T14004] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  207.037749][T14004] lo speed is unknown, defaulting to 1000
[  207.044984][T14004] lo speed is unknown, defaulting to 1000
[  207.258111][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2238'.
[  207.418398][T14012] lo speed is unknown, defaulting to 1000
[  207.422272][T14012] lo speed is unknown, defaulting to 1000
[  207.477686][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2239'.
[  207.511794][T14015] lo speed is unknown, defaulting to 1000
[  207.516251][T14015] lo speed is unknown, defaulting to 1000
[  207.679554][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  207.727688][T14033] lo speed is unknown, defaulting to 1000
[  207.757074][T14033] lo speed is unknown, defaulting to 1000
[  207.891143][T14044] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  207.915657][T14043] lo speed is unknown, defaulting to 1000
[  207.919379][T14043] lo speed is unknown, defaulting to 1000
[  207.991623][T14053] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.156219][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2249'.
[  208.162583][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'.
[  208.217112][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'.
[  208.271950][T14061] lo speed is unknown, defaulting to 1000
[  208.275681][T14061] lo speed is unknown, defaulting to 1000
[  208.362805][T14075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2252'.
[  208.420010][T14079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2254'.
[  208.483481][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.496385][T14080] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  208.504504][T14079] Bluetooth: MGMT ver 1.23
[  208.569793][ T1270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  208.725328][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'.
[  208.728397][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'.
[  210.289955][T14137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  210.389411][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2273'.
[  210.397153][T14159] ip_vti0: entered allmulticast mode
[  210.485929][T14168] vxcan1: entered allmulticast mode
[  210.494763][T14168] vxcan1: left allmulticast mode
[  210.629866][T14177] sctp: [Deprecated]: syz.1.2279 (pid 14177) Use of int in max_burst socket option.
[  210.629866][T14177] Use struct sctp_assoc_value instead
[  210.873499][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.983751][ T1270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.017209][T14202] can: request_module (can-proto-0) failed.
[  211.089999][ T1270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.196953][T14228] sctp: [Deprecated]: syz.0.2297 (pid 14228) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.196953][T14228] Use struct sctp_sack_info instead
[  211.201855][T14221] ip_vti0: left allmulticast mode
[  211.216086][T14221] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  211.303649][T14239] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  211.518484][T14263] lo speed is unknown, defaulting to 1000
[  211.531422][T14263] lo speed is unknown, defaulting to 1000
[  211.552798][T14261] lo speed is unknown, defaulting to 1000
[  211.562277][T14261] lo speed is unknown, defaulting to 1000
[  212.576594][T14299] __nla_validate_parse: 7 callbacks suppressed
[  212.576603][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2316'.
[  212.699008][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'.
[  212.770906][T14319] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.773806][T14319] syzkaller0: entered promiscuous mode
[  212.775728][T14319] syzkaller0: entered allmulticast mode
[  212.783380][T14319] tipc: Resetting bearer <eth:syzkaller0>
[  212.791892][T14314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2320'.
[  212.795832][T14318] tipc: Resetting bearer <eth:syzkaller0>
[  212.816096][T14318] tipc: Disabling bearer <eth:syzkaller0>
[  213.065660][T14337] lo speed is unknown, defaulting to 1000
[  213.068527][T14337] lo speed is unknown, defaulting to 1000
[  213.192453][T14347] net_ratelimit: 2 callbacks suppressed
[  213.192463][T14347] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  213.227411][T14349] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  213.318629][T14352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.322156][T14352] syzkaller0: entered promiscuous mode
[  213.324163][T14352] syzkaller0: entered allmulticast mode
[  213.348087][T14350] tipc: Resetting bearer <eth:syzkaller0>
[  213.361828][T14350] tipc: Disabling bearer <eth:syzkaller0>
[  213.497234][T14361] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  213.523081][T14364] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  213.536104][T14364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2333'.
[  213.601497][T14371] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2337'.
[  213.637917][T14373] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  213.717957][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2339'.
[  214.373258][T14383] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2341'.
[  214.377057][T14383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2341'.
[  214.399070][T14383] lo speed is unknown, defaulting to 1000
[  214.405074][T14383] lo speed is unknown, defaulting to 1000
[  214.663369][T14392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2343'.
[  214.708961][T14395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.712375][T14395] syzkaller0: entered promiscuous mode
[  214.714652][T14395] syzkaller0: entered allmulticast mode
[  214.725265][T14395] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  214.745045][T14395] tipc: Resetting bearer <eth:syzkaller0>
[  214.749187][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2344'.
[  214.762880][T14394] tipc: Resetting bearer <eth:syzkaller0>
[  214.772266][T14394] tipc: Disabling bearer <eth:syzkaller0>
[  214.777895][T14397] lo speed is unknown, defaulting to 1000
[  214.781737][T14397] lo speed is unknown, defaulting to 1000
[  215.194374][T14413] lo speed is unknown, defaulting to 1000
[  215.197584][T14413] lo speed is unknown, defaulting to 1000
[  215.469223][T14418] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  216.215062][T14448] syzkaller1: entered promiscuous mode
[  216.217406][T14448] syzkaller1: entered allmulticast mode
[  216.515525][T14471] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  216.579044][T14480] netlink: 'syz.2.2372': attribute type 4 has an invalid length.
[  216.606630][T14480] netlink: 'syz.2.2372': attribute type 1 has an invalid length.
[  216.788455][T14501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.895742][T14518] netlink: 'syz.2.2383': attribute type 4 has an invalid length.
[  216.899236][T14517] openvswitch: netlink: Flow actions attr not present in new flow.
[  216.990139][T14523] ieee802154 phy0 wpan0: encryption failed: -22
[  217.087448][T14531] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  217.103732][T14531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.134267][T14535] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  217.328935][T14548] lo speed is unknown, defaulting to 1000
[  217.337937][T14548] lo speed is unknown, defaulting to 1000
[  217.455386][T14560] lo speed is unknown, defaulting to 1000
[  217.458131][T14560] lo speed is unknown, defaulting to 1000
[  217.459345][T14561] lo speed is unknown, defaulting to 1000
[  217.493336][T14561] lo speed is unknown, defaulting to 1000
[  217.855860][T14589] __nla_validate_parse: 21 callbacks suppressed
[  217.855871][T14589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2406'.
[  217.895339][T14587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2407'.
[  218.045394][T14594] netlink: 'syz.1.2409': attribute type 1 has an invalid length.
[  218.048756][T14594] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2409'.
[  218.224334][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2413'.
[  218.365828][T14616] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  218.434917][T14618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2417'.
[  218.438323][T14618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2417'.
[  218.442875][T14618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2417'.
[  218.455755][T14622] lo speed is unknown, defaulting to 1000
[  218.458480][T14622] lo speed is unknown, defaulting to 1000
[  218.538341][T14629] netlink: 'syz.2.2420': attribute type 11 has an invalid length.
[  218.558190][T14631] netlink: 'syz.0.2421': attribute type 2 has an invalid length.
[  218.561676][T14629] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  218.682846][T14645] netlink: 'syz.2.2425': attribute type 4 has an invalid length.
[  218.776862][T14650] lo speed is unknown, defaulting to 1000
[  218.780625][T14650] lo speed is unknown, defaulting to 1000
[  218.971955][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'.
[  219.066262][T14667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2431'.
[  219.102501][T14669] ieee802154 phy0 wpan0: encryption failed: -22
[  219.147424][T14672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'.
[  219.207528][T14673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.214147][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.433043][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.448985][T14687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.510834][T14689] wlan1: mtu less than device minimum
[  219.678286][T14696] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  219.681525][T14696] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  219.710303][T14696] lo speed is unknown, defaulting to 1000
[  219.713423][T14696] lo speed is unknown, defaulting to 1000
[  219.870872][T14712] veth1_macvtap: left promiscuous mode
[  219.889824][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.984393][T14722] lo speed is unknown, defaulting to 1000
[  219.987403][T14722] lo speed is unknown, defaulting to 1000
[  220.312139][T14761] veth0_to_bridge: entered promiscuous mode
[  220.564565][T14776] lo speed is unknown, defaulting to 1000
[  220.568606][T14776] lo speed is unknown, defaulting to 1000
[  220.720601][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  220.994401][T14805] lo speed is unknown, defaulting to 1000
[  220.997045][T14805] lo speed is unknown, defaulting to 1000
[  221.128739][T14812] netlink: 'syz.2.2473': attribute type 9 has an invalid length.
[  221.151429][T14760] veth0_to_bridge: left promiscuous mode
[  221.331492][T14821] lo speed is unknown, defaulting to 1000
[  221.335975][T14821] lo speed is unknown, defaulting to 1000
[  221.552695][T14845] lo speed is unknown, defaulting to 1000
[  221.560922][T14845] lo speed is unknown, defaulting to 1000
[  221.831697][T14876] IPVS: set_ctl: invalid protocol: 94 172.30.0.3:20002
[  221.895372][T14882] netlink: 'syz.2.2492': attribute type 4 has an invalid length.
[  222.136458][T14901] netlink: 'syz.1.2497': attribute type 4 has an invalid length.
[  222.143729][T14902] lo speed is unknown, defaulting to 1000
[  222.147113][T14902] lo speed is unknown, defaulting to 1000
[  222.164547][   T10] lo speed is unknown, defaulting to 1000
[  222.168008][   T10] syz1: Port: 1 Link DOWN
[  222.393944][T14915] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  222.786819][T14936] syzkaller1: entered allmulticast mode
[  222.999016][T14944] __nla_validate_parse: 16 callbacks suppressed
[  222.999026][T14944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2507'.
[  223.085631][T14953] lo speed is unknown, defaulting to 1000
[  223.088397][T14953] lo speed is unknown, defaulting to 1000
[  223.165429][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'.
[  223.210796][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2511'.
[  223.213933][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2511'.
[  223.221507][T14963] bridge0: entered promiscuous mode
[  223.233467][T14963] bridge0: left promiscuous mode
[  223.563240][T14981] IPVS: Error connecting to the multicast addr
[  223.566956][T14980] IPVS: Error connecting to the multicast addr
[  223.704473][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2515'.
[  223.771010][T14991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2517'.
[  223.861857][T14994] net_ratelimit: 3 callbacks suppressed
[  223.861869][T14994] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  223.945191][T15001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2519'.
[  224.006403][T15006] netlink: 'syz.1.2521': attribute type 4 has an invalid length.
[  224.017465][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2521'.
[  224.021403][T15006] netlink: 'syz.1.2521': attribute type 5 has an invalid length.
[  224.024701][T15006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2521'.
[  224.031424][T15006] geneve2: entered promiscuous mode
[  224.033329][T15006] geneve2: entered allmulticast mode
[  224.037357][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  224.041254][ T5872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  224.045024][ T5872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  224.048553][ T5872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  224.187416][T15020] lo speed is unknown, defaulting to 1000
[  224.192864][T15020] lo speed is unknown, defaulting to 1000
[  224.355000][T15031] netlink: 'syz.1.2529': attribute type 2 has an invalid length.
[  224.709013][T15050] lo speed is unknown, defaulting to 1000
[  224.712180][T15050] lo speed is unknown, defaulting to 1000
[  224.817779][T15067] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2538'.
[  224.932327][T15078] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.026432][T15088] netlink: 'syz.2.2547': attribute type 4 has an invalid length.
[  225.070437][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.136622][T15091] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  225.139388][T15091] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  225.199768][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.207357][T15091] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  225.211017][T15091] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  225.222419][T15091] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  225.225027][T15091] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  225.635083][T15135] openvswitch: netlink: Flow key attribute not present in set flow.
[  226.477486][T15157] lo speed is unknown, defaulting to 1000
[  226.481956][T15157] lo speed is unknown, defaulting to 1000
[  226.814423][T15200] lo speed is unknown, defaulting to 1000
[  226.819288][T15200] lo speed is unknown, defaulting to 1000
[  226.912971][T15218] lo speed is unknown, defaulting to 1000
[  226.915622][T15218] lo speed is unknown, defaulting to 1000
[  226.928555][T15220] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  227.051222][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.205222][T15250] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  227.775587][T15287] lo speed is unknown, defaulting to 1000
[  227.781793][T15287] lo speed is unknown, defaulting to 1000
[  227.854031][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.056444][T15303] lo speed is unknown, defaulting to 1000
[  228.063107][T15303] lo speed is unknown, defaulting to 1000
[  228.388192][T15310] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  228.427099][    T9] lo speed is unknown, defaulting to 1000
[  228.431573][    T9] syz1: Port: 1 Link ACTIVE
[  228.617420][T15320] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.634866][T15320] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  228.699209][T15320] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.702855][T15320] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  228.749564][T15320] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.753074][T15320] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  228.802825][T15320] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.806864][T15320] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  228.823242][T15332] lo speed is unknown, defaulting to 1000
[  228.827366][T15332] lo speed is unknown, defaulting to 1000
[  228.901618][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.905133][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  228.926704][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.930494][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  228.951865][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.955511][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  229.059718][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.074598][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  229.080061][T15336] __nla_validate_parse: 10 callbacks suppressed
[  229.080069][T15336] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2611'.
[  229.347616][T15345] netlink: 'syz.2.2614': attribute type 29 has an invalid length.
[  229.352997][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'.
[  229.468304][T15347] lo speed is unknown, defaulting to 1000
[  229.474276][T15347] lo speed is unknown, defaulting to 1000
[  229.536461][T15349] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2615'.
[  230.015023][T15377] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  230.017399][T15377] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  230.102737][T15384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.110822][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.150571][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2629'.
[  230.192023][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'.
[  230.196053][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'.
[  230.199823][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'.
[  230.203328][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'.
[  230.206688][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'.
[  230.213487][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.221581][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'.
[  230.232520][T15396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.310559][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.356494][T15416] lo speed is unknown, defaulting to 1000
[  230.359055][T15416] lo speed is unknown, defaulting to 1000
[  230.865994][T15459] lo speed is unknown, defaulting to 1000
[  230.870339][T15459] lo speed is unknown, defaulting to 1000
[  230.997507][T15474] lo speed is unknown, defaulting to 1000
[  231.001528][T15474] lo speed is unknown, defaulting to 1000
[  231.058815][T15481] lo speed is unknown, defaulting to 1000
[  231.069303][T15481] lo speed is unknown, defaulting to 1000
[  231.280432][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.476294][T15510] netlink: 'syz.2.2659': attribute type 1 has an invalid length.
[  231.733229][T15524] lo speed is unknown, defaulting to 1000
[  231.736932][T15524] lo speed is unknown, defaulting to 1000
[  232.430378][T15587] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  232.519003][T15593] lo speed is unknown, defaulting to 1000
[  232.522064][T15593] lo speed is unknown, defaulting to 1000
[  232.797012][T15600] syzkaller1: entered promiscuous mode
[  232.798999][T15600] syzkaller1: entered allmulticast mode
[  232.813776][T15600] lo speed is unknown, defaulting to 1000
[  232.816519][T15600] lo speed is unknown, defaulting to 1000
[  232.837445][T15602] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  232.957472][T15608] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  233.266387][T15614] lo speed is unknown, defaulting to 1000
[  233.270772][T15614] lo speed is unknown, defaulting to 1000
[  233.870798][T15636] ieee802154 phy0 wpan0: encryption failed: -22
[  234.307799][T15646] lo speed is unknown, defaulting to 1000
[  234.315925][T15646] lo speed is unknown, defaulting to 1000
[  234.325021][T15648] __nla_validate_parse: 25 callbacks suppressed
[  234.325032][T15648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2700'.
[  234.389758][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2702'.
[  234.491945][T15664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2704'.
[  234.512124][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'.
[  234.542174][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'.
[  234.683988][T15681] ip6gretap0: left allmulticast mode
[  234.686403][T15681] macsec2: left promiscuous mode
[  234.688514][T15681] macsec2: left allmulticast mode
[  234.693658][T15681] ip6erspan0: left allmulticast mode
[  234.736285][T15685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2709'.
[  234.740384][T15685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2709'.
[  235.670947][T15740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2723'.
[  235.827461][T15761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2731'.
[  235.833934][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2731'.
[  235.903254][T15767] lo speed is unknown, defaulting to 1000
[  235.908911][T15767] lo speed is unknown, defaulting to 1000
[  236.054827][T15781] lo speed is unknown, defaulting to 1000
[  236.057536][T15781] lo speed is unknown, defaulting to 1000
[  236.317958][T15795] netlink: 'syz.0.2740': attribute type 12 has an invalid length.
[  236.323549][T15795] net_ratelimit: 3 callbacks suppressed
[  236.323562][T15795] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  236.327622][T15790] netlink: 'syz.1.2739': attribute type 2 has an invalid length.
[  236.328691][T15795] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  236.717869][T15822] lo speed is unknown, defaulting to 1000
[  236.725518][T15822] lo speed is unknown, defaulting to 1000
[  236.887933][T15834] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  236.911113][T15834] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  236.958533][T15840] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link
[  237.087834][T15848] bond3: (slave ip6gretap3): Releasing backup interface
[  237.468612][T15861] rdma_op ffff8880497a49f0 conn xmit_rdma 0000000000000000
[  237.485253][T15861] netlink: 'syz.1.2755': attribute type 10 has an invalid length.
[  237.725433][T15885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  237.802651][T15889] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.272167][T15894] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  238.773800][T15919] netlink: 'syz.2.2772': attribute type 83 has an invalid length.
[  238.955642][T15936] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  238.962543][T15936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  239.077369][T15951] lo speed is unknown, defaulting to 1000
[  239.081889][T15951] lo speed is unknown, defaulting to 1000
[  239.535441][T15984] lo speed is unknown, defaulting to 1000
[  239.539244][T15984] lo speed is unknown, defaulting to 1000
[  239.830657][T15998] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  239.833533][T15998] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  239.892694][T16000] lo speed is unknown, defaulting to 1000
[  239.896248][T16000] lo speed is unknown, defaulting to 1000
[  239.911469][T16002] macvlan1: mtu less than device minimum
[  239.925996][T16006] ieee802154 phy0 wpan0: encryption failed: -22
[  239.981436][T16008] __nla_validate_parse: 19 callbacks suppressed
[  239.981449][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2793'.
[  240.132805][T16021] lo speed is unknown, defaulting to 1000
[  240.135737][T16021] lo speed is unknown, defaulting to 1000
[  240.504159][T16037] netlink: 'syz.2.2800': attribute type 66 has an invalid length.
[  240.548892][T16040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2801'.
[  240.595749][T16042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2802'.
[  240.661987][T16048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2801'.
[  240.745063][T16052] netlink: 'syz.0.2803': attribute type 4 has an invalid length.
[  241.545258][T16068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2807'.
[  241.651681][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2811'.
[  241.675629][T16088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2814'.
[  241.682159][T16088] openvswitch: netlink: Flow key attr not present in new flow.
[  241.810616][T16097] netlink: 'syz.1.2817': attribute type 11 has an invalid length.
[  241.854046][T16103] unsupported nlmsg_type 40
[  242.039186][T16117] netlink: 'syz.1.2822': attribute type 4 has an invalid length.
[  242.048488][   T51] lo speed is unknown, defaulting to 1000
[  242.051238][   T51] syz1: Port: 1 Link DOWN
[  242.182372][T16127] netlink: 'syz.1.2826': attribute type 3 has an invalid length.
[  242.185154][T16127] netlink: 'syz.1.2826': attribute type 3 has an invalid length.
[  242.238169][T16138] lo speed is unknown, defaulting to 1000
[  242.242873][T16138] lo speed is unknown, defaulting to 1000
[  242.282125][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'.
[  242.368802][T16149] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  242.516803][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2833'.
[  242.552424][T16163] lo speed is unknown, defaulting to 1000
[  242.555892][T16163] lo speed is unknown, defaulting to 1000
[  242.582673][T16165] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  242.588880][    T9] lo speed is unknown, defaulting to 1000
[  242.591592][    T9] syz1: Port: 1 Link ACTIVE
[  242.597724][T16167] netlink: 'syz.0.2835': attribute type 4 has an invalid length.
[  242.623794][    T9] lo speed is unknown, defaulting to 1000
[  242.626224][    T9] syz2: Port: 1 Link DOWN
[  242.760010][T16184] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  242.807277][T16193] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  242.809543][T16193] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  242.842127][T16201] netlink: 'syz.1.2844': attribute type 4 has an invalid length.
[  242.847623][   T51] lo speed is unknown, defaulting to 1000
[  242.850419][   T51] syz1: Port: 1 Link DOWN
[  242.932711][T16215] lo speed is unknown, defaulting to 1000
[  242.937165][T16215] lo speed is unknown, defaulting to 1000
[  243.016107][T16226] netlink: 'syz.2.2852': attribute type 1 has an invalid length.
[  243.030797][T16226] sctp: [Deprecated]: syz.2.2852 (pid 16226) Use of struct sctp_assoc_value in delayed_ack socket option.
[  243.030797][T16226] Use struct sctp_sack_info instead
[  243.088861][T16234] lo speed is unknown, defaulting to 1000
[  243.113462][T16234] lo speed is unknown, defaulting to 1000
[  243.143176][T16238] netlink: 'syz.2.2856': attribute type 1 has an invalid length.
[  243.145840][T16238] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2856'.
[  243.428057][T16264] dvmrp8: entered allmulticast mode
[  243.441291][T16260] dvmrp8: left allmulticast mode
[  243.628756][T16293] lo speed is unknown, defaulting to 1000
[  243.633427][T16293] lo speed is unknown, defaulting to 1000
[  243.653307][T16295] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  243.656140][T16295] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  243.938404][T16327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.944965][   T51] lo speed is unknown, defaulting to 1000
[  243.946898][   T51] syz2: Port: 1 Link ACTIVE
[  243.967168][T16323] syzkaller0: entered promiscuous mode
[  243.972723][T16323] syzkaller0: entered allmulticast mode
[  243.977126][T16322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.981019][T16321] tipc: Resetting bearer <eth:syzkaller0>
[  243.997749][T16321] tipc: Disabling bearer <eth:syzkaller0>
[  244.304384][T16358] lo speed is unknown, defaulting to 1000
[  244.308222][T16358] lo speed is unknown, defaulting to 1000
[  244.502751][T16381] lo speed is unknown, defaulting to 1000
[  244.507757][T16381] lo speed is unknown, defaulting to 1000
[  244.579253][T16391] lo speed is unknown, defaulting to 1000
[  244.639917][T16391] lo speed is unknown, defaulting to 1000
[  244.680208][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.849965][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.052331][T16422] netlink: 'syz.2.2911': attribute type 1 has an invalid length.
[  245.064000][T16422] __nla_validate_parse: 11 callbacks suppressed
[  245.064015][T16422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2911'.
[  245.165870][T16427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'.
[  245.385220][T16438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2914'.
[  245.460558][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2914'.
[  245.603830][    T9] lo speed is unknown, defaulting to 1000
[  245.606056][    T9] syz1: Port: 1 Link ACTIVE
[  245.719241][T16470] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2925'.
[  245.792921][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2927'.
[  245.829371][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'.
[  245.839939][T16480] netlink: 'syz.2.2929': attribute type 1 has an invalid length.
[  245.856457][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'.
[  245.934374][T16489] lo speed is unknown, defaulting to 1000
[  245.944511][T16489] lo speed is unknown, defaulting to 1000
[  246.163702][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'.
[  246.249365][T16504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'.
[  246.256139][T16504] sctp: [Deprecated]: syz.2.2934 (pid 16504) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.256139][T16504] Use struct sctp_sack_info instead
[  246.449057][T16508] lo speed is unknown, defaulting to 1000
[  246.459227][T16508] lo speed is unknown, defaulting to 1000
[  246.866247][T16543] lo speed is unknown, defaulting to 1000
[  246.873195][T16540] lo speed is unknown, defaulting to 1000
[  246.877918][T16543] lo speed is unknown, defaulting to 1000
[  246.887547][T16540] lo speed is unknown, defaulting to 1000
[  247.378867][T16579] net_ratelimit: 7 callbacks suppressed
[  247.378888][T16579] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  247.541284][T16591] lo speed is unknown, defaulting to 1000
[  247.548847][T16591] lo speed is unknown, defaulting to 1000
[  247.795656][T16615] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  247.801848][T16615] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  247.911933][T16623] lo speed is unknown, defaulting to 1000
[  247.915173][T16623] lo speed is unknown, defaulting to 1000
[  247.917555][T16620] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  248.055304][T16648] lo speed is unknown, defaulting to 1000
[  248.058489][T16648] lo speed is unknown, defaulting to 1000
[  248.225636][T16660] lo speed is unknown, defaulting to 1000
[  248.229054][T16660] lo speed is unknown, defaulting to 1000
[  248.284206][T16667] ip6gre1: entered allmulticast mode
[  248.289919][T16667] validate_nla: 3 callbacks suppressed
[  248.289932][T16667] netlink: 'syz.2.2974': attribute type 1 has an invalid length.
[  248.365668][T16677] lo speed is unknown, defaulting to 1000
[  248.412100][T16677] lo speed is unknown, defaulting to 1000
[  248.455779][T16682] lo speed is unknown, defaulting to 1000
[  248.458492][T16682] lo speed is unknown, defaulting to 1000
[  248.482500][T16689] syzkaller1: entered promiscuous mode
[  248.484422][T16689] syzkaller1: entered allmulticast mode
[  248.612300][T16703] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  248.623687][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.759347][T16713] lo speed is unknown, defaulting to 1000
[  248.763235][T16713] lo speed is unknown, defaulting to 1000
[  248.907696][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.054396][T16741] netlink: 'syz.1.2994': attribute type 3 has an invalid length.
[  249.171953][T16751] lo speed is unknown, defaulting to 1000
[  249.175456][T16751] lo speed is unknown, defaulting to 1000
[  249.273706][T16758] lo speed is unknown, defaulting to 1000
[  249.276464][T16758] lo speed is unknown, defaulting to 1000
[  250.112769][T16805] __nla_validate_parse: 17 callbacks suppressed
[  250.112779][T16805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'.
[  250.153476][T16804] lo speed is unknown, defaulting to 1000
[  250.157675][T16804] lo speed is unknown, defaulting to 1000
[  250.314379][T16814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3014'.
[  250.375214][T16816] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  250.379949][T16817] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  250.399767][T16814] netlink: 'syz.1.3014': attribute type 8 has an invalid length.
[  250.413851][T16814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.543664][T16824] dvmrp1: entered allmulticast mode
[  250.556896][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'.
[  250.746371][T16830] netlink: 'syz.2.3018': attribute type 74 has an invalid length.
[  250.802105][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3019'.
[  250.931615][T16835] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.3020'.
[  250.941227][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3020'.
[  250.948615][T16835] netlink: 'syz.2.3020': attribute type 1 has an invalid length.
[  250.951998][T16835] netlink: 'syz.2.3020': attribute type 1 has an invalid length.
[  250.988441][T16837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3021'.
[  251.017175][T16839] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3022'.
[  251.050881][T16837] can: request_module (can-proto-5) failed.
[  251.058345][T16837] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3021'.
[  251.072073][T16842] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  251.180601][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.343056][T16857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3028'.
[  251.430945][T16864] can: request_module (can-proto-5) failed.
[  251.726571][T16874] netem: unknown loss type 12
[  251.734923][T16874] netem: change failed
[  251.794884][T16878] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  251.810851][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.003815][T16885] lo speed is unknown, defaulting to 1000
[  252.006806][T16885] lo speed is unknown, defaulting to 1000
[  252.249963][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.372267][T16896] lo speed is unknown, defaulting to 1000
[  252.376357][T16896] lo speed is unknown, defaulting to 1000
[  252.564263][T16901] lo speed is unknown, defaulting to 1000
[  252.567815][T16901] lo speed is unknown, defaulting to 1000
[  252.841221][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.914204][T16933] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  253.089413][T16950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.100493][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.231368][T16971] pimreg: entered allmulticast mode
[  253.287484][T16973] lo speed is unknown, defaulting to 1000
[  253.293887][T16973] lo speed is unknown, defaulting to 1000
[  253.520527][T16992] lo speed is unknown, defaulting to 1000
[  253.523171][T16992] lo speed is unknown, defaulting to 1000
[  254.080670][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.141566][T17009] netlink: 'syz.0.3071': attribute type 4 has an invalid length.
[  254.148693][    T9] lo speed is unknown, defaulting to 1000
[  254.151031][    T9] syz2: Port: 1 Link DOWN
[  254.228585][T17019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.246985][T17017] veth0_to_team: entered promiscuous mode
[  254.249712][T17017] veth0_to_team: entered allmulticast mode
[  254.254899][T17017] netdevsim netdevsim0 : renamed from netdevsim0
[  254.319317][T17027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.326202][   T10] lo speed is unknown, defaulting to 1000
[  254.328129][   T10] syz2: Port: 1 Link ACTIVE
[  254.435194][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.438493][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.462349][T17034] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.470429][T17034] bond0: (slave rose0): Enslaving as an active interface with an up link
[  254.479133][T17034] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  254.482791][T17034] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  254.772339][T17058] vlan2: entered promiscuous mode
[  254.774578][T17058] bridge0: entered promiscuous mode
[  255.233330][T17071] __nla_validate_parse: 47 callbacks suppressed
[  255.233341][T17071] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3084'.
[  255.694074][T17099] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  255.737571][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'.
[  255.766616][ T5314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.879686][ T5314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.461198][T17124] lo speed is unknown, defaulting to 1000
[  256.464058][T17124] lo speed is unknown, defaulting to 1000
[  256.625650][T17128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3100'.
[  256.643277][T17128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3100'.
[  256.748038][T17133] lo speed is unknown, defaulting to 1000
[  256.750899][T17133] lo speed is unknown, defaulting to 1000
[  256.938880][T17139] lo speed is unknown, defaulting to 1000
[  256.947724][T17139] lo speed is unknown, defaulting to 1000
[  257.626196][T17178] ip6gretap0: left promiscuous mode
[  257.637325][T17178] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.641678][T17178] 8021q: adding VLAN 0 to HW filter on device team0
[  257.645768][T17178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.706094][T17186] tun0: tun_chr_ioctl cmd 1074025675
[  257.715722][T17186] tun0: persist enabled
[  257.721068][T17186] tun0: tun_chr_ioctl cmd 1074025675
[  257.724453][T17186] tun0: persist disabled
[  257.793240][T17198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3116'.
[  258.055587][T17213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3119'.
[  258.259184][T17232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3124'.
[  258.484784][T17237] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  258.636192][T17241] netlink: 'syz.1.3126': attribute type 4 has an invalid length.
[  258.662295][ T5314] lo speed is unknown, defaulting to 1000
[  258.664826][ T5314] syz1: Port: 1 Link DOWN
[  258.718629][T17247] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  259.057977][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3135'.
[  259.137305][T17275] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  259.150340][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.230396][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.246952][T17289] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3140'.
[  259.569853][T17291] syzkaller1: entered allmulticast mode
[  259.691511][T17264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.784908][T17297] lo speed is unknown, defaulting to 1000
[  259.787666][T17297] lo speed is unknown, defaulting to 1000
[  259.897895][T17310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'.
[  260.315837][T17321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3149'.
[  260.320422][ T5845] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  260.322704][T17321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3149'.
[  260.362058][T17323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3150'.
[  260.407337][T17325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3151'.
[  260.449574][T17327] macsec0: mtu greater than device maximum
[  260.468896][T17326] delete_channel: no stack
[  260.614432][T17339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3156'.
[  260.619577][T17339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3156'.
[  260.624233][T17338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.892995][T17350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.096198][T17364] netlink: 424 bytes leftover after parsing attributes in process `syz.2.3163'.
[  261.242085][T17379] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  261.352507][T17390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.355458][T17390] syzkaller0: entered promiscuous mode
[  261.357270][T17390] syzkaller0: entered allmulticast mode
[  261.369270][T17390] tipc: Resetting bearer <eth:syzkaller0>
[  261.376991][T17389] tipc: Resetting bearer <eth:syzkaller0>
[  261.386805][T17389] tipc: Disabling bearer <eth:syzkaller0>
[  261.449056][T17394] veth1_macvtap: left promiscuous mode
[  261.502486][T17400] lo speed is unknown, defaulting to 1000
[  261.506987][T17400] lo speed is unknown, defaulting to 1000
[  261.546417][T17402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.572867][T17402] syzkaller0: entered promiscuous mode
[  261.574587][T17402] syzkaller0: entered allmulticast mode
[  261.576691][T17402] tipc: Resetting bearer <eth:syzkaller0>
[  261.590480][T17401] tipc: Resetting bearer <eth:syzkaller0>
[  262.347218][T17407] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3176'.
[  262.548530][T17401] tipc: Disabling bearer <eth:syzkaller0>
[  262.648259][T17417] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  262.736723][T17423] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  262.798848][T17428] syzkaller0: entered promiscuous mode
[  262.804770][T17428] syzkaller0: entered allmulticast mode
[  263.189610][T17434] netlink: 'syz.2.3184': attribute type 27 has an invalid length.
[  263.288188][T17438] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  263.850208][T17465] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  264.076742][T17470] lo speed is unknown, defaulting to 1000
[  264.083894][T17470] lo speed is unknown, defaulting to 1000
[  264.422972][T17478] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3194'.
[  264.583684][T17487] lo speed is unknown, defaulting to 1000
[  264.586434][T17487] lo speed is unknown, defaulting to 1000
[  264.747685][T17497] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  264.858667][T17502] lo speed is unknown, defaulting to 1000
[  264.862110][T17502] lo speed is unknown, defaulting to 1000
[  265.055596][T17523] lo speed is unknown, defaulting to 1000
[  265.058304][T17523] lo speed is unknown, defaulting to 1000
[  265.074007][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3209'.
[  265.168543][T17528] lo speed is unknown, defaulting to 1000
[  265.176105][T17528] lo speed is unknown, defaulting to 1000
[  265.363998][T17537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3213'.
[  266.579630][T17545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  266.941058][T17575] lo speed is unknown, defaulting to 1000
[  266.944059][T17575] lo speed is unknown, defaulting to 1000
[  267.071686][T17575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3219'.
[  267.324150][T17590] netlink: 'syz.1.3222': attribute type 10 has an invalid length.
[  267.331450][T17590] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  267.426612][T17599] netlink: 'syz.1.3224': attribute type 1 has an invalid length.
[  267.429271][T17599] netlink: 'syz.1.3224': attribute type 11 has an invalid length.
[  267.432109][T17599] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3224'.
[  267.532206][T17609] lo speed is unknown, defaulting to 1000
[  267.534958][T17609] lo speed is unknown, defaulting to 1000
[  267.653441][T17619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3229'.
[  267.842323][T17627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3232'.
[  267.972812][T17636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3234'.
[  268.029400][T17638] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  268.077186][T17640] netlink: 'syz.2.3236': attribute type 4 has an invalid length.
[  268.521495][T17649] netlink: 'syz.1.3239': attribute type 1 has an invalid length.
[  268.526428][T17649] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3239'.
[  268.533069][T17649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3239'.
[  268.580573][T17651] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3240'.
[  268.584280][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'.
[  268.676783][T17658] lo speed is unknown, defaulting to 1000
[  268.683361][T17658] lo speed is unknown, defaulting to 1000
[  268.878241][T17667] sctp: [Deprecated]: syz.1.3245 (pid 17667) Use of int in max_burst socket option.
[  268.878241][T17667] Use struct sctp_assoc_value instead
[  268.931551][T17669] bond0: entered promiscuous mode
[  268.933773][T17669] batadv_slave_0: entered promiscuous mode
[  268.937360][T17669] batadv0: entered promiscuous mode
[  268.940819][T17669] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  268.944442][T17669] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  268.947891][T17669] hsr0: entered allmulticast mode
[  268.950231][T17669] bond0: entered allmulticast mode
[  268.951997][T17669] batadv_slave_0: entered allmulticast mode
[  268.954113][T17669] batadv0: entered allmulticast mode
[  268.958041][T17669] bond0: left promiscuous mode
[  268.960064][T17669] batadv_slave_0: left promiscuous mode
[  268.962926][T17669] batadv0: left promiscuous mode
[  269.136023][T17675] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.235091][T17692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.556334][T17719] syzkaller1: entered promiscuous mode
[  269.558662][T17719] syzkaller1: entered allmulticast mode
[  269.674865][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.725834][T17736] lo speed is unknown, defaulting to 1000
[  269.728620][T17736] lo speed is unknown, defaulting to 1000
[  269.846713][T17748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.928748][T17761] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.944261][T17754] lo speed is unknown, defaulting to 1000
[  269.946979][T17754] lo speed is unknown, defaulting to 1000
[  270.181895][T17793] netlink: 'syz.1.3282': attribute type 12 has an invalid length.
[  270.216269][T17789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.223479][T17786] tipc: Resetting bearer <eth:syzkaller0>
[  270.730550][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.153728][T17786] tipc: Disabling bearer <eth:syzkaller0>
[  271.197782][T17803] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  271.212065][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.258968][T17806] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  271.293567][T17814] __nla_validate_parse: 16 callbacks suppressed
[  271.293578][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3286'.
[  271.339681][T17821] lo speed is unknown, defaulting to 1000
[  271.342242][T17821] lo speed is unknown, defaulting to 1000
[  271.426873][T17825] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3288'.
[  271.450850][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.454485][T17826] lo speed is unknown, defaulting to 1000
[  271.467132][T17826] lo speed is unknown, defaulting to 1000
[  271.615976][T17836] lo speed is unknown, defaulting to 1000
[  271.618594][T17836] lo speed is unknown, defaulting to 1000
[  271.624233][T17846] lo speed is unknown, defaulting to 1000
[  271.641203][T17846] lo speed is unknown, defaulting to 1000
[  271.813309][T17871] lo speed is unknown, defaulting to 1000
[  271.816031][T17871] lo speed is unknown, defaulting to 1000
[  271.977808][T17880] lo speed is unknown, defaulting to 1000
[  271.990253][T17880] lo speed is unknown, defaulting to 1000
[  272.155604][T17904] netlink: 'syz.1.3303': attribute type 1 has an invalid length.
[  272.173116][T17902] netlink: 'syz.0.3305': attribute type 1 has an invalid length.
[  272.176661][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3305'.
[  272.185967][T17902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3305'.
[  272.506840][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'.
[  272.675241][T17958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3313'.
[  272.767894][T17969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3315'.
[  272.831194][T17974] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3316'.
[  272.977506][T17982] lo speed is unknown, defaulting to 1000
[  272.982969][T17982] lo speed is unknown, defaulting to 1000
[  273.023739][T17992] netlink: 105 bytes leftover after parsing attributes in process `syz.0.3317'.
[  273.139938][T18004] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3320'.
[  273.283035][T18019] bond0: (slave batadv_slave_0): Releasing backup interface
[  273.286352][T18019] batadv_slave_0: left allmulticast mode
[  273.312737][T18019] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  273.318893][   T51] lo speed is unknown, defaulting to 1000
[  273.325719][   T51] syz1: Port: 1 Link ACTIVE
[  273.543271][T18058] netlink: 'syz.2.3334': attribute type 15 has an invalid length.
[  273.724401][T18074] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  274.165453][T18090] lo speed is unknown, defaulting to 1000
[  274.170060][T18090] lo speed is unknown, defaulting to 1000
[  274.339891][T18095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.366553][T18095] tipc: Disabling bearer <eth:syzkaller0>
[  274.474487][T18102] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  274.785420][T18129] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  274.853525][T18131] lo speed is unknown, defaulting to 1000
[  274.857795][T18131] lo speed is unknown, defaulting to 1000
[  275.338981][T18158] raw_sendmsg: syz.2.3361 forgot to set AF_INET. Fix it!
[  275.543991][T18177] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.654784][T18193] lo speed is unknown, defaulting to 1000
[  275.657961][T18193] lo speed is unknown, defaulting to 1000
[  275.785656][T18211] netlink: 'syz.2.3376': attribute type 7 has an invalid length.
[  276.030656][T18241] veth0_to_team: mtu less than device minimum
[  276.162043][T18252] netlink: 'syz.1.3389': attribute type 21 has an invalid length.
[  276.268374][T18264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.281241][T18266] lo speed is unknown, defaulting to 1000
[  276.284515][T18266] lo speed is unknown, defaulting to 1000
[  276.366610][T18274] __nla_validate_parse: 12 callbacks suppressed
[  276.366625][T18274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'.
[  276.842022][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.847448][T18281] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  276.915744][T18283] syzkaller0: entered promiscuous mode
[  276.922090][T18283] syzkaller0: entered allmulticast mode
[  276.938721][T18283] syzkaller0: mtu less than device minimum
[  277.261784][T18290] netlink: 'syz.2.3401': attribute type 10 has an invalid length.
[  277.271308][T18290] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3401'.
[  277.335730][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3402'.
[  277.339868][T18295] openvswitch: netlink: Missing key (keys=40, expected=100)
[  277.398552][T18300] lo speed is unknown, defaulting to 1000
[  277.400001][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.402722][T18300] lo speed is unknown, defaulting to 1000
[  277.589862][T18308] syzkaller1: entered promiscuous mode
[  277.592197][T18308] syzkaller1: entered allmulticast mode
[  277.758694][T18315] lo speed is unknown, defaulting to 1000
[  277.762009][T18315] lo speed is unknown, defaulting to 1000
[  277.825140][T18320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3410'.
[  277.866837][T18327] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3411'.
[  277.924635][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3413'.
[  277.950744][T18332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.953773][T18332] syzkaller0: entered promiscuous mode
[  277.956358][T18332] syzkaller0: entered allmulticast mode
[  277.961312][T18331] tipc: Resetting bearer <eth:syzkaller0>
[  277.975370][T18331] tipc: Disabling bearer <eth:syzkaller0>
[  278.087213][T18338] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3415'.
[  278.092647][T18338] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3415'.
[  278.116021][T18335] lo speed is unknown, defaulting to 1000
[  278.119028][T18338] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003
[  278.123707][T18335] lo speed is unknown, defaulting to 1000
[  278.143797][T18344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3414'.
[  278.268445][T18352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.285555][T18353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.292296][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3421'.
[  278.296627][T18359] netlink: 'syz.1.3421': attribute type 6 has an invalid length.
[  278.422836][T18370] lo speed is unknown, defaulting to 1000
[  278.432331][T18370] lo speed is unknown, defaulting to 1000
[  278.492205][T18382] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  278.541029][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.641553][T18394] netlink: 'syz.0.3430': attribute type 6 has an invalid length.
[  278.872586][T18405] lo speed is unknown, defaulting to 1000
[  278.875695][T18405] lo speed is unknown, defaulting to 1000
[  278.988829][T18412] lo speed is unknown, defaulting to 1000
[  278.993136][T18412] lo speed is unknown, defaulting to 1000
[  279.147697][T18418] lo speed is unknown, defaulting to 1000
[  279.158027][T18418] lo speed is unknown, defaulting to 1000
[  279.173273][T18420] netlink: 'syz.2.3436': attribute type 4 has an invalid length.
[  279.324301][T18435] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.496458][T18438] lo speed is unknown, defaulting to 1000
[  279.512440][T18438] lo speed is unknown, defaulting to 1000
[  279.612891][T18459] lo speed is unknown, defaulting to 1000
[  279.615633][T18459] lo speed is unknown, defaulting to 1000
[  279.685367][T18458] lo speed is unknown, defaulting to 1000
[  279.694373][T18458] lo speed is unknown, defaulting to 1000
[  280.618675][T18485] lo speed is unknown, defaulting to 1000
[  280.623038][T18485] lo speed is unknown, defaulting to 1000
[  280.702859][T18495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.705425][T18495] syzkaller0: entered promiscuous mode
[  280.707324][T18495] syzkaller0: entered allmulticast mode
[  280.764343][T18493] tipc: Resetting bearer <eth:syzkaller0>
[  280.774057][T18493] tipc: Disabling bearer <eth:syzkaller0>
[  280.841399][T18501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.845855][T18501] syzkaller0: entered promiscuous mode
[  280.847791][T18501] syzkaller0: entered allmulticast mode
[  280.860599][T18501] tipc: Resetting bearer <eth:syzkaller0>
[  280.940220][T18501] lo speed is unknown, defaulting to 1000
[  280.943886][T18501] lo speed is unknown, defaulting to 1000
[  281.014526][T18513] lo speed is unknown, defaulting to 1000
[  281.020024][T18513] lo speed is unknown, defaulting to 1000
[  281.045204][T18515] tipc: Resetting bearer <eth:syzkaller0>
[  281.060889][T18515] tipc: Disabling bearer <eth:syzkaller0>
[  281.386359][T18553] __nla_validate_parse: 9 callbacks suppressed
[  281.386373][T18553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3465'.
[  281.463300][T18553] lo speed is unknown, defaulting to 1000
[  281.471514][T18553] lo speed is unknown, defaulting to 1000
[  281.493004][T18560] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  281.535126][T18564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3467'.
[  281.699938][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3473'.
[  281.794937][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'.
[  282.022483][T18627] netlink: 'syz.0.3483': attribute type 4 has an invalid length.
[  282.032218][ T5873] lo speed is unknown, defaulting to 1000
[  282.034676][ T5873] syz2: Port: 1 Link DOWN
[  282.146881][T18633] IPVS: Unknown mcast interface: vcan0
[  282.174348][T18633] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3487'.
[  282.186266][T18633] batadv2: entered promiscuous mode
[  282.188178][T18633] batadv2: entered allmulticast mode
[  282.191626][ T5873] net_ratelimit: 13 callbacks suppressed
[  282.191634][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.239819][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'.
[  282.337614][T18638] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  282.343158][ T5873] lo speed is unknown, defaulting to 1000
[  282.346138][ T5873] syz2: Port: 1 Link ACTIVE
[  282.353520][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.430182][T18640] dvmrp0: entered allmulticast mode
[  282.443299][T18640] lo speed is unknown, defaulting to 1000
[  282.446093][T18640] lo speed is unknown, defaulting to 1000
[  282.569839][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.659599][T18650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.725243][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3493'.
[  282.731848][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'.
[  282.777029][T18652] lo speed is unknown, defaulting to 1000
[  282.780648][T18652] lo speed is unknown, defaulting to 1000
[  282.855758][T18661] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  282.962449][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'.
[  282.965417][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3501'.
[  283.087354][T18698] netlink: 'syz.2.3504': attribute type 1 has an invalid length.
[  283.112500][T18698] 8021q: adding VLAN 0 to HW filter on device bond4
[  283.129007][T18700] lo speed is unknown, defaulting to 1000
[  283.132644][T18700] lo speed is unknown, defaulting to 1000
[  283.181026][T18692] lo speed is unknown, defaulting to 1000
[  283.192566][T18703] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  283.198562][T18692] lo speed is unknown, defaulting to 1000
[  283.425522][T18722] lo speed is unknown, defaulting to 1000
[  283.428484][T18722] lo speed is unknown, defaulting to 1000
[  283.545660][T18729] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  283.552588][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.718864][T18735] sctp: [Deprecated]: syz.1.3514 (pid 18735) Use of struct sctp_assoc_value in delayed_ack socket option.
[  283.718864][T18735] Use struct sctp_sack_info instead
[  283.744371][T18734] sctp: [Deprecated]: syz.1.3514 (pid 18734) Use of struct sctp_assoc_value in delayed_ack socket option.
[  283.744371][T18734] Use struct sctp_sack_info instead
[  283.909289][T18747] netlink: 'syz.0.3517': attribute type 2 has an invalid length.
[  284.020401][T18753] lo speed is unknown, defaulting to 1000
[  284.032976][T18753] lo speed is unknown, defaulting to 1000
[  284.099773][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.228719][T18764] lo speed is unknown, defaulting to 1000
[  284.238192][T18764] lo speed is unknown, defaulting to 1000
[  284.284830][T18769] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.428172][T18781] lo speed is unknown, defaulting to 1000
[  284.431879][T18781] lo speed is unknown, defaulting to 1000
[  284.454896][T18785] lo speed is unknown, defaulting to 1000
[  284.460356][T18785] lo speed is unknown, defaulting to 1000
[  284.634159][T18801] netlink: 'syz.0.3533': attribute type 10 has an invalid length.
[  284.728091][T18806] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode
[  285.207597][T18847] lo speed is unknown, defaulting to 1000
[  285.228541][T18847] lo speed is unknown, defaulting to 1000
[  286.118316][T18889] netlink: 'syz.0.3554': attribute type 4 has an invalid length.
[  286.127230][   T10] lo speed is unknown, defaulting to 1000
[  286.129174][   T10] syz2: Port: 1 Link DOWN
[  286.230697][   T10] lo speed is unknown, defaulting to 1000
[  286.233220][   T10] syz2: Port: 1 Link ACTIVE
[  286.283398][T18903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.308648][T18903] syzkaller0: entered promiscuous mode
[  286.311392][T18903] syzkaller0: entered allmulticast mode
[  286.342567][T18904] tipc: Resetting bearer <eth:syzkaller0>
[  287.267240][T18904] tipc: Disabling bearer <eth:syzkaller0>
[  287.274093][T18908] netlink: 'syz.2.3558': attribute type 1 has an invalid length.
[  287.338678][T18914] net_ratelimit: 5 callbacks suppressed
[  287.338692][T18914] bond_slave_1: mtu less than device minimum
[  287.425802][T18926] __nla_validate_parse: 15 callbacks suppressed
[  287.425819][T18926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3565'.
[  287.647683][T18954] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  287.727126][T18962] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3573'.
[  287.744754][T18962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3573'.
[  287.856410][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3578'.
[  288.182111][T19014] lo speed is unknown, defaulting to 1000
[  288.185258][T19014] lo speed is unknown, defaulting to 1000
[  288.257314][T19018] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  288.503496][T19031] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  288.631411][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3592'.
[  288.654689][T19037] lo speed is unknown, defaulting to 1000
[  288.658385][T19037] lo speed is unknown, defaulting to 1000
[  288.786129][T19044] lo speed is unknown, defaulting to 1000
[  288.793808][T19044] lo speed is unknown, defaulting to 1000
[  288.950967][ T5314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.974631][T19056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.035721][T19058] lo speed is unknown, defaulting to 1000
[  289.047709][T19058] lo speed is unknown, defaulting to 1000
[  289.119874][ T5314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.147866][T19068] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3600'.
[  289.147911][T19067] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3600'.
[  289.356769][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3602'.
[  289.361752][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.441934][T19078] ipvlan0: mtu less than device minimum
[  289.445163][T19078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3604'.
[  289.450674][T19078] chnl_net:caif_netlink_parms(): no params data found
[  289.640639][T19087] lo speed is unknown, defaulting to 1000
[  289.644007][T19087] lo speed is unknown, defaulting to 1000
[  289.821816][T19102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3611'.
[  289.915474][T19104] lo speed is unknown, defaulting to 1000
[  289.918219][T19104] lo speed is unknown, defaulting to 1000
[  290.107321][T19123] lo speed is unknown, defaulting to 1000
[  290.111093][T19123] lo speed is unknown, defaulting to 1000
[  290.331912][T19137] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  290.410381][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.606977][T19149] lo speed is unknown, defaulting to 1000
[  290.612584][T19149] lo speed is unknown, defaulting to 1000
[  290.676308][T19162] netlink: 'syz.2.3631': attribute type 4 has an invalid length.
[  291.024029][T19187] syzkaller1: entered promiscuous mode
[  291.030392][T19187] syzkaller1: entered allmulticast mode
[  291.584283][T19222] netlink: 'syz.1.3649': attribute type 1 has an invalid length.
[  292.067480][T19253] lo speed is unknown, defaulting to 1000
[  292.071862][T19253] lo speed is unknown, defaulting to 1000
[  292.212475][T19265] netlink: 'syz.1.3661': attribute type 3 has an invalid length.
[  292.325692][T19253] netlink: 'syz.0.3657': attribute type 1 has an invalid length.
[  292.446158][T19283] lo speed is unknown, defaulting to 1000
[  292.453548][T19283] lo speed is unknown, defaulting to 1000
[  292.457052][T19285] lo speed is unknown, defaulting to 1000
[  292.489032][T19291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.489338][T19285] lo speed is unknown, defaulting to 1000
[  292.634956][T19303] __nla_validate_parse: 19 callbacks suppressed
[  292.634969][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3670'.
[  292.642230][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3669'.
[  292.654658][T19304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3670'.
[  292.736982][T19313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'.
[  292.746416][T19313] netlink: 'syz.0.3672': attribute type 1 has an invalid length.
[  292.819807][T19316] netlink: 'syz.0.3672': attribute type 2 has an invalid length.
[  292.829118][T19316] : entered promiscuous mode
[  292.841151][T19313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3672'.
[  292.845208][T19313] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  292.873185][T19318] net_ratelimit: 5 callbacks suppressed
[  292.873200][T19318] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  292.965907][T19322] lo speed is unknown, defaulting to 1000
[  292.971810][T19322] lo speed is unknown, defaulting to 1000
[  293.228785][T19341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3680'.
[  293.250834][T19343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3681'.
[  293.268579][T19343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3681'.
[  293.312076][T19351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3683'.
[  293.347552][T19348] lo speed is unknown, defaulting to 1000
[  293.356269][T19348] lo speed is unknown, defaulting to 1000
[  293.439565][T19357] lo: mtu less than device minimum
[  293.442724][T19357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3684'.
[  293.737110][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.824570][T19374] lo speed is unknown, defaulting to 1000
[  293.827453][T19374] lo speed is unknown, defaulting to 1000
[  293.924333][T19382] lo speed is unknown, defaulting to 1000
[  293.926933][T19382] lo speed is unknown, defaulting to 1000
[  294.315700][T19393] lo speed is unknown, defaulting to 1000
[  294.321276][T19393] lo speed is unknown, defaulting to 1000
[  294.421677][T19410] netlink: 'syz.2.3699': attribute type 1 has an invalid length.
[  294.424231][T19410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.452999][T19406] lo speed is unknown, defaulting to 1000
[  294.455954][T19406] lo speed is unknown, defaulting to 1000
[  294.651999][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.063390][T19447] lo speed is unknown, defaulting to 1000
[  295.066023][T19447] lo speed is unknown, defaulting to 1000
[  295.169022][T19459] netlink: 'syz.2.3713': attribute type 1 has an invalid length.
[  295.197595][T19459] lo speed is unknown, defaulting to 1000
[  295.202127][T19459] lo speed is unknown, defaulting to 1000
[  306.479729][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.050171][T19464] __nla_validate_parse: 11 callbacks suppressed
[  310.050188][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3714'.
[  310.056770][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3714'.
[  310.061771][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3714'.
[  310.274750][T19490] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[  310.283187][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.287242][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.293574][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.295620][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.297698][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.300159][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.302290][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.304372][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.306428][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.308489][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.314010][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.316179][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.323015][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.328706][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.337758][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.343572][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.347902][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.351890][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.354277][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.356525][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.358761][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.361755][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.363985][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.366194][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.368364][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.375053][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.377293][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.379402][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.382239][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.384393][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.386516][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.388627][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.392281][T19491] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  310.417072][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3722'.
[  310.594035][T19509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3727'.
[  310.674968][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3730'.
[  310.745805][T19521] lo speed is unknown, defaulting to 1000
[  310.749119][T19521] lo speed is unknown, defaulting to 1000
[  310.924023][T19533] lo speed is unknown, defaulting to 1000
[  310.926599][T19533] lo speed is unknown, defaulting to 1000
[  311.051306][T19545] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3736'.
[  311.062234][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'.
[  311.157387][T19549] lo speed is unknown, defaulting to 1000
[  311.169491][T19553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.178906][T19553] syzkaller0: entered promiscuous mode
[  311.187299][T19553] syzkaller0: entered allmulticast mode
[  311.191107][T19549] lo speed is unknown, defaulting to 1000
[  311.191166][T19550] lo speed is unknown, defaulting to 1000
[  311.211592][T19550] lo speed is unknown, defaulting to 1000
[  311.281083][T19553] tipc: Resetting bearer <eth:syzkaller0>
[  311.293995][T19552] tipc: Resetting bearer <eth:syzkaller0>
[  311.312818][T19552] tipc: Disabling bearer <eth:syzkaller0>
[  311.401850][T19576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3743'.
[  311.474569][T19573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3745'.
[  311.567521][T19582] lo speed is unknown, defaulting to 1000
[  311.577131][T19582] lo speed is unknown, defaulting to 1000
[  311.626909][T19587] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  311.719761][T19591] lo speed is unknown, defaulting to 1000
[  311.736492][T19591] lo speed is unknown, defaulting to 1000
[  311.815737][T19607] can: request_module (can-proto-0) failed.
[  311.873347][T19614] netlink: 'syz.2.3755': attribute type 4 has an invalid length.
[  312.023653][T19630] netlink: 'syz.0.3760': attribute type 4 has an invalid length.
[  312.036282][   T10] lo speed is unknown, defaulting to 1000
[  312.048590][   T10] syz2: Port: 1 Link DOWN
[  312.116151][   T33] audit: type=1800 audit(1756235557.244:4): pid=19630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3760" name="memory.events" dev="tmpfs" ino=6600 res=0 errno=0
[  312.126502][T19636] netlink: 'syz.1.3761': attribute type 1 has an invalid length.
[  312.139083][T19636] lo speed is unknown, defaulting to 1000
[  312.144298][T19636] lo speed is unknown, defaulting to 1000
[  312.252788][T19649] lo speed is unknown, defaulting to 1000
[  312.255375][T19649] lo speed is unknown, defaulting to 1000
[  312.324978][T19654] lo speed is unknown, defaulting to 1000
[  312.328112][T19654] lo speed is unknown, defaulting to 1000
[  312.462987][T19664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  312.685132][T19687] pim6reg1: entered promiscuous mode
[  312.693752][T19687] pim6reg1: entered allmulticast mode
[  313.171350][T19698] 1: renamed from 70 (while UP)
[  313.175848][T19698] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  313.494075][T19713] netlink: 'syz.1.3784': attribute type 1 has an invalid length.
[  313.701513][T19721] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  314.533040][T19729] lo speed is unknown, defaulting to 1000
[  314.535623][T19729] lo speed is unknown, defaulting to 1000
[  315.147191][T19791] __nla_validate_parse: 23 callbacks suppressed
[  315.147201][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'.
[  315.160535][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.203818][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'.
[  315.256481][T19805] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3808'.
[  315.275902][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.321221][T19807] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  315.593088][T19816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.596840][T19816] syzkaller0: entered promiscuous mode
[  315.598966][T19816] syzkaller0: entered allmulticast mode
[  315.621061][T19816] tipc: Resetting bearer <eth:syzkaller0>
[  315.681467][T19816] lo speed is unknown, defaulting to 1000
[  315.684320][T19816] lo speed is unknown, defaulting to 1000
[  315.762836][T19818] tipc: Resetting bearer <eth:syzkaller0>
[  315.801515][T19818] tipc: Disabling bearer <eth:syzkaller0>
[  316.067615][T19827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3815'.
[  316.141114][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.346905][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3823'.
[  316.350894][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.854526][T19888] lo speed is unknown, defaulting to 1000
[  316.857188][T19888] lo speed is unknown, defaulting to 1000
[  317.035244][T19891] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3832'.
[  317.085139][T19893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3833'.
[  317.123120][T19895] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3834'.
[  317.126690][T19895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3834'.
[  317.131204][T19895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3834'.
[  317.187864][T19906] lo speed is unknown, defaulting to 1000
[  317.190929][T19906] lo speed is unknown, defaulting to 1000
[  317.217168][T19908] pim6reg9: entered allmulticast mode
[  317.363048][T19920] bridge0: port 1(ipvlan2) entered blocking state
[  317.365274][T19920] bridge0: port 1(ipvlan2) entered disabled state
[  317.368330][T19920] ipvlan2: entered allmulticast mode
[  317.371048][T19920] bridge0: entered allmulticast mode
[  317.373960][T19920] ipvlan2: left allmulticast mode
[  317.375729][T19920] bridge0: left allmulticast mode
[  317.681053][T19949] lo speed is unknown, defaulting to 1000
[  317.683631][T19949] lo speed is unknown, defaulting to 1000
[  317.737471][T19953] netlink: 'syz.2.3852': attribute type 6 has an invalid length.
[  318.444652][T19950] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  318.714732][T20003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.785162][T20007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  318.793983][    T9] lo speed is unknown, defaulting to 1000
[  318.796220][    T9] syz2: Port: 1 Link ACTIVE
[  318.883593][T20020] macsec0: entered allmulticast mode
[  318.950056][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.974507][T20018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  319.000338][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.038069][T20029] netlink: 'syz.2.3874': attribute type 1 has an invalid length.
[  319.041750][T20029] netlink: 'syz.2.3874': attribute type 3 has an invalid length.
[  319.044413][T20029] NCSI netlink: No device for ifindex 246
[  319.137510][T20037] tap0: tun_chr_ioctl cmd 1074025677
[  319.140800][T20037] tap0: linktype set to 780
[  319.154731][T20037] netlink: 'syz.0.3877': attribute type 142 has an invalid length.
[  319.193819][T20039] netlink: 'syz.2.3878': attribute type 1 has an invalid length.
[  319.280021][T20045] lo speed is unknown, defaulting to 1000
[  319.283417][T20045] lo speed is unknown, defaulting to 1000
[  319.866577][T20086] lo speed is unknown, defaulting to 1000
[  319.869363][T20086] lo speed is unknown, defaulting to 1000
[  319.958187][T20089] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  320.133094][T20106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  320.270502][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.272460][T20120] __nla_validate_parse: 32 callbacks suppressed
[  320.272469][T20120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3900'.
[  320.318479][T20122] lo speed is unknown, defaulting to 1000
[  320.321833][T20122] lo speed is unknown, defaulting to 1000
[  320.346404][T20127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3903'.
[  320.350019][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3903'.
[  320.404162][T20133] lo speed is unknown, defaulting to 1000
[  320.407551][T20133] lo speed is unknown, defaulting to 1000
[  320.494432][T20142] lo speed is unknown, defaulting to 1000
[  320.498396][T20142] lo speed is unknown, defaulting to 1000
[  320.500989][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3908'.
[  320.504161][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3908'.
[  320.645507][T20153] lo speed is unknown, defaulting to 1000
[  320.651266][T20153] lo speed is unknown, defaulting to 1000
[  320.760974][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.770674][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'.
[  320.773780][T20163] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  320.778188][T20164] netlink: 'syz.1.3912': attribute type 2 has an invalid length.
[  320.961161][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'.
[  320.968132][T20181] netlink: 504 bytes leftover after parsing attributes in process `syz.2.3917'.
[  321.408053][T20210] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  321.442415][T20210] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  321.445300][T20210] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  321.656086][T20216] lo speed is unknown, defaulting to 1000
[  321.661739][T20216] lo speed is unknown, defaulting to 1000
[  322.198004][T20219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3925'.
[  322.201204][T20219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3925'.
[  322.285160][T20225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.288198][T20225] syzkaller0: entered promiscuous mode
[  322.295650][T20225] syzkaller0: entered allmulticast mode
[  322.319988][T20225] tipc: Resetting bearer <eth:syzkaller0>
[  322.396891][T20227] lo speed is unknown, defaulting to 1000
[  322.414865][T20229] tipc: Resetting bearer <eth:syzkaller0>
[  322.428479][T20229] tipc: Disabling bearer <eth:syzkaller0>
[  322.435412][T20227] lo speed is unknown, defaulting to 1000
[  322.711260][T20245] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  323.002432][T20259] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  323.159768][T20266] lo speed is unknown, defaulting to 1000
[  323.162378][T20266] lo speed is unknown, defaulting to 1000
[  323.312134][T20269] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  323.408091][T20269] bond0 (unregistering): Released all slaves
[  323.453437][T20279] netlink: 'syz.0.3941': attribute type 5 has an invalid length.
[  323.453444][T20280] netlink: 'syz.0.3941': attribute type 5 has an invalid length.
[  323.579851][T20287] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  323.604341][T20289] netlink: 'syz.0.3944': attribute type 16 has an invalid length.
[  323.606943][T20289] netlink: 'syz.0.3944': attribute type 17 has an invalid length.
[  323.823174][   T10] lo speed is unknown, defaulting to 1000
[  323.825167][   T10] syz2: Port: 1 Link DOWN
[  323.826686][ T5872] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0
[  323.829813][ T5872] netdevsim netdevsim0 : unset [1, 1] type 2 family 0 port 256 - 0
[  323.832930][ T5872] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.835827][ T5872] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  323.854671][ T5872] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.858134][ T5872] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  323.861702][ T5872] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.864672][ T5872] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  324.006977][T20325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.529368][T20396] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  325.569632][T20398] __nla_validate_parse: 15 callbacks suppressed
[  325.569642][T20398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3970'.
[  325.613436][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3971'.
[  325.616311][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3971'.
[  325.620694][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3971'.
[  325.624150][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3971'.
[  325.944326][T20434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3978'.
[  325.952499][   T33] audit: type=1800 audit(1756235571.084:5): pid=20436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3979" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=6731 res=0 errno=0
[  326.027724][T20439] lo speed is unknown, defaulting to 1000
[  326.142397][T20453] lo speed is unknown, defaulting to 1000
[  326.424403][T20474] lo speed is unknown, defaulting to 1000
[  326.677793][T20482] lo speed is unknown, defaulting to 1000
[  326.741881][T20490] lo speed is unknown, defaulting to 1000
[  326.802700][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'.
[  326.805650][T20496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3993'.
[  326.828609][T20496] bond0: entered promiscuous mode
[  326.832874][T20496] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.836754][T20499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3994'.
[  326.998956][T20508] bond0: left promiscuous mode
[  327.025976][T20508] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  327.179870][T20525] lo speed is unknown, defaulting to 1000
[  327.756363][T20538] lo speed is unknown, defaulting to 1000
[  327.786886][T20541] lo speed is unknown, defaulting to 1000
[  327.988833][T20561] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  328.098223][T20566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4011'.
[  328.284980][T20577] lo speed is unknown, defaulting to 1000
[  329.085192][T20649] veth0_virt_wifi: mtu less than device minimum
[  329.125542][T20651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  329.135758][T20652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  329.161787][T20656] lo speed is unknown, defaulting to 1000
[  329.221358][T20658] lo speed is unknown, defaulting to 1000
[  330.172087][T20719] lo speed is unknown, defaulting to 1000
[  330.331814][T20736] lo speed is unknown, defaulting to 1000
[  330.394253][T20743] netlink: 'syz.2.4061': attribute type 14 has an invalid length.
[  330.405362][T20743] netlink: 'syz.2.4061': attribute type 13 has an invalid length.
[  330.411862][T20743] netlink: 'syz.2.4061': attribute type 14 has an invalid length.
[  330.416277][T20743] netlink: 'syz.2.4061': attribute type 13 has an invalid length.
[  330.423775][T20743] netlink: 'syz.2.4061': attribute type 14 has an invalid length.
[  330.427214][T20743] netlink: 'syz.2.4061': attribute type 13 has an invalid length.
[  330.431937][T20743] netlink: 'syz.2.4061': attribute type 14 has an invalid length.
[  330.434750][T20743] netlink: 'syz.2.4061': attribute type 13 has an invalid length.
[  330.582304][T20763] __nla_validate_parse: 16 callbacks suppressed
[  330.582314][T20763] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4066'.
[  330.591837][T20763] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4066'.
[  330.596085][T20763] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4066'.
[  330.605123][T20763] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4066'.
[  330.614526][T20767] tun0: tun_chr_ioctl cmd 2148045848
[  330.617220][T20767] tun0: tun_chr_ioctl cmd 21731
Connection to localhost closed by remote host.
[  330.852000][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.856189][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  330.954570][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  330.957758][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  331.020327][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.023539][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  331.093883][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.097511][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  331.690638][   T13] bond0 (unregistering): Released all slaves
[  331.755782][   T13] bond1 (unregistering): Released all slaves
[  331.814699][   T13] bond2 (unregistering): Released all slaves
[  331.823111][   T13] bond3 (unregistering): Released all slaves
[  331.904626][   T13] tipc: Disabling bearer <udp:syz2>
[  331.910631][   T13] tipc: Left network mode
[  332.011702][   T13] hsr_slave_0: left promiscuous mode
[  332.028046][   T13] pimreg (unregistering): left allmulticast mode
[  332.689328][   T13] IPVS: stop unused estimator thread 0...
[  346.638006][    C0] ==================================================================
[  346.641272][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  346.644586][    C0] Write of size 8 at addr ffff888027237ab0 by task swapper/0/0
[  346.647709][    C0] 
[  346.648746][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  346.648762][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.648769][    C0] Call Trace:
[  346.648775][    C0]  <IRQ>
[  346.648781][    C0]  dump_stack_lvl+0x189/0x250
[  346.648798][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  346.648814][    C0]  ? rcu_is_watching+0x15/0xb0
[  346.648825][    C0]  ? __kasan_check_byte+0x12/0x40
[  346.648840][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.648852][    C0]  ? rcu_is_watching+0x15/0xb0
[  346.648863][    C0]  ? lock_release+0x4b/0x3e0
[  346.648880][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  346.648894][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  346.648908][    C0]  print_report+0xca/0x240
[  346.648920][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  346.648935][    C0]  kasan_report+0x118/0x150
[  346.648951][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  346.648969][    C0]  __xfrm_state_delete+0x696/0xca0
[  346.648987][    C0]  xfrm_timer_handler+0x18f/0xa00
[  346.649006][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  346.649020][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  346.649034][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.649047][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  346.649058][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  346.649072][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  346.649088][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  346.649102][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  346.649119][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  346.649130][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  346.649143][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  346.649156][    C0]  handle_softirqs+0x286/0x870
[  346.649167][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  346.649178][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  346.649190][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  346.649205][    C0]  __irq_exit_rcu+0xca/0x1f0
[  346.649216][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  346.649230][    C0]  irq_exit_rcu+0x9/0x30
[  346.649240][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  346.649254][    C0]  </IRQ>
[  346.649258][    C0]  <TASK>
[  346.649262][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  346.649275][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  346.649290][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  346.649301][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  346.649343][    C0] RAX: 824261bb8db8d200 RBX: ffffffff819683a8 RCX: 824261bb8db8d200
[  346.649352][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6a47 RDI: ffffffff8be33300
[  346.649361][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  346.649368][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa37e30
[  346.649375][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  346.649384][    C0]  ? do_idle+0x1e8/0x510
[  346.649399][    C0]  default_idle+0x13/0x20
[  346.649409][    C0]  default_idle_call+0x74/0xb0
[  346.649419][    C0]  do_idle+0x1e8/0x510
[  346.649431][    C0]  ? __pfx_do_idle+0x10/0x10
[  346.649446][    C0]  cpu_startup_entry+0x44/0x60
[  346.649457][    C0]  rest_init+0x2de/0x300
[  346.649469][    C0]  start_kernel+0x3a9/0x410
[  346.649483][    C0]  x86_64_start_reservations+0x24/0x30
[  346.649498][    C0]  x86_64_start_kernel+0x143/0x1c0
[  346.649518][    C0]  common_startup_64+0x13e/0x147
[  346.649536][    C0]  </TASK>
[  346.649539][    C0] 
[  346.774336][    C0] Allocated by task 19494:
[  346.775846][    C0]  kasan_save_track+0x3e/0x80
[  346.777602][    C0]  __kasan_slab_alloc+0x6c/0x80
[  346.779149][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  346.780883][    C0]  xfrm_state_alloc+0x24/0x2f0
[  346.782632][    C0]  __find_acq_core+0x8a7/0x1c00
[  346.784340][    C0]  xfrm_find_acq+0x78/0xa0
[  346.785738][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  346.787320][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  346.788928][    C0]  netlink_rcv_skb+0x208/0x470
[  346.790543][    C0]  xfrm_netlink_rcv+0x79/0x90
[  346.792051][    C0]  netlink_unicast+0x82f/0x9e0
[  346.793745][    C0]  netlink_sendmsg+0x805/0xb30
[  346.795226][    C0]  __sock_sendmsg+0x21c/0x270
[  346.796724][    C0]  ____sys_sendmsg+0x505/0x830
[  346.798243][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  346.799755][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  346.801370][    C0]  do_syscall_64+0xfa/0x3b0
[  346.802827][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.804689][    C0] 
[  346.805496][    C0] Freed by task 9:
[  346.806720][    C0]  kasan_save_track+0x3e/0x80
[  346.808242][    C0]  kasan_save_free_info+0x46/0x50
[  346.809852][    C0]  __kasan_slab_free+0x5b/0x80
[  346.811614][    C0]  kmem_cache_free+0x18f/0x400
[  346.813132][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  346.814722][    C0]  process_scheduled_works+0xae1/0x17b0
[  346.816493][    C0]  worker_thread+0x8a0/0xda0
[  346.817964][    C0]  kthread+0x711/0x8a0
[  346.819393][    C0]  ret_from_fork+0x3fc/0x770
[  346.821031][    C0]  ret_from_fork_asm+0x1a/0x30
[  346.822690][    C0] 
[  346.823597][    C0] The buggy address belongs to the object at ffff888027237a80
[  346.823597][    C0]  which belongs to the cache xfrm_state of size 928
[  346.828111][    C0] The buggy address is located 48 bytes inside of
[  346.828111][    C0]  freed 928-byte region [ffff888027237a80, ffff888027237e20)
[  346.832489][    C0] 
[  346.833282][    C0] The buggy address belongs to the physical page:
[  346.835541][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027234d80 pfn:0x27234
[  346.838844][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  346.841707][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  346.844115][    C0] page_type: f5(slab)
[  346.845567][    C0] raw: 00fff00000000040 ffff88801bfa7c80 dead000000000122 0000000000000000
[  346.848285][    C0] raw: ffff888027234d80 00000000800e000d 00000000f5000000 0000000000000000
[  346.851097][    C0] head: 00fff00000000040 ffff88801bfa7c80 dead000000000122 0000000000000000
[  346.853995][    C0] head: ffff888027234d80 00000000800e000d 00000000f5000000 0000000000000000
[  346.856738][    C0] head: 00fff00000000002 ffffea00009c8d01 00000000ffffffff 00000000ffffffff
[  346.859495][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  346.862457][    C0] page dumped because: kasan: bad access detected
[  346.864491][    C0] page_owner tracks the page as allocated
[  346.866321][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6115, tgid 6113 (syz.1.57), ts 59436452202, free_ts 59338942029
[  346.872247][    C0]  post_alloc_hook+0x240/0x2a0
[  346.873780][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  346.875729][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  346.877651][    C0]  alloc_pages_mpol+0x232/0x4a0
[  346.879225][    C0]  allocate_slab+0x8a/0x370
[  346.880810][    C0]  ___slab_alloc+0xbeb/0x1410
[  346.882321][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  346.884012][    C0]  xfrm_state_alloc+0x24/0x2f0
[  346.885690][    C0]  xfrm_add_sa+0x17d1/0x4070
[  346.887180][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  346.888736][    C0]  netlink_rcv_skb+0x208/0x470
[  346.890299][    C0]  xfrm_netlink_rcv+0x79/0x90
[  346.892214][    C0]  netlink_unicast+0x82f/0x9e0
[  346.893755][    C0]  netlink_sendmsg+0x805/0xb30
[  346.895270][    C0]  __sock_sendmsg+0x21c/0x270
[  346.896828][    C0]  ____sys_sendmsg+0x505/0x830
[  346.898372][    C0] page last free pid 6102 tgid 6102 stack trace:
[  346.900778][    C0]  __free_frozen_pages+0xbc4/0xd30
[  346.902454][    C0]  stack_depot_save_flags+0x436/0x860
[  346.904117][    C0]  kasan_save_track+0x4f/0x80
[  346.905618][    C0]  __kasan_kmalloc+0x93/0xb0
[  346.907086][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  346.908750][    C0]  __request_module+0x2b5/0x5e0
[  346.910354][    C0]  crypto_alg_mod_lookup+0xeb/0x5f0
[  346.912068][    C0]  crypto_grab_spawn+0x7d/0x390
[  346.913599][    C0]  aead_geniv_alloc+0x12c/0x600
[  346.915127][    C0]  echainiv_aead_create+0x22/0x1d0
[  346.916722][    C0]  cryptomgr_probe+0x86/0x220
[  346.918197][    C0]  kthread+0x711/0x8a0
[  346.919623][    C0]  ret_from_fork+0x3fc/0x770
[  346.921420][    C0]  ret_from_fork_asm+0x1a/0x30
[  346.923111][    C0] 
[  346.923939][    C0] Memory state around the buggy address:
[  346.925817][    C0]  ffff888027237980: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  346.928827][    C0]  ffff888027237a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  346.931696][    C0] >ffff888027237a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  346.934383][    C0]                                      ^
[  346.936333][    C0]  ffff888027237b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  346.939173][    C0]  ffff888027237b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  346.942145][    C0] ==================================================================
[  346.945101][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  346.947676][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  346.950582][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.954275][    C0] Call Trace:
[  346.955414][    C0]  <IRQ>
[  346.956498][    C0]  dump_stack_lvl+0x99/0x250
[  346.958213][    C0]  ? __asan_memcpy+0x40/0x70
[  346.960071][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.962133][    C0]  ? __pfx__printk+0x10/0x10
[  346.963652][    C0]  vpanic+0x281/0x750
[  346.965113][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  346.967172][    C0]  ? __pfx_vpanic+0x10/0x10
[  346.968867][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  346.971254][    C0]  panic+0xb9/0xc0
[  346.972728][    C0]  ? __pfx_panic+0x10/0x10
[  346.974381][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  346.976612][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  346.978731][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  346.980480][    C0]  check_panic_on_warn+0x89/0xb0
[  346.982274][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  346.984173][    C0]  end_report+0x78/0x160
[  346.985764][    C0]  kasan_report+0x129/0x150
[  346.987385][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  346.989121][    C0]  __xfrm_state_delete+0x696/0xca0
[  346.990853][    C0]  xfrm_timer_handler+0x18f/0xa00
[  346.992771][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  346.994932][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  346.997279][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.999477][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  347.001970][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  347.004658][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  347.007062][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  347.009378][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  347.011574][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  347.014049][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  347.016443][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  347.018627][    C0]  handle_softirqs+0x286/0x870
[  347.020675][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  347.022695][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  347.024854][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  347.026990][    C0]  __irq_exit_rcu+0xca/0x1f0
[  347.028931][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  347.031087][    C0]  irq_exit_rcu+0x9/0x30
[  347.032997][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  347.035255][    C0]  </IRQ>
[  347.036595][    C0]  <TASK>
[  347.037806][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  347.040334][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  347.042773][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 c6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  347.050693][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  347.053190][    C0] RAX: 824261bb8db8d200 RBX: ffffffff819683a8 RCX: 824261bb8db8d200
[  347.056465][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6a47 RDI: ffffffff8be33300
[  347.059759][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  347.063044][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa37e30
[  347.066502][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  347.069734][    C0]  ? do_idle+0x1e8/0x510
[  347.071540][    C0]  default_idle+0x13/0x20
[  347.073347][    C0]  default_idle_call+0x74/0xb0
[  347.075422][    C0]  do_idle+0x1e8/0x510
[  347.077068][    C0]  ? __pfx_do_idle+0x10/0x10
[  347.079056][    C0]  cpu_startup_entry+0x44/0x60
[  347.081102][    C0]  rest_init+0x2de/0x300
[  347.082941][    C0]  start_kernel+0x3a9/0x410
[  347.084828][    C0]  x86_64_start_reservations+0x24/0x30
[  347.087071][    C0]  x86_64_start_kernel+0x143/0x1c0
[  347.089169][    C0]  common_startup_64+0x13e/0x147
[  347.091242][    C0]  </TASK>
[  347.093369][    C0] Kernel Offset: disabled
[  347.095179][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:13:05  Registers:
info registers vcpu 0

CPU#0
RAX=824261bb8db8d200 RBX=ffffffff819683a8 RCX=824261bb8db8d200 RDX=0000000000000001
RSI=ffffffff8d9b6a47 RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7963f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f433d1264a0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=53e6cc3ed11b1c00 RBX=ffffffff819683a8 RCX=53e6cc3ed11b1c00 RDX=0000000000000001
RSI=ffffffff8d9b6a47 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7963f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2772ad CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001756db29 0000000000000011 XMM01=000030796d6d7564 000055824a636658
XMM02=0100ffffffffffff 0101000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0200000000000000 00000000000002ff
XMM06=0200000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
