last executing test programs:

1.749042048s ago: executing program 0 (id=4306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r5, r5, 0xd, 0x2, &(0x7f00000009c0)="1600", 0x9, 0x1, 0x15c2, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'})
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080))

1.190543383s ago: executing program 2 (id=4313):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r0=>0x0, &(0x7f00000002c0)=0x4)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, <r3=>0x0, 0x0}}, 0x10) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r4, 0x0, 0x10000) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1000}}, &(0x7f0000000040)='GPL\x00', 0x2c, 0xc4, &(0x7f0000000180)=""/196, 0x41100, 0x1, '\x00', r0, @fallback=0x17, r1, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x0, 0x8}, 0x10, r3, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000003c0)=[{0x5, 0x1, 0x7, 0x2}, {0x0, 0x2, 0x6, 0xc}, {0x4, 0x4, 0xe, 0x2}, {0x4, 0x3, 0xb, 0x8}, {0x2, 0x5, 0x1, 0x8}, {0x5, 0x5, 0x2, 0xb}], 0x10, 0xab}, 0x94) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0)

880.452168ms ago: executing program 0 (id=4314):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x309082, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(0x3)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0))
close(r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendfile(r3, r3, &(0x7f0000000000)=0xb35, 0x7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x309082, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
close(0x3) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0)) (async)
close(r1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
sendfile(r3, r3, &(0x7f0000000000)=0xb35, 0x7) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
close(r4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) (async)

729.338771ms ago: executing program 0 (id=4315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88)
setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000003c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
r2 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000400"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0)

650.59918ms ago: executing program 1 (id=4316):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x70, 0x110, 0xe, "d4d79c6292c26fb6bed8c5a2bc7ac0edef1903e0446df28d66dc80d07b3257862f627ea9c2d919e3ed9c368e1d996da0d1b0ac511ed746b47c185315cfbcb2f706c40a6ae01609300569fc1d447e3e66a26aa96df3bc4cfd77ea0c69"}, {0x38, 0x110, 0xe, "d39665d6f58649b1d1369a8d3741350bcc6175769d87e32400110000000000000000"}], 0xa8}, 0x0)

649.843091ms ago: executing program 0 (id=4317):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r3=>0x0, 0x4, 0x5, 0x10, 0x6a2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x738, 0x40, 0x1fb0, 0x8001}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x5, <r5=>0x0}, 0x8)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x34, 0x81, 0x7, 0x8880, 0x1, 0x299, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0xfffffff9, 0x3}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xeb0, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4   \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%+9llu \x00'}, 0x20)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x18)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1b, 0x9, 0x3, 0x6, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x26, &(0x7f0000000200)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26a0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}], &(0x7f0000000340)='GPL\x00', 0x14, 0x3d, &(0x7f0000000380)=""/61, 0x41000, 0x8195c43d49000a2e, '\x00', r3, @lirc_mode2=0x10, r4, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x40, 0x7477c3f4}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[r6, r7, r8, r9, r10, 0xffffffffffffffff, r11, r12, r13, r14], 0x0, 0x10, 0x1}, 0x94)
r16 = accept4$llc(0xffffffffffffffff, &(0x7f0000000b80)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000bc0)=0x10, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000c00)={'vxcan1\x00', <r17=>0x0})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000c80)={0x4, &(0x7f0000000c40)=[{0x1, 0x4, 0xf, 0x8}, {0x2, 0x2, 0x6}, {0x5, 0x8, 0x5}, {0x2, 0x86, 0x3, 0xb}]})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x20004004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e00)=@can_delroute={0x1a0, 0x19, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x3}, [@CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "46664da388b45ff3"}, 0x1}}, @CGW_LIM_HOPS={0x5, 0xd, 0x4}, @CGW_SRC_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "d45b079bb4419dbc"}, 0x4}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "b06e22b7dc4705e7"}, 0x6}}, @CGW_CS_CRC8={0x11e, 0x6, {0x33, 0xd, 0x3e, 0x4, 0x9, "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", 0x1, "3a7e52c75e112cf6fb1bc34416c618cac9da450c"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24084048}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r15, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], <r19=>0x0, 0x85, &(0x7f0000001300)=[{}], 0x8, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0xc, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10)
r20 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0xc, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51d9}, [@exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f00000010c0)='GPL\x00', 0xfffffff3, 0x98, &(0x7f0000001100)=""/152, 0x41000, 0x10, '\x00', r3, @fallback=0x2d, r4, 0x8, &(0x7f00000011c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001200)={0x0, 0xc, 0x4, 0x819d}, 0x10, r19, r15, 0x3, &(0x7f0000001540)=[r10, r13], &(0x7f0000001580)=[{0x0, 0x5, 0x2, 0x7}, {0x3, 0x5, 0xb, 0x9}, {0x4, 0x5, 0x8, 0x1}], 0x10, 0xffffffff}, 0x94)
socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x4c0de18adec611d6, 0x12, &(0x7f0000001680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, @map_val={0x18, 0x1, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0x1808}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @generic={0x4, 0xa, 0x8, 0x1800, 0x8}], &(0x7f0000001740)='GPL\x00', 0x5, 0x9e, &(0x7f0000001780)=""/158, 0x41000, 0x58, '\x00', r17, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001880)={0x4, 0xe, 0x3, 0x3}, 0x10, r19, r20, 0x4, &(0x7f00000018c0)=[r9, 0x1, r7, r7, r0, r13, r2, r12, r0], &(0x7f0000001900)=[{0x5, 0x4, 0x9, 0x3}, {0x2, 0x4, 0xb, 0xc}, {0x5, 0x4, 0x1, 0x9}, {0x3, 0x2, 0x3, 0x4}], 0x10, 0x1}, 0x94)
r21 = socket$nl_generic(0x10, 0x3, 0x10)
r22 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r21, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x3c, r22, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x4, 0x401, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000041)
getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001b40), &(0x7f0000001b80)=0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)=@gettfilter={0x54, 0x2e, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r18, {0x5, 0xd}, {0x4}, {0xffeb, 0x7}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x80)

547.357797ms ago: executing program 1 (id=4318):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket(0x28, 0x5, 0x0)
r3 = epoll_create(0x3ff)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000005})
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r9}, 0x10)
r10 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x7ffffffe, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x569)
r13 = socket$inet6(0xa, 0x3, 0x8000000003c)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
connect$inet6(r13, &(0x7f0000000a40)={0xa, 0x4e24, 0x7ffd, @empty, 0x3}, 0x1c)
sendmsg(r13, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

546.064041ms ago: executing program 0 (id=4319):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
r3 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a1e1963b000000", @ANYRES16=r5, @ANYBLOB="000029bd7000fddbdf25070000000400cc00080005000100000005005300000000000a00180003030303030300000400cc00"], 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x80) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000001600010000000000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t'], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async)
sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r6, 0x1, 0x9, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="03000000", @ANYRES16=r6, @ANYBLOB="00012dbd7000fbdbdf250f000000580006804200040067636d28616573290000000000000000000000000000000000000000000000001a0000007db62fe8a45a69072be74e3d154b2e8931f4f31e1b043db795f6000008000600ffffff7f0400050004000500"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) (async)
sendto$inet6(r2, &(0x7f0000000280)="3ac4f346136a09ae1c", 0x9, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) (rerun: 64)
shutdown(r2, 0x1)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x140, 0x282a2}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x10, 0x7, 0x3, 0x4, {{0x6, 0x4, 0x3, 0x7, 0x18, 0x65, 0x0, 0x3, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}})

545.622677ms ago: executing program 2 (id=4320):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r2=>0x0}) (async, rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r2, @ANYBLOB="80008f0b0a000200aac9aaaaaaaa0000060005"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) (async)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r6, @ANYRESDEC=0x0], 0x28}}, 0x4048001)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
mmap(&(0x7f00004a1000/0x3000)=nil, 0x3000, 0x300000c, 0x11, r0, 0x631ea000) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r12, 0xb4807000) (async)
ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

448.750622ms ago: executing program 0 (id=4321):
close(0xffffffffffffffff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000002000000040000000208000000000000", @ANYRES16=r0, @ANYBLOB="00000000001c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20)
close(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r3)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0104000d00008c8a00000100000005000d00000000000800020000000000080001003fee"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3, 0x600}, 0x21)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x9, 0x22, 0x1, @mcast1, @empty, 0x7, 0x28, 0x6, 0x1}})
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000040)=0x8)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000480)={0x81, 0x5, 0xe, 0x7f, r9}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000080)="7926a3826327f36110847ac4454609f59ed474699fc071a158d23cd0ee3f6b1053b2b97e2c", 0x7, 0x1, 0x4}, 0x20)
close(0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cffeb849b4f"})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000800000002000000df6af032df86f9a7af94d929f044"], 0x0, 0x26}, 0x20)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}], 0x10)
setsockopt(r11, 0x84, 0x14, &(0x7f0000000040)="020000000d80ffff", 0x8)

380.534411ms ago: executing program 2 (id=4322):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4099, 0x1003}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$inet(0x2, 0x3, 0x8)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept4$phonet_pipe(r4, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x6}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf250300000028"], 0x113c}, 0x1, 0x0, 0x0, 0x40080}, 0x8084)
close(r1)
bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1c, 0xb}, {0xfff2, 0x4}, {0x10, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10ffff}, @TCA_RATE={0x6, 0x5, {0x0, 0x22}}]}, 0x3c}}, 0x1)
connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

323.262602ms ago: executing program 1 (id=4323):
r0 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000100)="61cd0b913add761691d5427e985d2073f8ae350de54fe0612d5f01f447c1f3c639b0a937c96b8b633912e2419c5c2de1d16c7a618741668a013a3e7202316a8548a0e94e", &(0x7f0000000700)=""/4096}, 0x20)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r4, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
socket$inet6_tcp(0xa, 0x1, 0x0)

320.313811ms ago: executing program 1 (id=4324):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x200040b4)
sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000000c0)={0x0, 0xf7})
sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r10, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x40}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

260.057094ms ago: executing program 2 (id=4325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1}}, @CTA_NAT_PROTO={0x4}]}]}, 0x74}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x51}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

189.709193ms ago: executing program 2 (id=4326):
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="71050501ea020606847efd0930ea56ccf61cab1d033e089901eb"], 0x1a) (async)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="71050501ea020606847efd0930ea56ccf61cab1d033e089901eb"], 0x1a)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) (async)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket(0x11, 0x800000003, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) (async)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28)

189.047217ms ago: executing program 1 (id=4327):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r1 = socket$inet6(0xa, 0x80003, 0xff)
close(r1)
socket$netlink(0x10, 0x3, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000dc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, &(0x7f0000000040)=0xfffffffffffffffe, r3, 0x0, 0xb, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18)
gettid()

812.445µs ago: executing program 1 (id=4328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004f80)={'wlan0\x00', &(0x7f0000004f40)=@ethtool_gfeatures})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000080)=ANY=[@ANYBLOB="8400e3185b2a1310a900c9", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25420000000e008e006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x84}}, 0x804)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004f80)={'wlan0\x00', &(0x7f0000004f40)=@ethtool_gfeatures}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000080)=ANY=[@ANYBLOB="8400e3185b2a1310a900c9", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25420000000e008e006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0x84}}, 0x804) (async)

0s ago: executing program 2 (id=4329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x888c0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x3, 0x1, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0xd0c8}}}, 0x3a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfffffffffffffea2)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000009640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8810)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$caif_seqpacket(0x25, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000, 0x2, 0x407, 0x400000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000000)={0x7ff, 0x0, 0x8, 0x0, 0x1000, 0x0, 0xfffffffffffffffe, 0x7f}, 0x0, 0x0, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x4c84c000)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c37900000000000fff0058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x6, {{0xa, 0x4e22, 0xb935, @private0, 0x9}}}, 0x88)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r6, 0x89e2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'})

kernel console output (not intermixed with test programs):

[1, 0] type 2 family 0 port 6081 - 0
[  179.316166][T11821] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.319429][T11821] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.610479][T11845] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  179.904165][T11872] netlink: 'syz.1.1754': attribute type 12 has an invalid length.
[  180.181033][T11901] netlink: 'syz.0.1761': attribute type 10 has an invalid length.
[  180.260360][T11905] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 56091 - 0
[  180.263998][T11905] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 56091 - 0
[  180.267625][T11905] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 56091 - 0
[  180.275295][T11905] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 56091 - 0
[  180.279064][T11905] geneve4: entered promiscuous mode
[  180.281275][T11905] geneve4: entered allmulticast mode
[  180.367497][T11909] xt_CT: No such helper "snmp"
[  180.406998][T11915] netlink: 'syz.0.1767': attribute type 12 has an invalid length.
[  180.498080][T11916] netlink: 'syz.1.1766': attribute type 3 has an invalid length.
[  180.500536][T11916] netlink: 'syz.1.1766': attribute type 2 has an invalid length.
[  180.502891][T11916] netlink: 'syz.1.1766': attribute type 2 has an invalid length.
[  181.498860][T11922] vlan5: entered allmulticast mode
[  181.505345][T11922] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  181.612571][T11931] macsec4: entered promiscuous mode
[  181.693756][T11937] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  182.428355][T11989] netlink: 'syz.1.1792': attribute type 1 has an invalid length.
[  182.432712][T11989] C: renamed from team_slave_0
[  182.930377][T12000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.942469][T12000] syzkaller0: entered promiscuous mode
[  182.944697][T12000] syzkaller0: entered allmulticast mode
[  182.961218][T12000] tipc: Resetting bearer <eth:syzkaller0>
[  182.978615][T11996] tipc: Resetting bearer <eth:syzkaller0>
[  182.989098][T11996] tipc: Disabling bearer <eth:syzkaller0>
[  183.372059][T12022] 8021q: VLANs not supported on gre0
[  183.954757][T12054] __nla_validate_parse: 29 callbacks suppressed
[  183.954775][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1813'.
[  183.973540][T12054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'.
[  183.982817][T12054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1813'.
[  184.064019][T12060] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  184.082215][T12060] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  184.374131][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'.
[  184.441733][T12092] gretap0: entered promiscuous mode
[  184.449475][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'.
[  184.675877][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'.
[  185.133286][T12130] xt_l2tp: v2 sid > 0xffff: 4294901760
[  185.671434][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'.
[  185.730354][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'.
[  186.166315][T12178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1851'.
[  186.221870][T12187] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1855'.
[  186.618205][T12208] IPv6: sit1: Disabled Multicast RS
[  186.622797][T12208] sit1: entered allmulticast mode
[  187.785902][T12253] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  187.850393][T12258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.031456][T12264] gre2: entered promiscuous mode
[  188.712672][T12317] netlink: 'syz.1.1895': attribute type 12 has an invalid length.
[  189.039929][T12329] __nla_validate_parse: 12 callbacks suppressed
[  189.039947][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'.
[  189.162565][T12334] veth0: entered promiscuous mode
[  189.204667][T12334] veth0: left promiscuous mode
[  189.249418][T12337] tipc: MTU too low for tipc bearer
[  189.569965][T12352] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  189.684019][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'.
[  189.691486][T12355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1907'.
[  189.696597][T12355] netlink: 'syz.2.1907': attribute type 10 has an invalid length.
[  189.707370][T12355] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  189.709750][T12355] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  189.721398][T12354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.759286][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'.
[  189.864216][T12373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1914'.
[  189.930755][T12380] netlink: 'syz.1.1916': attribute type 5 has an invalid length.
[  189.986833][T12389] set match dimension is over the limit!
[  189.991274][T12389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.994749][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.184003][T12398] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1922'.
[  190.254181][T12400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'.
[  190.349199][T12408] netlink: 'syz.0.1925': attribute type 11 has an invalid length.
[  190.351768][T12408] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1925'.
[  190.598520][T12418] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  190.646434][T12429] netlink: 'syz.1.1933': attribute type 1 has an invalid length.
[  190.785255][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  190.847954][T12429] 8021q: adding VLAN 0 to HW filter on device bond3
[  190.877318][T12434] bond3: (slave gretap3): making interface the new active one
[  190.880811][T12434] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  190.965376][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1935'.
[  191.100163][T12443] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  191.141290][T12448] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1937'.
[  191.224018][T12458] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  191.242229][T12455] 8021q: VLANs not supported on nlmon0
[  191.397414][T12464] netlink: 'syz.1.1941': attribute type 21 has an invalid length.
[  191.632907][T12482] pimreg: left allmulticast mode
[  191.654614][T12484] openvswitch: netlink: IP tunnel TTL not specified.
[  191.781151][T12486] 8021q: VLANs not supported on gre0
[  191.841361][T12498] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.844052][T12498] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.859922][T12498] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.862633][T12498] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.866000][T12498] geneve3: entered promiscuous mode
[  192.073427][T12520] 8021q: VLANs not supported on gre0
[  192.152621][T12534] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  192.160171][T12530] unsupported nla_type 52263
[  192.289995][T12547] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  192.318705][T12552] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  192.322611][T12547] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  192.451593][T12566] delete_channel: no stack
[  192.536576][T12570] netlink: 'syz.0.1980': attribute type 1 has an invalid length.
[  192.794900][T12582] bond9: (slave bridge15): Enslaving as an active interface with an up link
[  192.911953][T12588] netlink: 'syz.0.1984': attribute type 21 has an invalid length.
[  192.912725][T12589] netlink: 'syz.0.1984': attribute type 21 has an invalid length.
[  192.917415][T12588] netlink: 'syz.0.1984': attribute type 5 has an invalid length.
[  192.967593][T12591] sctp: [Deprecated]: syz.0.1985 (pid 12591) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.967593][T12591] Use struct sctp_sack_info instead
[  193.146595][T12594] 8021q: VLANs not supported on gre0
[  193.382015][T12607] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002
[  193.542201][T12618] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  193.551230][T12622] bond2: (slave bridge1): Releasing backup interface
[  193.554213][T12624] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  193.564222][T12622] bond3: (slave gretap3): Releasing active interface
[  193.781560][T12635] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  193.792171][T12635] macsec0: entered allmulticast mode
[  193.800969][T12635] veth1_macvtap: entered allmulticast mode
[  193.805597][T12635] macsec0: left allmulticast mode
[  193.807675][T12635] veth1_macvtap: left allmulticast mode
[  193.827135][T12643] sctp: [Deprecated]: syz.2.2004 (pid 12643) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.827135][T12643] Use struct sctp_sack_info instead
[  193.835483][T12641] validate_nla: 3 callbacks suppressed
[  193.835499][T12641] netlink: 'syz.1.2003': attribute type 2 has an invalid length.
[  194.053267][T12662] __nla_validate_parse: 21 callbacks suppressed
[  194.053283][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2011'.
[  194.067450][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2011'.
[  194.384954][T12688] ip6_vti0: Master is either lo or non-ether device
[  194.631070][T12701] macsec3: entered allmulticast mode
[  194.632999][T12701] macsec0: entered allmulticast mode
[  194.924060][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'.
[  194.933759][T12725] pim6reg: entered allmulticast mode
[  194.938067][T12725] pim6reg: left allmulticast mode
[  195.051460][T12733] : entered promiscuous mode
[  195.168330][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'.
[  196.158416][T12780] xfrm1: entered allmulticast mode
[  196.165390][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'.
[  196.168792][T12782] tipc: New replicast peer: fd80:0000:0000:0000:0000:0000:0000:0000
[  196.171467][T12782] tipc: Enabled bearer <udp:syz1>, priority 10
[  196.180022][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'.
[  196.263751][T12787] macsec5: entered promiscuous mode
[  196.266168][T12787] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  196.269606][T12787] macsec5: entered allmulticast mode
[  196.271350][T12787] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  196.301967][T12790] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  196.311246][T12792] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2057'.
[  196.314166][T12792] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  196.392939][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'.
[  196.610531][T12817] netlink: 'syz.2.2068': attribute type 1 has an invalid length.
[  196.713374][T12823] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  196.717352][T12823] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  196.771133][T12830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2072'.
[  196.841048][T12832] syzkaller0: entered promiscuous mode
[  196.843274][T12832] syzkaller0: entered allmulticast mode
[  196.862727][T12833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.868604][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'.
[  197.165333][ T9876] tipc: Node number set to 3889001308
[  197.396276][T12839] team0: Failed to send options change via netlink (err -105)
[  197.398771][T12839] team0: Mode changed to "loadbalance"
[  197.509417][T12848] netlink: 'syz.2.2079': attribute type 30 has an invalid length.
[  197.519481][T12848] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  197.519613][T12852] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  197.522157][T12848] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  197.522198][T12848] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  197.530639][T12848] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  197.540879][T12848] netlink: 'syz.2.2079': attribute type 30 has an invalid length.
[  197.689902][T12866] netlink: 'syz.1.2085': attribute type 1 has an invalid length.
[  197.716518][T12866] 8021q: adding VLAN 0 to HW filter on device bond4
[  197.983249][T12891] xt_policy: output policy not valid in PREROUTING and INPUT
[  198.783930][T12905] netlink: 'syz.0.2097': attribute type 10 has an invalid length.
[  198.794701][T12905] team0: entered allmulticast mode
[  198.796881][T12905] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  198.933697][T12922] 8021q: adding VLAN 0 to HW filter on device bond8
[  199.001758][T12922] netlink: 'syz.2.2104': attribute type 4 has an invalid length.
[  199.014832][T12922] netlink: 'syz.2.2104': attribute type 4 has an invalid length.
[  199.071355][T12931] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  199.121599][T12931] tipc: Resetting bearer <eth:syzkaller0>
[  199.142607][T12930] tipc: Resetting bearer <eth:syzkaller0>
[  200.181043][T12930] tipc: Disabling bearer <eth:syzkaller0>
[  200.192753][T12933] vlan6: entered promiscuous mode
[  200.194840][T12933] vlan6: entered allmulticast mode
[  200.197000][T12933] bond0: entered allmulticast mode
[  200.272725][T12943] __nla_validate_parse: 10 callbacks suppressed
[  200.272736][T12943] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2110'.
[  200.278479][T12943] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2110'.
[  200.292265][T12945] netlink: 892 bytes leftover after parsing attributes in process `syz.2.2111'.
[  200.300082][T12945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.338488][T12949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2112'.
[  200.382036][T12951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2113'.
[  200.471447][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'.
[  200.521047][T12963] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  200.632463][T12980] af_packet: tpacket_rcv: packet too big, clamped from 5688 to 4294967272. macoff=96
[  200.663609][T12983] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2123'.
[  201.727004][T13064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2137'.
[  201.911124][T13077] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  201.947469][T13080] bond0: (slave wlan1): Releasing backup interface
[  201.959430][T13080] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  202.036119][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2141'.
[  202.273987][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'.
[  202.408466][T13113] No such timeout policy "syz0"
[  202.959831][T13171] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  203.220226][T13185] !: renamed from dummy0
[  203.933459][T13223] netlink: 'syz.2.2184': attribute type 13 has an invalid length.
[  204.010652][T13223] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.013312][T13223] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.016187][T13223] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.018634][T13223] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  204.031733][T13223] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  204.033986][T13223] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  204.044221][T13223] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.047306][T13223] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.049793][T13223] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.052377][T13223] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  204.111622][T13232] sctp: [Deprecated]: syz.1.2185 (pid 13232) Use of struct sctp_assoc_value in delayed_ack socket option.
[  204.111622][T13232] Use struct sctp_sack_info instead
[  204.278709][T13246] netem: incorrect ge model size
[  204.280519][T13246] netem: change failed
[  204.330376][T13250] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  204.706313][T13270] No such timeout policy "syz1"
[  204.887347][T13280] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  205.328839][T13306] netlink: 'syz.2.2208': attribute type 1 has an invalid length.
[  205.331899][T13306] netlink: 'syz.2.2208': attribute type 2 has an invalid length.
[  205.334858][T13306] netlink: 'syz.2.2208': attribute type 8 has an invalid length.
[  205.345451][T13306] __nla_validate_parse: 12 callbacks suppressed
[  205.345462][T13306] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.2208'.
[  205.580791][T13325] SET target dimension over the limit!
[  205.796506][T13328] netlink: 'syz.0.2215': attribute type 1 has an invalid length.
[  205.802375][T13328] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2215'.
[  205.808424][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'.
[  205.811737][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2215'.
[  205.822105][ T5862] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  205.832354][ T5862] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  205.855545][   T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  205.895552][   T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  205.945681][   T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  205.964313][T13346] netlink: 'syz.0.2219': attribute type 3 has an invalid length.
[  206.434213][T13349] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2220'.
[  206.742000][T13353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.245888][T13362] xt_ecn: cannot match TCP bits for non-tcp packets
[  207.294227][T13364] syzkaller0: entered promiscuous mode
[  207.296704][T13364] syzkaller0: entered allmulticast mode
[  207.338174][T13366] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2226'.
[  207.345591][T13366] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[  207.349068][T13366] Cannot find add_set index 3 as target
[  207.355004][ T7021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.361132][ T7021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.373288][T13366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.573986][T13374] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2229'.
[  207.578320][T13374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2229'.
[  207.585014][T13374] geneve4: entered allmulticast mode
[  207.931527][T13395] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2236'.
[  207.936793][T13395] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2236'.
[  208.005711][T13402] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  208.092116][ T5862] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  208.165780][T13414] syzkaller0: entered promiscuous mode
[  208.167831][T13414] syzkaller0: entered allmulticast mode
[  208.857029][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  209.047953][T13438] Cannot find add_set index 4 as target
[  209.082278][T13438] Bluetooth: MGMT ver 1.23
[  209.173672][T13458] Cannot find set identified by id 2 to match
[  209.288619][T13465] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  209.985309][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  210.151009][T13489] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  210.229718][T13496] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  210.408645][T13510] netlink: 'syz.0.2271': attribute type 3 has an invalid length.
[  210.414730][T13510] __nla_validate_parse: 39 callbacks suppressed
[  210.414745][T13510] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2271'.
[  210.589957][T13520] netlink: 'syz.1.2274': attribute type 10 has an invalid length.
[  210.592998][T13520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2274'.
[  210.606450][T13520] team0: Port device geneve0 added
[  210.613701][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2274'.
[  210.622720][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  210.632228][T13520] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  210.881881][T13535] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2280'.
[  210.885791][T13535] netem: invalid attributes len -16
[  210.887869][T13535] netem: change failed
[  211.021173][T13538] tun0: tun_chr_ioctl cmd 1074025681
[  211.024024][T13538] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2282'.
[  211.064194][T13548] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  211.098849][ T5219] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  211.105638][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  211.118800][T13551] ksmbd: Unknown IPC event: 3, ignore.
[  211.121154][T13550] ksmbd: Unknown IPC event: 3, ignore.
[  211.218781][T13555] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2286'.
[  211.380798][T13565] netlink: 'syz.1.2290': attribute type 1 has an invalid length.
[  211.398236][T13565] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2290'.
[  211.401662][T13565] netlink: 'syz.1.2290': attribute type 1 has an invalid length.
[  211.505722][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'.
[  211.613739][T13584] netlink: 'syz.2.2297': attribute type 2 has an invalid length.
[  211.617208][T13584] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2297'.
[  212.892200][T13626] netlink: 'syz.2.2310': attribute type 5 has an invalid length.
[  212.895970][T13626] netlink: 'syz.2.2310': attribute type 5 has an invalid length.
[  213.033973][T13636] netlink: 'syz.2.2314': attribute type 1 has an invalid length.
[  213.042020][T13637] netlink: 'syz.2.2314': attribute type 1 has an invalid length.
[  213.047559][T13637] netlink: 'syz.2.2314': attribute type 11 has an invalid length.
[  213.050718][T13637] netlink: 'syz.2.2314': attribute type 4 has an invalid length.
[  213.053753][T13636] netlink: 'syz.2.2314': attribute type 11 has an invalid length.
[  213.054220][T13637] xt_bpf: check failed: parse error
[  213.706193][T13660] 8021q: adding VLAN 0 to HW filter on device bond5
[  213.913023][T13677] batman_adv: batadv0: Adding interface: macvlan4
[  213.918842][T13677] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1536) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  213.926105][T13677] batman_adv: batadv0: Interface activated: macvlan4
[  214.016936][T13681] bond0: entered promiscuous mode
[  214.534332][T13743] tap0: tun_chr_ioctl cmd 1074025675
[  214.536469][T13743] tap0: persist disabled
[  214.538570][T13748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.541108][T13748] syzkaller0: entered promiscuous mode
[  214.542990][T13748] syzkaller0: entered allmulticast mode
[  214.558547][T13748] sch_fq: defrate 257 ignored.
[  214.562382][T13748] tipc: Resetting bearer <eth:syzkaller0>
[  214.568202][T13747] tipc: Resetting bearer <eth:syzkaller0>
[  214.577964][T13747] tipc: Disabling bearer <eth:syzkaller0>
[  214.725663][T13760] syzkaller1: entered promiscuous mode
[  214.727880][T13760] syzkaller1: entered allmulticast mode
[  215.064131][T13790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.134112][T13790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.227144][T13782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.792392][T13802] __nla_validate_parse: 16 callbacks suppressed
[  215.792409][T13802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2367'.
[  216.085389][T13812] ip6t_srh: unknown srh invflags 4449
[  216.987590][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'.
[  217.003768][T13841] bond9: entered promiscuous mode
[  217.006750][T13841] 8021q: adding VLAN 0 to HW filter on device bond9
[  218.135266][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  218.282013][T13894] validate_nla: 7 callbacks suppressed
[  218.282030][T13894] netlink: 'syz.2.2396': attribute type 39 has an invalid length.
[  218.360382][T13908] IPVS: set_ctl: invalid protocol: 54 172.20.20.51:20003
[  218.379826][T13908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.852621][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.894571][T13945] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2410'.
[  219.018295][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'.
[  219.238258][T13961] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  219.292557][T13969] can: request_module (can-proto-4) failed.
[  219.373550][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'.
[  219.384818][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'.
[  219.404543][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'.
[  219.409302][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'.
[  219.429350][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'.
[  219.432863][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2420'.
[  219.454793][T13985] netlink: 'syz.0.2423': attribute type 13 has an invalid length.
[  219.468882][T13985] gretap0: refused to change device tx_queue_len
[  219.471138][T13985] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  219.531336][T13990] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  219.537539][T13991] xt_hashlimit: size too large, truncated to 1048576
[  219.540641][T13991] xt_hashlimit: max too large, truncated to 1048576
[  219.552729][T13992] xt_hashlimit: size too large, truncated to 1048576
[  219.558158][T13992] xt_hashlimit: max too large, truncated to 1048576
[  219.613425][T13995] macsec6: entered promiscuous mode
[  219.615273][T13995] macsec6: entered allmulticast mode
[  219.624311][T13995] bridge: RTM_NEWNEIGH with invalid state 0x8
[  219.630880][T13995] bridge: RTM_NEWNEIGH with invalid state 0x8
[  219.744744][T14017] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  219.752149][T14017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.769501][T14022] netlink: 'syz.0.2432': attribute type 1 has an invalid length.
[  219.801212][T14022] 8021q: adding VLAN 0 to HW filter on device bond10
[  219.819786][T14022] bond10: (slave ip6gretap3): making interface the new active one
[  219.824020][T14022] bond10: (slave ip6gretap3): Enslaving as an active interface with an up link
[  220.045820][T14045] dvmrp0: left allmulticast mode
[  220.637760][T14075] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  220.831800][T14098] netlink: 'syz.2.2452': attribute type 1 has an invalid length.
[  220.835804][T14098] __nla_validate_parse: 105 callbacks suppressed
[  220.835820][T14098] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2452'.
[  220.907061][T14106] netlink: 'syz.2.2453': attribute type 10 has an invalid length.
[  220.915250][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'.
[  220.932086][T14106] netlink: 'syz.2.2453': attribute type 10 has an invalid length.
[  220.942776][T14106] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2453'.
[  220.948154][T14111] netlink: 'syz.2.2453': attribute type 10 has an invalid length.
[  221.015460][T14115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.063874][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'.
[  221.067720][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'.
[  221.071212][T14123] netlink: 'syz.2.2456': attribute type 14 has an invalid length.
[  221.074145][T14123] netlink: 'syz.2.2456': attribute type 11 has an invalid length.
[  221.174634][T14133] !: renamed from dummy0
[  221.266909][T14144] netlink: 'syz.2.2460': attribute type 5 has an invalid length.
[  221.409333][T14153] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  221.470662][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2465'.
[  221.474145][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2465'.
[  221.529026][T14163] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  221.759675][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'.
[  221.767265][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'.
[  221.790628][T14177] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2472'.
[  221.873232][T14177] veth0_to_batadv: left allmulticast mode
[  221.883568][T14177] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.888654][T14177] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.891339][T14177] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.893989][T14177] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.901959][T14195] IPv6: NLM_F_REPLACE set, but no existing node found!
[  221.921641][T14177] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  221.924369][T14177] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  221.928572][T14177] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  221.931307][T14177] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  221.949797][T14177] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 56091 - 0
[  221.952709][T14177] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 56091 - 0
[  221.955912][T14177] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 56091 - 0
[  221.958610][T14177] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 56091 - 0
[  222.797965][T14220] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  222.801385][T14220] gretap5: entered promiscuous mode
[  222.803112][T14220] gretap5: entered allmulticast mode
[  222.942471][T14233] bridge0: port 1(gretap0) entered blocking state
[  222.944551][T14233] bridge0: port 1(gretap0) entered disabled state
[  222.957037][T14233] gretap0: entered promiscuous mode
[  223.063446][T14244] x_tables: duplicate underflow at hook 1
[  223.222063][T14260] openvswitch: netlink: IPv4 tunnel dst address is zero
[  223.438224][T14276] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  223.550621][T14278] syzkaller0: entered promiscuous mode
[  223.557565][T14278] syzkaller0: entered allmulticast mode
[  224.120473][T14290] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  225.097433][T14310] validate_nla: 7 callbacks suppressed
[  225.097450][T14310] netlink: 'syz.1.2509': attribute type 27 has an invalid length.
[  225.133305][T14312] netlink: 'syz.2.2511': attribute type 1 has an invalid length.
[  225.217148][ T7028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.220396][ T7028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.446910][T14325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.447196][T14326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.990044][T14349] __nla_validate_parse: 14 callbacks suppressed
[  225.990060][T14349] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2523'.
[  226.130818][T14358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2527'.
[  226.235429][T14364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2530'.
[  226.873538][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'.
[  227.079280][T14400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.090788][T14400] netlink: 'syz.1.2539': attribute type 13 has an invalid length.
[  227.189578][T14400] macsec0: left allmulticast mode
[  227.195665][T14400] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.199037][T14400] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.202303][T14400] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.205889][T14400] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  227.220387][T14400] batman_adv: batadv0: Interface deactivated: macvlan4
[  227.265657][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'.
[  227.268950][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  227.338270][T14421] batadv_slave_0: entered promiscuous mode
[  227.340547][T14420] batadv_slave_0: left promiscuous mode
[  227.357952][T14419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2545'.
[  227.360720][T14419] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2545'.
[  227.428344][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2547'.
[  227.565943][T14425] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[  227.569214][T14425] nbd: error processing sock list
[  227.571723][T14425] block nbd1: shutting down sockets
[  227.907335][T14451] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2557'.
[  228.034718][T14462] netlink: 'syz.2.2559': attribute type 10 has an invalid length.
[  228.076973][T14472] netlink: 'syz.2.2561': attribute type 1 has an invalid length.
[  228.080613][T14472] netlink: 'syz.2.2561': attribute type 4 has an invalid length.
[  228.119037][T14477] netem: incorrect ge model size
[  228.121163][T14477] netem: change failed
[  228.390099][T14497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.473248][T14504] ipt_REJECT: TCP_RESET invalid for non-tcp
[  228.477285][T14505] ipt_REJECT: TCP_RESET invalid for non-tcp
[  228.583420][T14513] bond10: entered promiscuous mode
[  228.586092][T14513] 8021q: adding VLAN 0 to HW filter on device bond10
[  229.042896][T14562] netlink: 'syz.2.2587': attribute type 9 has an invalid length.
[  229.317354][T14579] tun0: tun_chr_ioctl cmd 1074025677
[  229.319216][T14579] tun0: linktype set to 804
[  229.713244][T14595] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  230.004197][T14614] netlink: 'syz.0.2604': attribute type 8 has an invalid length.
[  230.865618][ T5869] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec
[  230.984910][T14623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  231.059939][T14651] __nla_validate_parse: 16 callbacks suppressed
[  231.059952][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2614'.
[  231.408877][T14677] syz.0.2617: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  231.413314][T14677] CPU: 1 UID: 0 PID: 14677 Comm: syz.0.2617 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  231.413330][T14677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.413337][T14677] Call Trace:
[  231.413343][T14677]  <TASK>
[  231.413348][T14677]  dump_stack_lvl+0x189/0x250
[  231.413367][T14677]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.413379][T14677]  ? __pfx__printk+0x10/0x10
[  231.413392][T14677]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  231.413407][T14677]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  231.413419][T14677]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  231.413431][T14677]  warn_alloc+0x214/0x310
[  231.413439][T14677]  ? stack_depot_save_flags+0x40/0x900
[  231.413450][T14677]  ? __pfx_warn_alloc+0x10/0x10
[  231.413459][T14677]  ? kasan_save_track+0x4f/0x80
[  231.413472][T14677]  ? xskq_create+0x56/0x170
[  231.413480][T14677]  ? xsk_init_queue+0xb0/0x110
[  231.413486][T14677]  ? xsk_setsockopt+0x43f/0x710
[  231.413498][T14677]  ? do_sock_setsockopt+0x17c/0x1b0
[  231.413510][T14677]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  231.413521][T14677]  ? do_syscall_64+0xfa/0x3b0
[  231.413532][T14677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.413544][T14677]  __vmalloc_node_range_noprof+0x125/0x12f0
[  231.413607][T14677]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  231.413629][T14677]  ? __kasan_kmalloc+0x93/0xb0
[  231.413643][T14677]  vmalloc_user_noprof+0xad/0xf0
[  231.413659][T14677]  ? xskq_create+0xbf/0x170
[  231.413668][T14677]  xskq_create+0xbf/0x170
[  231.413679][T14677]  xsk_init_queue+0xb0/0x110
[  231.413688][T14677]  xsk_setsockopt+0x43f/0x710
[  231.413701][T14677]  ? __pfx_xsk_setsockopt+0x10/0x10
[  231.413715][T14677]  ? __fget_files+0x2a/0x420
[  231.413723][T14677]  ? aa_sock_opt_perm+0x74/0x110
[  231.413733][T14677]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  231.413743][T14677]  ? __pfx_xsk_setsockopt+0x10/0x10
[  231.413756][T14677]  do_sock_setsockopt+0x17c/0x1b0
[  231.413770][T14677]  __x64_sys_setsockopt+0x13f/0x1b0
[  231.413785][T14677]  do_syscall_64+0xfa/0x3b0
[  231.413793][T14677]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.413802][T14677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.413809][T14677]  ? exc_page_fault+0x9f/0xf0
[  231.413818][T14677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.413826][T14677] RIP: 0033:0x7fbf1358e9a9
[  231.413836][T14677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.413844][T14677] RSP: 002b:00007fbf143b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  231.413854][T14677] RAX: ffffffffffffffda RBX: 00007fbf137b6080 RCX: 00007fbf1358e9a9
[  231.413863][T14677] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  231.413869][T14677] RBP: 00007fbf13610d69 R08: 0000000000000004 R09: 0000000000000000
[  231.413875][T14677] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.413881][T14677] R13: 0000000000000000 R14: 00007fbf137b6080 R15: 00007fff213f7848
[  231.413895][T14677]  </TASK>
[  231.413916][T14677] Mem-Info:
[  231.535533][T14677] active_anon:5317 inactive_anon:0 isolated_anon:0
[  231.535533][T14677]  active_file:1334 inactive_file:38272 isolated_file:0
[  231.535533][T14677]  unevictable:1768 dirty:78 writeback:0
[  231.535533][T14677]  slab_reclaimable:10035 slab_unreclaimable:96379
[  231.535533][T14677]  mapped:19251 shmem:2420 pagetables:1129
[  231.535533][T14677]  sec_pagetables:0 bounce:0
[  231.535533][T14677]  kernel_misc_reclaimable:0
[  231.535533][T14677]  free:245531 free_pcp:17329 free_cma:0
[  231.551531][T14677] Node 0 active_anon:14876kB inactive_anon:0kB active_file:4164kB inactive_file:50636kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27812kB dirty:160kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8404kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  231.586304][T14677] Node 1 active_anon:6392kB inactive_anon:0kB active_file:1172kB inactive_file:102452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49192kB dirty:152kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4832kB pagetables:1988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  231.603808][T14677] Node 0 DMA free:15324kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  231.661017][T14677] lowmem_reserve[]: 0 812 812 812 812
[  231.663248][T14677] Node 0 DMA32 free:327288kB boost:2048kB min:35704kB low:44116kB high:52528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15012kB inactive_anon:0kB active_file:4164kB inactive_file:50636kB unevictable:3536kB writepending:160kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:29824kB local_pcp:8936kB free_cma:0kB
[  231.704868][T14677] lowmem_reserve[]: 0 0 0 0 0
[  231.709171][T14677] Node 1 DMA32 free:413436kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  231.739034][T14677] lowmem_reserve[]: 0 0 854 854 854
[  231.741843][T14677] Node 1 Normal free:225872kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6256kB inactive_anon:0kB active_file:1172kB inactive_file:102452kB unevictable:3536kB writepending:152kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38484kB local_pcp:21000kB free_cma:0kB
[  231.766937][T14677] lowmem_reserve[]: 0 0 0 0 0
[  231.768991][T14677] Node 0 DMA: 9*4kB (U) 9*8kB (U) 9*16kB (U) 9*32kB (U) 9*64kB (U) 7*128kB (U) 6*256kB (U) 7*512kB (U) 4*1024kB (U) 2*2048kB (M) 0*4096kB = 15324kB
[  231.780779][T14677] Node 0 DMA32: 176*4kB (UME) 127*8kB (UME) 13*16kB (UME) 566*32kB (UME) 434*64kB (UME) 236*128kB (UME) 181*256kB (UME) 166*512kB (UME) 123*1024kB (UME) 0*2048kB 0*4096kB = 335304kB
[  231.788700][T14677] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 98*4096kB (M) = 413436kB
[  231.801452][T14677] Node 1 Normal: 229*4kB (UME) 663*8kB (UME) 278*16kB (UME) 482*32kB (UME) 491*64kB (UME) 220*128kB (UME) 73*256kB (UME) 59*512kB (UME) 77*1024kB (UM) 6*2048kB (UME) 0*4096kB = 225708kB
[  231.817139][T14677] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  231.819994][T14677] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  231.822764][T14677] 42026 total pagecache pages
[  231.824218][T14677] 0 pages in swap cache
[  231.826886][T14677] Free swap  = 124996kB
[  231.828367][T14677] Total swap = 124996kB
[  231.829851][T14677] 786301 pages RAM
[  231.831166][T14677] 0 pages HighMem/MovableOnly
[  231.833163][T14677] 241056 pages reserved
[  231.834724][T14677] 0 pages cma reserved
[  231.841419][T14706] x_tables: duplicate underflow at hook 1
[  231.907806][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'.
[  232.077812][T14730] delete_channel: no stack
[  232.091193][T14731] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2634'.
[  232.095897][T14727] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2634'.
[  232.101923][T14727] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:20003
[  232.112655][T11476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.115555][T11476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.124640][T14727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.169476][T14734] netlink: 'syz.2.2636': attribute type 30 has an invalid length.
[  232.211302][T14736] netlink: 'syz.2.2637': attribute type 1 has an invalid length.
[  232.214450][T14736] netlink: 'syz.2.2637': attribute type 10 has an invalid length.
[  232.220262][T14736] netlink: 'syz.2.2637': attribute type 4 has an invalid length.
[  232.223244][T14736] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2637'.
[  232.340080][T14740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2639'.
[  232.694754][T14744] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2640'.
[  232.746931][T14747] netlink: 'syz.2.2641': attribute type 1 has an invalid length.
[  232.796182][T14747] 8021q: adding VLAN 0 to HW filter on device bond11
[  232.812277][T14749] 8021q: adding VLAN 0 to HW filter on device bond11
[  232.817613][T14749] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  232.822510][T14749] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  232.843230][T14744] netlink: 'syz.1.2640': attribute type 1 has an invalid length.
[  232.890840][T14747] bond11: (slave bridge9): Enslaving as an active interface with a down link
[  232.956144][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2641'.
[  232.958757][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'.
[  232.961326][T14749] netlink: 'syz.2.2641': attribute type 13 has an invalid length.
[  233.034065][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'.
[  233.149233][T14772] syzkaller1: entered promiscuous mode
[  233.150968][T14772] syzkaller1: entered allmulticast mode
[  233.450978][T14800] netlink: 'syz.0.2658': attribute type 10 has an invalid length.
[  233.455846][T14800] bond0: (slave wlan1): refused to change device type
[  233.492520][T14799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.504055][T14803] bond12: entered promiscuous mode
[  233.508376][T14803] 8021q: adding VLAN 0 to HW filter on device bond12
[  233.627824][   T12] nci: nci_rx_work: unknown MT 0x1
[  234.768456][T14848] netlink: 'syz.1.2673': attribute type 4 has an invalid length.
[  234.857501][T14857] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  235.026237][T14870] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  235.278463][T14884] audit_tg_check: 1 callbacks suppressed
[  235.278493][T14884] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  235.581437][T14912] sctp: [Deprecated]: syz.2.2693 (pid 14912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.581437][T14912] Use struct sctp_sack_info instead
[  235.618814][T14915] netlink: 'syz.0.2694': attribute type 1 has an invalid length.
[  235.789284][T14937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.183523][T14958] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1536) !
[  236.411756][T14964] __nla_validate_parse: 16 callbacks suppressed
[  236.411769][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'.
[  236.789299][T14986] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2716'.
[  236.811963][T14991] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2717'.
[  236.944475][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'.
[  237.064254][   T10] hid-generic 0005:15C2:5505.0004: item fetching failed at offset 0/2
[  237.079822][   T10] hid-generic 0005:15C2:5505.0004: probe with driver hid-generic failed with error -22
[  237.152142][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'.
[  237.323818][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'.
[  237.327840][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'.
[  237.331326][T15044] validate_nla: 3 callbacks suppressed
[  237.331339][T15044] netlink: 'syz.2.2733': attribute type 1 has an invalid length.
[  237.337175][T15044] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2733'.
[  237.385273][T15044] nbd: socks must be embedded in a SOCK_ITEM attr
[  237.391656][T15044] block nbd1: shutting down sockets
[  237.870873][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'.
[  237.874209][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'.
[  238.540062][T15119] syzkaller1: entered promiscuous mode
[  238.541763][T15119] syzkaller1: entered allmulticast mode
[  238.635696][T15126] netlink: 'syz.1.2752': attribute type 1 has an invalid length.
[  238.843164][T15144] ip6gre3: entered allmulticast mode
[  240.415585][T15234] tipc: Enabling of bearer <eth:syzkaller0g> rejected, failed to enable media
[  240.750012][T15259] syzkaller0: entered promiscuous mode
[  240.752400][T15259] syzkaller0: entered allmulticast mode
[  242.198318][T15270] gretap0: left promiscuous mode
[  242.202117][T15270] team0: left promiscuous mode
[  242.203852][T15270] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  242.211130][T15270] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  242.217048][T15270] veth5: left promiscuous mode
[  242.220355][T15270] geneve3: left promiscuous mode
[  242.222146][T15270] gtp1: left promiscuous mode
[  242.224071][T15270] geneve4: left promiscuous mode
[  242.235552][T15270] gre2: left promiscuous mode
[  242.339163][T15286] __nla_validate_parse: 10 callbacks suppressed
[  242.339181][T15286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2788'.
[  242.361189][T15286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2788'.
[  242.368195][T15290] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2788'.
[  242.414515][T15289] xt_CT: No such helper "pptp"
[  242.422405][T15289] --map-set only usable from mangle table
[  242.492974][T15299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2793'.
[  242.679556][T15301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2792'.
[  242.913195][T15315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2796'.
[  242.983314][T15317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.082971][T15322] dvmrp0: entered allmulticast mode
[  243.096209][T15321] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.2798'.
[  243.217929][T15326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2801'.
[  243.233516][T15326] netlink: 'syz.0.2801': attribute type 303 has an invalid length.
[  243.269485][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'.
[  243.272469][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'.
[  243.332268][T15336] netlink: 'syz.0.2805': attribute type 4 has an invalid length.
[  243.342116][T15336] netlink: 'syz.0.2805': attribute type 4 has an invalid length.
[  243.357581][T15336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.402325][T15342] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20001
[  243.702729][T15361] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  243.807015][T15366] 8021q: VLANs not supported on gre0
[  244.731525][T15398] delete_channel: no stack
[  244.737407][T15398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  244.740762][T15398] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  244.930201][T15412] netlink: 'syz.0.2828': attribute type 30 has an invalid length.
[  244.984358][T15412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.987258][T15412] syzkaller0: entered promiscuous mode
[  244.989012][T15412] syzkaller0: entered allmulticast mode
[  245.038494][T15412] tipc: Resetting bearer <eth:syzkaller0>
[  245.048307][T15411] tipc: Resetting bearer <eth:syzkaller0>
[  245.150797][T15411] tipc: Disabling bearer <eth:syzkaller0>
[  245.242645][T15415] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  245.256600][T15415] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  245.523608][T15425] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  245.762726][T15436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.053747][T15458] Cannot find del_set index 4 as target
[  246.072921][T15452] nbd1: detected capacity change from 0 to 63
[  246.076481][T15459] block nbd1: NBD_DISCONNECT
[  246.081715][T15459] block nbd1: Disconnected due to user request.
[  246.091665][T15459] block nbd1: shutting down sockets
[  246.184042][T15467] netlink: 'syz.0.2847': attribute type 5 has an invalid length.
[  246.187744][T15467] netlink: 'syz.0.2847': attribute type 6 has an invalid length.
[  246.192376][T15464] netlink: 'syz.2.2846': attribute type 1 has an invalid length.
[  246.215857][T15464] bond13: entered promiscuous mode
[  246.219721][T15464] 8021q: adding VLAN 0 to HW filter on device bond13
[  246.236280][T15464] bond13: (slave bridge11): making interface the new active one
[  246.246854][T15464] bridge11: entered promiscuous mode
[  246.249708][T15464] bond13: (slave bridge11): Enslaving as an active interface with an up link
[  246.496720][T15499] netlink: 'syz.1.2857': attribute type 1 has an invalid length.
[  246.507549][T15499] netlink: 'syz.1.2857': attribute type 1 has an invalid length.
[  246.605885][T15508] netlink: 'syz.1.2860': attribute type 10 has an invalid length.
[  246.609090][T15508] !: entered promiscuous mode
[  246.622801][T15508] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  247.111306][T15545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.113888][T15545] syzkaller0: entered promiscuous mode
[  247.115876][T15545] syzkaller0: entered allmulticast mode
[  247.127341][T15542] tipc: Resetting bearer <eth:syzkaller0>
[  247.209954][T15539] tipc: Resetting bearer <eth:syzkaller0>
[  247.223499][T15539] tipc: Disabling bearer <eth:syzkaller0>
[  247.467394][T15564] __nla_validate_parse: 49 callbacks suppressed
[  247.467414][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'.
[  247.484957][T15564] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2872'.
[  247.492838][T15564] 8021q: VLANs not supported on tunl0
[  247.851983][T15590] xt_ecn: cannot match TCP bits for non-tcp packets
[  248.248501][T15605] xt_hashlimit: size too large, truncated to 1048576
[  248.537746][T15630] bridge_slave_0: invalid flags given to default FDB implementation
[  248.602838][T15637] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.605917][T15637] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  248.609975][T15637] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  248.649824][T15641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'.
[  248.680636][T15646] netlink: 'syz.2.2894': attribute type 1 has an invalid length.
[  248.693963][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'.
[  248.699964][T15646] bond14: entered promiscuous mode
[  248.701812][T15646] bond14: entered allmulticast mode
[  248.743766][T15647] bridge12: the hash_elasticity option has been deprecated and is always 16
[  248.758453][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'.
[  248.768480][T15647] bond14: (slave bridge12): making interface the new active one
[  248.771451][T15647] bridge12: entered promiscuous mode
[  248.794200][T15647] bridge12: entered allmulticast mode
[  248.808280][T15647] bond14: (slave bridge12): Enslaving as an active interface with an up link
[  248.908180][T15662] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2897'.
[  248.974727][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2898'.
[  248.982131][T15667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2898'.
[  249.215338][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2905'.
[  249.300061][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'.
[  249.569069][T15727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.820125][T15745] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  249.927939][T15753] veth11: entered allmulticast mode
[  250.036793][T15760] netlink: 'syz.1.2927': attribute type 1 has an invalid length.
[  250.040006][T15765] netlink: 'syz.1.2927': attribute type 1 has an invalid length.
[  250.189964][T15779] No such timeout policy "syz1"
[  250.193473][T15779] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  250.572605][T15788] syzkaller0: entered promiscuous mode
[  250.574772][T15788] syzkaller0: entered allmulticast mode
[  250.581289][T15788] Cannot find add_set index 3 as target
[  250.583466][T15788] x_tables: duplicate underflow at hook 2
[  252.560453][T15823] netlink: 'syz.0.2947': attribute type 58 has an invalid length.
[  252.563668][T15823] __nla_validate_parse: 10 callbacks suppressed
[  252.563683][T15823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2947'.
[  252.663273][T15825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2948'.
[  252.674044][T15825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2948'.
[  252.720034][T15827] netlink: 'syz.0.2949': attribute type 1 has an invalid length.
[  252.755299][T15827] bond14: (slave gretap4): making interface the new active one
[  252.758999][T15827] bond14: (slave gretap4): Enslaving as an active interface with an up link
[  252.785652][T15827] vlan1: entered allmulticast mode
[  252.787766][T15827] bond14: entered allmulticast mode
[  252.789818][T15827] gretap4: entered allmulticast mode
[  252.793224][T15827] bond14: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  252.987658][T15838] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2953'.
[  253.031903][T15841] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2954'.
[  253.117761][T15848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'.
[  253.156891][T15851] bond0: Unable to set up delay as MII monitoring is disabled
[  253.201781][T15854] dvmrp0: left allmulticast mode
[  253.324540][T15864] sctp: [Deprecated]: syz.1.2961 (pid 15864) Use of int in max_burst socket option deprecated.
[  253.324540][T15864] Use struct sctp_assoc_value instead
[  253.555576][T15879] netlink: 'syz.1.2965': attribute type 83 has an invalid length.
[  253.857749][T15887] syzkaller1: entered promiscuous mode
[  253.859531][T15887] syzkaller1: entered allmulticast mode
[  253.980669][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2970'.
[  253.984167][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'.
[  254.209269][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2975'.
[  254.511566][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'.
[  254.541307][T15925] wg1: entered promiscuous mode
[  254.547108][T15925] wg1: entered allmulticast mode
[  254.603409][T15927] pim6reg1: entered allmulticast mode
[  254.744932][T15940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  254.748019][T15940] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  254.794311][T15931] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  254.938805][T15955] netlink: 'syz.2.2992': attribute type 4 has an invalid length.
[  254.941657][T15952] netlink: 'syz.2.2992': attribute type 4 has an invalid length.
[  255.191943][T15964] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  255.617829][T15990] xt_TPROXY: Can be used only with -p tcp or -p udp
[  256.001184][T16010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.037771][T16010] syzkaller0: entered promiscuous mode
[  256.040120][T16010] syzkaller0: entered allmulticast mode
[  256.043237][T16010] tipc: Resetting bearer <eth:syzkaller0>
[  256.100574][   T74] tipc: Resetting bearer <eth:syzkaller0>
[  256.120184][T16008] tipc: Resetting bearer <eth:syzkaller0>
[  257.404814][T16008] tipc: Disabling bearer <eth:syzkaller0>
[  257.419848][T16020] bridge7: entered promiscuous mode
[  257.421981][T16020] bridge7: entered allmulticast mode
[  257.431340][T16020] team0: Port device bridge7 added
[  257.642772][T16036] can: request_module (can-proto-0) failed.
[  257.674769][T16040] vxcan0: entered promiscuous mode
[  257.901644][T16050] netlink: 'syz.2.3019': attribute type 5 has an invalid length.
[  258.880920][T16100] tipc: Enabled bearer <eth:vlan0>, priority 27
[  258.940730][T16100] __nla_validate_parse: 8 callbacks suppressed
[  258.940743][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3033'.
[  259.072423][T16109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.174765][T16113] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3036'.
[  259.183631][T16113] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  259.388219][T16121] tc_dump_action: action bad kind
[  259.391334][T16121] tc_dump_action: action bad kind
[  260.058184][T16155] netlink: 'syz.1.3049': attribute type 2 has an invalid length.
[  260.061694][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'.
[  260.066383][T16155] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.069458][T16155] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.070154][T16158] netlink: 'syz.0.3051': attribute type 20 has an invalid length.
[  260.072243][T16155] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.077904][T16155] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.084017][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'.
[  260.092952][T16155] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3049'.
[  260.098607][T16155] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001
[  260.176875][T16164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'.
[  260.249561][T16174] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  260.261542][T16174] netlink: 'syz.0.3055': attribute type 1 has an invalid length.
[  260.394145][T16181] pimreg3: entered allmulticast mode
[  260.431184][T16191] x_tables: duplicate underflow at hook 2
[  260.489515][T16191] netlink: 'syz.1.3061': attribute type 1 has an invalid length.
[  260.492499][T16191] netlink: 'syz.1.3061': attribute type 1 has an invalid length.
[  260.496303][T16191] netlink: 'syz.1.3061': attribute type 1 has an invalid length.
[  260.502204][T16191] block nbd1: shutting down sockets
[  260.608980][T16202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3064'.
[  260.613225][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3063'.
[  260.632717][T16202] 8021q: adding VLAN 0 to HW filter on device bond15
[  260.642194][T16202] macvlan0: entered promiscuous mode
[  260.643929][T16202] macvlan0: entered allmulticast mode
[  260.646773][T16202] bond15: entered promiscuous mode
[  260.648928][T16202] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  260.654385][T16202] bond15: left promiscuous mode
[  260.672261][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3063'.
[  260.923678][T16229] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3071'.
[  261.046423][T16243] xt_hashlimit: invalid interval
[  261.048396][T16243] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  261.419452][T16278] lo: MTU too low for tipc bearer
[  261.421625][T16278] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  261.752030][T16299] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  262.920265][T16343] nft_compat: unsupported protocol 1
[  263.007577][T16350] netlink: 'syz.0.3100': attribute type 8 has an invalid length.
[  263.052281][T16355] Cannot find map_set index 0 as target
[  263.066825][T16355] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  263.268048][T16377] netlink: 'syz.0.3109': attribute type 39 has an invalid length.
[  263.343120][T16380] syzkaller0: entered promiscuous mode
[  263.345753][T16380] syzkaller0: entered allmulticast mode
[  263.352772][T16382] netlink: 'syz.0.3111': attribute type 1 has an invalid length.
[  263.356335][T16380] netlink: 'syz.1.3110': attribute type 13 has an invalid length.
[  263.411376][T16380] ip6gretap0: left promiscuous mode
[  263.433708][T16380] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.440448][T16380] 8021q: adding VLAN 0 to HW filter on device team0
[  263.447725][T16380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.482018][T16382] bond16: entered promiscuous mode
[  263.483992][T16382] 8021q: adding VLAN 0 to HW filter on device bond16
[  263.495442][ T5840] Bluetooth: hci2: command 0x0405 tx timeout
[  263.509886][T16383] bond16: (slave bridge21): making interface the new active one
[  263.513131][T16383] bridge21: entered promiscuous mode
[  263.519312][T16383] bond16: (slave bridge21): Enslaving as an active interface with an up link
[  264.249158][T16420] __nla_validate_parse: 14 callbacks suppressed
[  264.249171][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3121'.
[  265.839198][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  265.843430][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'.
[  265.849662][T16465] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3130'.
[  265.857130][T16465] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3130'.
[  265.876399][T16465] netlink: 70 bytes leftover after parsing attributes in process `syz.2.3130'.
[  265.936382][T16470] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  265.941998][T16470] nbd: nbd0 already in use
[  265.958844][T16472] netlink: 'syz.2.3133': attribute type 21 has an invalid length.
[  265.980379][T16472] netlink: 'syz.2.3133': attribute type 2 has an invalid length.
[  265.986770][T16472] k*]: entered promiscuous mode
[  266.153845][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'.
[  266.158805][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3136'.
[  269.214098][T16518] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3142'.
[  269.221998][T16518] nbd: illegal input index 65508
[  269.255358][T16518] netlink: 'syz.2.3142': attribute type 3 has an invalid length.
[  269.259083][T16518] netlink: 'syz.2.3142': attribute type 1 has an invalid length.
[  269.273699][T16518] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3142'.
[  269.286861][T16518] NCSI netlink: No device for ifindex 0
[  269.452189][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'.
[  269.647445][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.650554][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.755871][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'.
[  269.761966][T16553] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.764617][T16553] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.768298][T16553] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.770866][T16553] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.773607][T16553] geneve5: entered promiscuous mode
[  269.798312][T16557] netlink: 'syz.1.3155': attribute type 2 has an invalid length.
[  269.816832][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'.
[  269.825227][T16562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3157'.
[  269.837178][T16562] gtp3: entered promiscuous mode
[  269.838798][T16562] gtp3: entered allmulticast mode
[  269.910045][T16571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3160'.
[  269.990228][T16580] gretap0: left promiscuous mode
[  269.991948][T16580] bridge0: port 1(gretap0) entered disabled state
[  269.998377][T16580] bond11: (slave bridge9): Releasing active interface
[  270.006161][T16580] bond13: (slave bridge11): Releasing backup interface
[  270.008224][T16580] bridge11: left promiscuous mode
[  270.013590][T16580] bond14: (slave bridge12): Releasing active interface
[  270.015941][T16580] bridge12: left promiscuous mode
[  270.017588][T16580] bridge12: left allmulticast mode
[  270.050566][T16581] veth0: entered promiscuous mode
[  270.053007][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'.
[  270.066508][T16581] veth0 (unregistering): left promiscuous mode
[  270.141382][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3164'.
[  271.031419][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'.
[  271.158399][T16650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3183'.
[  271.660936][T16689] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  272.246794][T16708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.272776][T16707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.279528][T16707] syzkaller0: entered promiscuous mode
[  272.282007][T16707] syzkaller0: entered allmulticast mode
[  272.292647][T16707] tipc: Resetting bearer <eth:syzkaller0>
[  272.304517][T16706] tipc: Resetting bearer <eth:syzkaller0>
[  272.337112][T16706] tipc: Disabling bearer <eth:syzkaller0>
[  272.366532][T16712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.371704][T16712] syzkaller0: entered promiscuous mode
[  272.374439][T16712] syzkaller0: entered allmulticast mode
[  272.411945][T16712] tipc: Resetting bearer <eth:syzkaller0>
[  272.444255][T16712] tipc: Disabling bearer <eth:syzkaller0>
[  272.468871][T16718] xt_hashlimit: size too large, truncated to 1048576
[  272.526897][T16720] netlink: 'syz.1.3204': attribute type 27 has an invalid length.
[  272.610046][T16724] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  272.774960][T16737] netlink: 'syz.1.3208': attribute type 1 has an invalid length.
[  272.792241][T16737] netlink: 'syz.1.3208': attribute type 1 has an invalid length.
[  273.390161][T16787] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  273.414370][T16790] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  273.612833][T16800] sctp: [Deprecated]: syz.1.3226 (pid 16800) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.612833][T16800] Use struct sctp_sack_info instead
[  273.821447][T16812] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  273.993849][T16818] syzkaller1: entered promiscuous mode
[  274.000969][T16818] syzkaller1: entered allmulticast mode
[  274.958998][T16850] __nla_validate_parse: 30 callbacks suppressed
[  274.959067][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'.
[  274.964178][T16850] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3241'.
[  274.984507][T16850] vlan1: entered allmulticast mode
[  274.994407][T16850] veth1: entered allmulticast mode
[  275.293234][T16862] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3245'.
[  275.667752][T16888] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3250'.
[  275.709283][T16895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3251'.
[  276.122901][T16926] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  276.131330][ T5862] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  276.144579][T16927] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3259'.
[  276.306277][T16934] syzkaller0: entered promiscuous mode
[  276.307970][T16934] syzkaller0: entered allmulticast mode
[  276.994538][T16940] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3264'.
[  277.052743][T16944] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  277.107453][T16950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'.
[  277.110857][T16950] netlink: 'syz.2.3267': attribute type 1 has an invalid length.
[  277.239383][T16955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3267'.
[  277.330373][T16969] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3270'.
[  277.389713][T16975] netlink: 'syz.0.3271': attribute type 10 has an invalid length.
[  277.394063][T16975] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.400688][T16975] bond0: entered allmulticast mode
[  277.403612][T16975] team0: Port device bond0 added
[  277.419311][T16978] nftables ruleset with unbound chain
[  277.566903][T16990] netlink: 'syz.1.3276': attribute type 10 has an invalid length.
[  277.574258][T16990] team0: Device ipvlan1 failed to register rx_handler
[  277.648336][T16997] xt_TCPMSS: Only works on TCP SYN packets
[  277.940859][T17024] netlink: 'syz.2.3291': attribute type 4 has an invalid length.
[  278.352516][T17058] netlink: 'syz.1.3299': attribute type 13 has an invalid length.
[  278.820846][T17069] netlink: 'syz.2.3305': attribute type 1 has an invalid length.
[  278.846150][T17069] 8021q: adding VLAN 0 to HW filter on device bond16
[  278.910601][T17069] bond16: (slave bridge13): making interface the new active one
[  278.917849][T17069] bond16: (slave bridge13): Enslaving as an active interface with an up link
[  279.086610][T17094] netlink: 'syz.2.3310': attribute type 3 has an invalid length.
[  279.613052][T17111] netlink: 'syz.2.3314': attribute type 4 has an invalid length.
[  279.990541][T17139] netlink: 'syz.1.3322': attribute type 11 has an invalid length.
[  280.088598][T17151] __nla_validate_parse: 13 callbacks suppressed
[  280.088614][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3319'.
[  280.161405][T17154] delete_channel: no stack
[  280.727786][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'.
[  282.015392][T17180] x_tables: duplicate underflow at hook 3
[  282.117452][T17189] syzkaller0: entered promiscuous mode
[  282.119141][T17189] syzkaller0: entered allmulticast mode
[  282.140880][T17196] netlink: 'syz.1.3335': attribute type 1 has an invalid length.
[  283.538844][T17206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.574866][T17207] syzkaller0: entered promiscuous mode
[  283.579391][T17207] syzkaller0: entered allmulticast mode
[  283.637347][T17211] tipc: Resetting bearer <eth:syzkaller0>
[  283.819989][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'.
[  283.893173][T17223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3338'.
[  285.012639][T17211] tipc: Disabling bearer <eth:syzkaller0>
[  285.098741][T17231] netlink: 'syz.2.3341': attribute type 1 has an invalid length.
[  285.134681][T17231] bond17: (slave geneve3): Opening slave failed
[  285.194469][T17236] bond17: (slave ip6gretap1): making interface the new active one
[  285.203431][T17236] bond17: (slave ip6gretap1): Enslaving as an active interface with an up link
[  285.247564][T17244] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.3344'.
[  285.448320][ T5862] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  285.500940][T17276] "syz.2.3352" (17276) uses obsolete ecb(arc4) skcipher
[  286.223838][T17280] netlink: 'syz.2.3354': attribute type 2 has an invalid length.
[  286.226823][T17280] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3354'.
[  286.317988][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'.
[  286.359805][T17296] tipc: MTU too low for tipc bearer
[  286.373554][T17296] gre1: entered allmulticast mode
[  286.373621][T17298] netlink: 'syz.0.3359': attribute type 39 has an invalid length.
[  286.641675][T17320] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3364'.
[  286.872821][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3369'.
[  286.885607][T17340] chnl_net:caif_netlink_parms(): no params data found
[  286.914625][T17343] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  287.034164][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'.
[  287.246687][T17364] xt_l2tp: invalid flags combination: 4
[  287.470881][T17388] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  287.473755][T17388] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  288.935304][ T5840] Bluetooth: hci0: command tx timeout
[  323.854067][T17393] netlink: 'syz.1.3389': attribute type 5 has an invalid length.
[  323.869643][T17393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3389'.
[  323.874936][T17394] netlink: 'syz.2.3390': attribute type 1 has an invalid length.
[  323.884535][T17394] netlink: 'syz.2.3390': attribute type 3 has an invalid length.
[  323.888224][T17394] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3390'.
[  323.943476][T17398] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  323.982336][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'.
[  324.110544][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  324.117834][T17426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3398'.
[  324.202156][T17434] nbd: must specify an index to disconnect
[  324.211441][T17434] xt_hashlimit: invalid rate
[  324.254019][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3402'.
[  324.274126][T17436] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  324.321649][T17443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  324.324011][T17443] IPv6: NLM_F_CREATE should be set when creating new route
[  324.326448][T17443] IPv6: NLM_F_CREATE should be set when creating new route
[  324.334061][T17443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  324.382210][T17449] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3405'.
[  324.678771][T17474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.682034][T17474] syzkaller0: entered promiscuous mode
[  324.683987][T17474] syzkaller0: entered allmulticast mode
[  324.700645][T17474] tipc: Resetting bearer <eth:syzkaller0>
[  324.914203][T17494] vlan5: entered allmulticast mode
[  325.130239][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'.
[  325.133031][T17524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'.
[  325.144655][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'.
[  325.330952][T17540] netlink: 'syz.2.3431': attribute type 10 has an invalid length.
[  325.434672][T17559] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  325.495998][T17472] tipc: Resetting bearer <eth:syzkaller0>
[  325.507320][T17472] tipc: Disabling bearer <eth:syzkaller0>
[  325.679144][T17583] wg2: entered promiscuous mode
[  325.681348][T17583] wg2: entered allmulticast mode
[  325.688108][   T52] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  325.773206][T17594] pim6reg1: entered promiscuous mode
[  325.775438][T17594] pim6reg1: entered allmulticast mode
[  325.829607][T17598] netlink: 'syz.2.3449': attribute type 30 has an invalid length.
[  325.993327][T17612] netlink: 'syz.1.3451': attribute type 9 has an invalid length.
[  326.005785][T17612] netlink: 'syz.1.3451': attribute type 7 has an invalid length.
[  326.008794][T17612] netlink: 'syz.1.3451': attribute type 8 has an invalid length.
[  326.184252][T17628] netlink: 'syz.1.3458': attribute type 1 has an invalid length.
[  326.187947][T17628] netlink: 'syz.1.3458': attribute type 10 has an invalid length.
[  326.194961][T17632] tun0: tun_chr_ioctl cmd 35111
[  326.372696][T17654] macsec3: entered promiscuous mode
[  326.374490][T17654] bridge0: entered promiscuous mode
[  326.377072][T17654] bridge0: port 1(macsec3) entered blocking state
[  326.379293][T17654] bridge0: port 1(macsec3) entered disabled state
[  326.381418][T17654] macsec3: entered allmulticast mode
[  326.383104][T17654] bridge0: entered allmulticast mode
[  326.388739][T17654] macsec3: left allmulticast mode
[  326.390313][T17654] bridge0: left allmulticast mode
[  326.395016][T17654] bridge0: left promiscuous mode
[  326.749690][T17690] syzkaller0: entered promiscuous mode
[  326.752011][T17690] syzkaller0: entered allmulticast mode
[  327.556749][T17712] tls_set_device_offload: netdev not found
[  327.782935][T17737] pimreg: entered allmulticast mode
[  327.785700][T17737] pimreg: left allmulticast mode
[  328.295600][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  328.489582][T17789] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.562531][T17789] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.633228][T17789] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.686565][T17789] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.762374][T17789] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.799914][T17789] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.828352][T17789] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.832140][T17820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.835925][T17820] syzkaller0: entered promiscuous mode
[  328.836908][T17819] Cannot find set identified by id 0 to match
[  328.837771][T17820] syzkaller0: entered allmulticast mode
[  328.846807][T17789] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.877134][T17817] tipc: Resetting bearer <eth:syzkaller0>
[  328.894789][T17817] tipc: Disabling bearer <eth:syzkaller0>
[  329.029085][T17826] __nla_validate_parse: 14 callbacks suppressed
[  329.029155][T17826] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3513'.
[  329.272994][T17852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'.
[  329.321184][T17856] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3524'.
[  329.480906][T17872] validate_nla: 2 callbacks suppressed
[  329.480924][T17872] netlink: 'syz.0.3529': attribute type 12 has an invalid length.
[  329.498098][T17872] macsec3: entered promiscuous mode
[  329.500332][T17872] batadv0: entered promiscuous mode
[  329.505942][T17872] batadv0: left promiscuous mode
[  329.524830][T17874] bond0: (slave rose0): Error: Device can not be enslaved while up
[  329.619046][T17878] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3532'.
[  329.651925][T17880] SET target dimension over the limit!
[  329.799320][T17886] netlink: 'syz.0.3536': attribute type 1 has an invalid length.
[  329.802654][T17886] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3536'.
[  329.861657][T17895] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.3538'.
[  330.061523][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3544'.
[  330.225926][T17928] netlink: 'syz.2.3549': attribute type 322 has an invalid length.
[  330.231672][T17926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'.
[  330.365696][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'.
[  331.183596][T17978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3564'.
[  331.367370][T17996] xfrm2: entered promiscuous mode
[  331.369594][T17996] xfrm2: entered allmulticast mode
[  331.422501][   T52] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  332.491734][T18026] netlink: 'syz.2.3576': attribute type 2 has an invalid length.
[  332.859043][T18047] netlink: 'syz.1.3584': attribute type 5 has an invalid length.
[  332.999440][T18063] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  333.005427][T18063] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  333.018488][T18063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.361019][T18077] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  333.541026][T18093] netlink: 'syz.2.3594': attribute type 1 has an invalid length.
[  333.543752][T18093] netlink: 'syz.2.3594': attribute type 1 has an invalid length.
[  334.902958][T18138] veth13: entered promiscuous mode
[  334.952336][T18145] __nla_validate_parse: 3 callbacks suppressed
[  334.952348][T18145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3603'.
[  334.977955][T18143] syzkaller0: entered promiscuous mode
[  334.979642][T18143] syzkaller0: entered allmulticast mode
[  334.987948][T18145] hsr_slave_0: left promiscuous mode
[  334.990486][T18145] hsr_slave_1: left promiscuous mode
[  334.990506][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'.
[  336.530284][T18165] netlink: 'syz.2.3616': attribute type 58 has an invalid length.
[  336.533060][T18165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3616'.
[  336.547191][T16258] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  336.559287][T18159] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.563047][T18159] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.566765][T18159] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.569433][T18159] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.692207][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3620'.
[  336.692208][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3620'.
[  336.771847][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'.
[  336.778270][T18183] openvswitch: netlink: Unknown nsh attribute 0
[  336.782293][T18183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.840427][T18192] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  336.894259][T18200] x_tables: duplicate underflow at hook 1
[  336.908971][T18201] x_tables: duplicate underflow at hook 1
[  336.969929][T18210] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3632'.
[  336.979952][T18210] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.3632'.
[  336.999066][T18208] 8021q: adding VLAN 0 to HW filter on device bond7
[  337.001844][T18208] bridge0: port 1(bond7) entered blocking state
[  337.004377][T18208] bridge0: port 1(bond7) entered disabled state
[  337.007096][T18208] bond7: entered allmulticast mode
[  337.010360][T18208] bond7: entered promiscuous mode
[  337.014057][T18210] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3632'.
[  337.049599][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3631'.
[  337.269309][T18233] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  337.469037][T18260] netlink: 'syz.1.3647': attribute type 1 has an invalid length.
[  337.644954][T18270] 8021q: adding VLAN 0 to HW filter on device bond8
[  337.650533][T18270] bridge0: port 2(bond8) entered blocking state
[  337.653042][T18270] bridge0: port 2(bond8) entered disabled state
[  337.656372][T18270] bond8: entered allmulticast mode
[  337.660777][T18270] bond8: entered promiscuous mode
[  337.767016][T18278] block nbd1: Unsupported socket: shutdown callout must be supported.
[  337.817947][T18280] netlink: 'syz.0.3652': attribute type 1 has an invalid length.
[  337.888830][T18286] netlink: 'syz.0.3654': attribute type 10 has an invalid length.
[  337.888930][T18287] netlink: 'syz.0.3654': attribute type 10 has an invalid length.
[  337.891850][T18286] team0: left allmulticast mode
[  337.902061][T18286] bond0: left allmulticast mode
[  337.904903][T18286] batman_adv: batadv0: Adding interface: team0
[  337.913813][T18286] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.924763][T18286] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  338.841750][T18374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.845699][T18373] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.851863][T18366] syzkaller0: entered promiscuous mode
[  338.854167][T18366] syzkaller0: entered allmulticast mode
[  338.873464][T18366] tipc: Resetting bearer <eth:syzkaller0>
[  338.886943][T18361] tipc: Resetting bearer <eth:syzkaller0>
[  338.909728][T18361] tipc: Disabling bearer <eth:syzkaller0>
[  339.039596][T18388] netlink: 'syz.2.3681': attribute type 3 has an invalid length.
[  339.300494][T18410] xt_hashlimit: size too large, truncated to 1048576
[  339.420663][T18418] netlink: 'syz.0.3690': attribute type 15 has an invalid length.
[  339.629930][T18433] netlink: 'syz.1.3697': attribute type 1 has an invalid length.
[  339.641466][T18433] netlink: 'syz.1.3697': attribute type 1 has an invalid length.
[  340.079372][T18462] __nla_validate_parse: 31 callbacks suppressed
[  340.079389][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3708'.
[  340.310973][T18472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3711'.
[  340.347091][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'.
[  340.351072][T18474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3712'.
[  340.684586][T18489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3714'.
[  340.793079][T18491] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.3716'.
[  340.797890][T18491] netlink: zone id is out of range
[  340.800332][T18491] netlink: zone id is out of range
[  340.802651][T18491] netlink: zone id is out of range
[  340.804925][T18491] netlink: zone id is out of range
[  340.810610][T18491] netlink: zone id is out of range
[  341.002875][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'.
[  341.013730][T18501] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3719'.
[  341.020430][T18501] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  341.261147][T18514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3723'.
[  341.269691][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'.
[  341.529249][T18534] netlink: 'syz.0.3731': attribute type 1 has an invalid length.
[  341.535674][T18534] netlink: 'syz.0.3731': attribute type 1 has an invalid length.
[  341.699461][T18548] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  341.879503][T18561] xt_CT: You must specify a L4 protocol and not use inversions on it
[  341.929579][T18567] netlink: 'syz.0.3741': attribute type 1 has an invalid length.
[  342.491721][T18600] set match dimension is over the limit!
[  342.624827][T18607] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  342.811055][T18618] netlink: 'syz.2.3756': attribute type 1 has an invalid length.
[  342.831450][T18618] 8021q: adding VLAN 0 to HW filter on device bond18
[  342.840177][T18618] erspan0: entered allmulticast mode
[  342.846821][T18618] bond18: (slave erspan0): making interface the new active one
[  342.852368][T18618] bond18: (slave erspan0): Enslaving as an active interface with an up link
[  342.932824][T18583] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  344.120521][T18679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.322959][T18691] xt_SECMARK: invalid mode: 0
[  344.375656][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  344.727465][T18720] syz.1.3788: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  344.733283][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.1.3788 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  344.733309][T18720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  344.733320][T18720] Call Trace:
[  344.733329][T18720]  <TASK>
[  344.733339][T18720]  dump_stack_lvl+0x189/0x250
[  344.733369][T18720]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.733388][T18720]  ? __pfx__printk+0x10/0x10
[  344.733412][T18720]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  344.733433][T18720]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  344.733455][T18720]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  344.733479][T18720]  warn_alloc+0x214/0x310
[  344.733494][T18720]  ? stack_depot_save_flags+0x40/0x900
[  344.733516][T18720]  ? __pfx_warn_alloc+0x10/0x10
[  344.733533][T18720]  ? kasan_save_track+0x4f/0x80
[  344.733554][T18720]  ? xskq_create+0x56/0x170
[  344.733568][T18720]  ? xsk_init_queue+0xb0/0x110
[  344.733579][T18720]  ? xsk_setsockopt+0x43f/0x710
[  344.733600][T18720]  ? do_sock_setsockopt+0x17c/0x1b0
[  344.733618][T18720]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  344.733638][T18720]  ? do_syscall_64+0xfa/0x3b0
[  344.733655][T18720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.733678][T18720]  __vmalloc_node_range_noprof+0x125/0x12f0
[  344.733725][T18720]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  344.733752][T18720]  ? __kasan_kmalloc+0x93/0xb0
[  344.733774][T18720]  vmalloc_user_noprof+0xad/0xf0
[  344.733797][T18720]  ? xskq_create+0xbf/0x170
[  344.733811][T18720]  xskq_create+0xbf/0x170
[  344.733837][T18720]  xsk_init_queue+0xb0/0x110
[  344.733856][T18720]  xsk_setsockopt+0x43f/0x710
[  344.733883][T18720]  ? __pfx_xsk_setsockopt+0x10/0x10
[  344.733909][T18720]  ? __fget_files+0x2a/0x420
[  344.733924][T18720]  ? aa_sock_opt_perm+0x74/0x110
[  344.733944][T18720]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  344.733960][T18720]  ? __pfx_xsk_setsockopt+0x10/0x10
[  344.733982][T18720]  do_sock_setsockopt+0x17c/0x1b0
[  344.734004][T18720]  __x64_sys_setsockopt+0x13f/0x1b0
[  344.734027][T18720]  do_syscall_64+0xfa/0x3b0
[  344.734040][T18720]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.734089][T18720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.734105][T18720]  ? exc_page_fault+0x9f/0xf0
[  344.734122][T18720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.734136][T18720] RIP: 0033:0x7fe8c458e9a9
[  344.734153][T18720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.734167][T18720] RSP: 002b:00007fe8c5388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  344.734184][T18720] RAX: ffffffffffffffda RBX: 00007fe8c47b5fa0 RCX: 00007fe8c458e9a9
[  344.734197][T18720] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  344.734207][T18720] RBP: 00007fe8c4610d69 R08: 0000000000000004 R09: 0000000000000000
[  344.734218][T18720] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.734227][T18720] R13: 0000000000000000 R14: 00007fe8c47b5fa0 R15: 00007ffead996038
[  344.734252][T18720]  </TASK>
[  344.734259][T18720] Mem-Info:
[  344.852468][T18720] active_anon:5303 inactive_anon:0 isolated_anon:0
[  344.852468][T18720]  active_file:1430 inactive_file:38306 isolated_file:0
[  344.852468][T18720]  unevictable:1768 dirty:112 writeback:0
[  344.852468][T18720]  slab_reclaimable:10365 slab_unreclaimable:96840
[  344.852468][T18720]  mapped:18306 shmem:2473 pagetables:1145
[  344.852468][T18720]  sec_pagetables:0 bounce:0
[  344.852468][T18720]  kernel_misc_reclaimable:0
[  344.852468][T18720]  free:249138 free_pcp:18465 free_cma:0
[  344.875327][T18720] Node 0 active_anon:14768kB inactive_anon:0kB active_file:4376kB inactive_file:50636kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28072kB dirty:272kB writeback:0kB shmem:4900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8812kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.885623][T18720] Node 1 active_anon:6512kB inactive_anon:0kB active_file:1344kB inactive_file:102588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45152kB dirty:176kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5208kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  344.914421][T18720] Node 0 DMA free:15336kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  344.926359][T18720] lowmem_reserve[]: 0 812 812 812 812
[  344.928526][T18720] Node 0 DMA32 free:336268kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14768kB inactive_anon:0kB active_file:4376kB inactive_file:50636kB unevictable:3536kB writepending:272kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:29116kB local_pcp:17608kB free_cma:0kB
[  344.946147][T18731] net_ratelimit: 4080 callbacks suppressed
[  344.946160][T18731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.982373][T18720] lowmem_reserve[]: 0 0 0 0 0
[  344.983921][T18720] Node 1 DMA32 free:405244kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8308kB local_pcp:8308kB free_cma:0kB
[  344.999476][T18720] lowmem_reserve[]: 0 0 854 854 854
[  345.001310][T18720] Node 1 Normal free:239160kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6308kB inactive_anon:0kB active_file:1344kB inactive_file:102588kB unevictable:3536kB writepending:176kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38144kB local_pcp:20360kB free_cma:0kB
[  345.016543][T18720] lowmem_reserve[]: 0 0 0 0 0
[  345.018246][T18720] Node 0 DMA: 6*4kB (U) 6*8kB (U) 6*16kB (U) 6*32kB (U) 6*64kB (U) 6*128kB (U) 6*256kB (U) 6*512kB (U) 5*1024kB (U) 2*2048kB (U) 0*4096kB = 15336kB
[  345.023313][T18720] Node 0 DMA32: 105*4kB (UM) 221*8kB (UME) 460*16kB (UM) 543*32kB (UME) 290*64kB (UME) 251*128kB (UM) 176*256kB (UME) 131*512kB (UM) 92*1024kB (UME) 5*2048kB (ME) 10*4096kB (M) = 335148kB
[  345.030118][T18720] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 96*4096kB (UM) = 405244kB
[  345.035519][T18720] Node 1 Normal: 536*4kB (UME) 851*8kB (UM) 932*16kB (UME) 415*32kB (UME) 465*64kB (UME) 176*128kB (UME) 79*256kB (UME) 63*512kB (UME) 79*1024kB (UM) 8*2048kB (UM) 0*4096kB = 239192kB
[  345.041058][T18720] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  345.043997][T18720] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  345.046968][T18720] 42158 total pagecache pages
[  345.061209][T18720] 0 pages in swap cache
[  345.062674][T18720] Free swap  = 124996kB
[  345.064136][T18720] Total swap = 124996kB
[  345.073441][T18720] 786301 pages RAM
[  345.075933][T18720] 0 pages HighMem/MovableOnly
[  345.077980][T18720] 241056 pages reserved
[  345.079868][T18720] 0 pages cma reserved
[  345.105500][T18740] __nla_validate_parse: 54 callbacks suppressed
[  345.105519][T18740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3792'.
[  345.111604][T18740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3792'.
[  345.141682][   T12] tipc: Subscription rejected, illegal request
[  345.297774][T18757] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  345.500617][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3805'.
[  345.506275][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3805'.
[  345.553595][T18775] sctp: [Deprecated]: syz.1.3804 (pid 18775) Use of struct sctp_assoc_value in delayed_ack socket option.
[  345.553595][T18775] Use struct sctp_sack_info instead
[  345.880528][T18798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3808'.
[  346.060334][T18815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.166591][T18821] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3810'.
[  346.169289][T18821] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3810'.
[  346.225592][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'.
[  346.229046][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3811'.
[  346.266469][T18824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3811'.
[  346.639305][T18847] netlink: 'syz.1.3816': attribute type 14 has an invalid length.
[  346.643374][T18847] netlink: 'syz.1.3816': attribute type 14 has an invalid length.
[  346.958467][T18856] IPVS: Unknown mcast interface: vcan0
[  347.512911][T18904] x_tables: duplicate underflow at hook 1
[  347.851804][T18925] wireguard0: entered promiscuous mode
[  347.854055][T18925] wireguard0: entered allmulticast mode
[  348.726474][T18970] netlink: 'syz.1.3847': attribute type 13 has an invalid length.
[  384.262320][T19010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.266851][T19010] syzkaller0: entered promiscuous mode
[  384.269074][T19010] syzkaller0: entered allmulticast mode
[  384.275684][T19010] tipc: Resetting bearer <eth:syzkaller0>
[  384.290224][T19013] __nla_validate_parse: 9 callbacks suppressed
[  384.290250][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3858'.
[  384.332201][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3857'.
[  384.347936][T19010] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3857'.
[  384.348917][T19013] delete_channel: no stack
[  384.353538][T19009] tipc: Resetting bearer <eth:syzkaller0>
[  384.369279][T19009] tipc: Disabling bearer <eth:syzkaller0>
[  384.621441][T19037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3864'.
[  384.701852][T19041] netlink: 'syz.2.3865': attribute type 4 has an invalid length.
[  384.813006][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'.
[  384.819190][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'.
[  384.822754][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'.
[  385.145469][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'.
[  385.301726][T19066] x_tables: unsorted entry at hook 1
[  385.326076][T19066] _Z`Ԁ@: entered promiscuous mode
[  385.550623][T19082] --map-set only usable from mangle table
[  385.861654][T19100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3885'.
[  385.864500][T19098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3884'.
[  385.883231][T19098] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  386.104171][T19107] team0: Port device geneve0 removed
[  386.107997][T19107] batman_adv: batadv0: Removing interface: macvlan4
[  386.112564][T19107] team0: Port device bridge7 removed
[  386.114576][T19107] bond7: left allmulticast mode
[  386.118870][T19107] bond7: left promiscuous mode
[  386.120931][T19107] bridge0: port 1(bond7) entered disabled state
[  386.129261][T19107] bond8: left allmulticast mode
[  386.130818][T19107] bond8: left promiscuous mode
[  386.132489][T19107] bridge0: port 2(bond8) entered disabled state
[  386.142582][T19107] team0: Unable to change to the same mode the team is in
[  386.150517][T19109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.265877][T19118] netlink: 'syz.2.3890': attribute type 1 has an invalid length.
[  386.324646][T19120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.329113][T19120] syzkaller0: entered promiscuous mode
[  386.330759][T19120] syzkaller0: entered allmulticast mode
[  386.341294][T19120] tipc: Resetting bearer <eth:syzkaller0>
[  386.344444][T19119] tipc: Resetting bearer <eth:syzkaller0>
[  386.358822][T19119] tipc: Disabling bearer <eth:syzkaller0>
[  386.952328][T19173] netlink: 'syz.2.3906': attribute type 1 has an invalid length.
[  386.961994][T19173] netlink: 'syz.2.3906': attribute type 2 has an invalid length.
[  386.983462][T19175] netem: change failed
[  387.190749][T19194] tipc: Enabled bearer <eth:vlan0>, priority 18
[  387.255527][T19194] tipc: New replicast peer: 255.255.255.255
[  387.258731][T19194] tipc: Enabled bearer <udp:syz2>, priority 10
[  387.261736][T19194] tipc: Disabling bearer <udp:syz2>
[  387.370263][T19202] netlink: 'syz.2.3915': attribute type 49 has an invalid length.
[  387.378132][T19202] 0: renamed from hsr0
[  387.382690][T19202] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  387.388447][T19202] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  387.394212][T19202] 0: entered allmulticast mode
[  387.396461][T19202] hsr_slave_0: entered allmulticast mode
[  387.400542][T19202] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  387.540057][T19208] sctp: [Deprecated]: syz.2.3918 (pid 19208) Use of int in maxseg socket option.
[  387.540057][T19208] Use struct sctp_assoc_value instead
[  387.774854][T19224] netlink: 'syz.0.3924': attribute type 6 has an invalid length.
[  388.018518][T19254] netlink: 'syz.0.3934': attribute type 2 has an invalid length.
[  388.021887][T19254] netlink: 'syz.0.3934': attribute type 1 has an invalid length.
[  388.492070][T19289] vlan4: entered promiscuous mode
[  388.494240][T19289] bridge0: entered promiscuous mode
[  388.636296][T19298] xt_hashlimit: size too large, truncated to 1048576
[  388.691661][T19300] xt_bpf: check failed: parse error
[  388.998433][T19308] Cannot find del_set index 2 as target
[  389.055769][T19311] netlink: 'syz.0.3951': attribute type 20 has an invalid length.
[  389.290498][T19325] netlink: 'syz.0.3955': attribute type 20 has an invalid length.
[  389.498994][T19338] __nla_validate_parse: 19 callbacks suppressed
[  389.499013][T19338] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3960'.
[  389.505407][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'.
[  389.509038][T19338] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3960'.
[  389.512509][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'.
[  389.516242][T19338] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3960'.
[  389.616467][T19342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3962'.
[  389.633773][T19345] gre0: Master is either lo or non-ether device
[  389.761465][T19358] validate_nla: 1 callbacks suppressed
[  389.761484][T19358] netlink: 'syz.1.3966': attribute type 4 has an invalid length.
[  389.797442][T19361] netlink: 'syz.2.3965': attribute type 1 has an invalid length.
[  389.818475][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'.
[  389.883862][T19366] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.889804][T19368] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  389.899323][T19366] syzkaller0: entered promiscuous mode
[  389.905515][T19366] syzkaller0: entered allmulticast mode
[  389.937022][T19366] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.3968'.
[  389.950650][T19368] tipc: Resetting bearer <eth:syzkaller0>
[  389.954918][T19365] tipc: Resetting bearer <eth:syzkaller0>
[  389.969047][T19365] tipc: Disabling bearer <eth:syzkaller0>
[  390.031019][T19375] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3970'.
[  390.084252][T19377] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3971'.
[  390.648923][T19404] netlink: zone id is out of range
[  390.650741][T19404] netlink: zone id is out of range
[  390.652512][T19404] netlink: zone id is out of range
[  390.654355][T19404] netlink: zone id is out of range
[  390.656294][T19404] netlink: zone id is out of range
[  390.658148][T19404] netlink: zone id is out of range
[  390.659871][T19404] netlink: zone id is out of range
[  390.661773][T19404] netlink: zone id is out of range
[  391.472111][T19435] netlink: 'syz.1.3987': attribute type 3 has an invalid length.
[  391.528011][T19437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  391.531794][T19437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  391.569445][T19441] netlink: 'syz.1.3989': attribute type 1 has an invalid length.
[  392.508585][T19528] smc: removing ib device syz2
[  393.315464][T19548] xt_recent: Unsupported userspace flags (00000048)
[  393.839721][T19582] veth0_vlan: entered allmulticast mode
[  393.854245][T19582] : renamed from vlan0
[  394.242466][T19605] netlink: 'syz.2.4034': attribute type 12 has an invalid length.
[  394.368648][T19613] net_ratelimit: 4054 callbacks suppressed
[  394.368669][T19613] openvswitch: netlink: IPv4 tun info is not correct
[  394.392840][T19613] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  394.546552][T19622] __nla_validate_parse: 18 callbacks suppressed
[  394.546566][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'.
[  394.611010][T19625] syzkaller0: entered promiscuous mode
[  394.613347][T19625] syzkaller0: entered allmulticast mode
[  394.967879][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4041'.
[  395.050573][T19634] netlink: 'syz.0.4041': attribute type 16 has an invalid length.
[  395.053073][T19634] netlink: 'syz.0.4041': attribute type 17 has an invalid length.
[  395.494055][T19641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'.
[  395.501512][T19641] nbd: must specify a size in bytes for the device
[  396.667138][T19634] 8021q: adding VLAN 0 to HW filter on device team0
[  396.669780][T19634] batman_adv: batadv0: Interface activated: team0
[  396.674484][T19634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  396.683595][T19650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4045'.
[  396.819983][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'.
[  396.879595][T19660] netlink: 'syz.1.4048': attribute type 21 has an invalid length.
[  396.882804][T19660] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4048'.
[  396.888102][T19660] netlink: 'syz.1.4048': attribute type 5 has an invalid length.
[  396.890921][T19660] netlink: 'syz.1.4048': attribute type 6 has an invalid length.
[  396.893714][T19660] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4048'.
[  397.080171][T19684] sctp: [Deprecated]: syz.1.4052 (pid 19684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.080171][T19684] Use struct sctp_sack_info instead
[  397.331214][T19713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4061'.
[  397.431221][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4059'.
[  397.453335][T19722] vlan3: entered promiscuous mode
[  397.456872][T19722] bond0: entered promiscuous mode
[  397.574450][T19734] openvswitch: netlink: Actions may not be safe on all matching packets
[  397.583974][T19734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4067'.
[  397.587183][T19734] netlink: 'syz.0.4067': attribute type 3 has an invalid length.
[  397.589648][T19734] netlink: 'syz.0.4067': attribute type 2 has an invalid length.
[  397.592761][T19734] netlink: 'syz.0.4067': attribute type 2 has an invalid length.
[  397.824515][T19754] netlink: 'syz.0.4072': attribute type 1 has an invalid length.
[  398.068724][T19769] netlink: 'syz.0.4077': attribute type 25 has an invalid length.
[  398.650621][T19804] wireguard0: entered promiscuous mode
[  398.652360][T19804] wireguard0: entered allmulticast mode
[  398.834065][T19810] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  399.032783][ T9876] hid-generic 0005:16C0:05DF.0005: item fetching failed at offset 0/2
[  399.037065][ T9876] hid-generic 0005:16C0:05DF.0005: probe with driver hid-generic failed with error -22
[  399.184471][T19845] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  399.190637][T19845] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  399.194069][T19845] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  399.200888][T19845] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  399.207714][T19845] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  399.443995][T19858] openvswitch: netlink: Actions may not be safe on all matching packets
[  399.777173][T19879] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.849743][T19879] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.894416][T19894] __nla_validate_parse: 13 callbacks suppressed
[  399.894436][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4111'.
[  399.896354][T19895] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.4112'.
[  399.903664][T19894] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4111'.
[  399.910565][T19879] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.918648][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4112'.
[  399.951170][T19899] erspan0: left allmulticast mode
[  399.957460][T19899] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4113'.
[  399.960331][T19899] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  399.973609][T19879] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.996879][ T5861] bond18: (slave erspan0): link status definitely down, disabling slave
[  400.001838][ T5861] bond18: now running without any active interface!
[  400.106411][T19879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.109444][T19906] syzkaller1: entered promiscuous mode
[  400.111342][T19906] syzkaller1: entered allmulticast mode
[  400.121345][T19879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.168419][T19879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.199704][T19879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.280768][T19916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4119'.
[  400.284359][T19916] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4119'.
[  400.349299][T19916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4119'.
[  400.360679][T19922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4123'.
[  400.424820][T19934] validate_nla: 3 callbacks suppressed
[  400.424835][T19934] netlink: 'syz.1.4125': attribute type 1 has an invalid length.
[  400.435705][T19932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4126'.
[  400.443423][T19932] x_tables: unsorted underflow at hook 4
[  400.459494][T19934] 8021q: adding VLAN 0 to HW filter on device bond10
[  400.809049][T19957] openvswitch: netlink: IPv4 tun info is not correct
[  402.478181][T19988] netlink: 'syz.0.4142': attribute type 58 has an invalid length.
[  402.653795][T20003] netlink: 'syz.0.4147': attribute type 8 has an invalid length.
[  403.052333][T20023] netlink: 'syz.2.4155': attribute type 11 has an invalid length.
[  403.460776][T20053] openvswitch: netlink: Flow key attr not present in new flow.
[  404.047278][T20090] IPv6: sit4: Disabled Multicast RS
[  404.050785][T20090] sit4: entered allmulticast mode
[  404.201215][T20101] vlan0: entered promiscuous mode
[  404.645492][T20134] netlink: 'syz.2.4189': attribute type 12 has an invalid length.
[  405.521537][T20149] set match dimension is over the limit!
[  405.585782][T20155] __nla_validate_parse: 15 callbacks suppressed
[  405.585801][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4194'.
[  405.593354][T20155] netlink: 'syz.2.4194': attribute type 1 has an invalid length.
[  405.597345][T20155] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4194'.
[  405.713853][T20156] xt_policy: output policy not valid in PREROUTING and INPUT
[  405.713893][T20162] xt_policy: output policy not valid in PREROUTING and INPUT
[  406.140671][T20178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4199'.
[  406.145878][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4199'.
[  406.549805][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4204'.
[  406.678847][T20208] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4207'.
[  406.682106][T20208] netem: invalid attributes len -16
[  406.695247][T20208] netem: change failed
[  406.828822][T20219] netlink: 'syz.0.4209': attribute type 12 has an invalid length.
[  407.810747][T20246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4218'.
[  407.816859][T20246] xt_socket: unknown flags 0xd0
[  407.983671][T20261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4222'.
[  408.083969][T20264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.088413][T20264] syzkaller0: entered promiscuous mode
[  408.090182][T20264] syzkaller0: entered allmulticast mode
[  408.107823][T20264] tipc: Resetting bearer <eth:syzkaller0>
[  408.111272][T20263] tipc: Resetting bearer <eth:syzkaller0>
[  408.124714][T20263] tipc: Disabling bearer <eth:syzkaller0>
[  408.814798][T20280] netlink: 'syz.0.4228': attribute type 5 has an invalid length.
[  408.819269][T20280] netlink: 'syz.0.4228': attribute type 1 has an invalid length.
[  408.821556][T20280] netlink: 784 bytes leftover after parsing attributes in process `syz.0.4228'.
[  409.271036][T20312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4236'.
[  409.454702][T20317] netlink: 'syz.2.4238': attribute type 33 has an invalid length.
[  409.507671][T20320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.510501][T20320] syzkaller0: entered promiscuous mode
[  409.512480][T20320] syzkaller0: entered allmulticast mode
[  409.533844][T20320] tipc: Resetting bearer <eth:syzkaller0>
[  409.541459][T20322] netlink: 'syz.1.4240': attribute type 13 has an invalid length.
[  409.544545][T20322] netlink: 'syz.1.4240': attribute type 12 has an invalid length.
[  409.548959][T20319] tipc: Resetting bearer <eth:syzkaller0>
[  409.564808][T20319] tipc: Disabling bearer <eth:syzkaller0>
[  409.648985][T20326] : left promiscuous mode
[  409.803742][T20339] netlink: 'syz.1.4246': attribute type 1 has an invalid length.
[  409.830972][T20339] 8021q: adding VLAN 0 to HW filter on device bond11
[  410.117030][T20363] _Z`Ԁ@: entered promiscuous mode
[  410.162072][T20371] netlink: 'syz.0.4255': attribute type 1 has an invalid length.
[  410.431463][T20381] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  410.462265][T20381] tipc: Resetting bearer <eth:vlan0>
[  410.468210][T20381] team0: Port device bond0 removed
[  410.470776][T20381] batman_adv: batadv0: Interface deactivated: team0
[  410.473263][T20381] batman_adv: batadv0: Removing interface: team0
[  410.488863][T20381] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  410.498375][T20383] xt_CONNSECMARK: invalid mode: 254
[  410.500925][T20382] xt_CONNSECMARK: invalid mode: 254
[  410.731462][T20396] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  410.736171][T20397] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  410.901470][T20404] netlink: 'syz.2.4266': attribute type 4 has an invalid length.
[  410.938171][T20405] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  410.952669][T20405] __nla_validate_parse: 6 callbacks suppressed
[  410.952683][T20405] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.4265'.
[  410.998047][   T33] audit: type=1800 audit(1752860590.079:2): pid=20411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4268" name=37FFFF dev="tmpfs" ino=7609 res=0 errno=0
[  411.125666][T20420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4269'.
[  411.195969][T20428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4272'.
[  411.725794][T20481] netem: change failed
[  411.813056][T20489] netlink: 'syz.1.4292': attribute type 10 has an invalid length.
[  411.817444][T20489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4292'.
[  411.821994][T20489] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.825795][T20489] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.829269][T20489] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.832240][T20489] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.836932][T20489] team0: Port device geneve0 added
[  411.904238][T20496] netlink: 'syz.2.4295': attribute type 6 has an invalid length.
[  411.933572][T20498] batadv0: entered promiscuous mode
[  411.944609][T20498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.963222][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4294'.
[  412.018762][T20506] bond0: Unable to set up delay as MII monitoring is disabled
[  412.081821][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4298'.
[  412.454918][T20524] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  412.465425][T20524] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.4303'.
[  412.692320][ T5883] hid-generic 0005:15C2:5505.0006: item fetching failed at offset 0/2
[  412.698162][ T5883] hid-generic 0005:15C2:5505.0006: probe with driver hid-generic failed with error -22
[  413.168364][T20558] netlink: 'syz.2.4312': attribute type 10 has an invalid length.
[  413.171074][T20558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4312'.
[  413.176974][T20558] bridge0: port 1(veth0_vlan) entered blocking state
[  413.179391][T20558] bridge0: port 1(veth0_vlan) entered disabled state
[  413.184589][T20558] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  413.241677][T20561] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4313'.
[  413.706717][T20569] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  413.712263][T20569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.725261][T20569] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4315'.
[  413.974728][T20588] netlink: 'syz.0.4321': attribute type 20 has an invalid length.
[  414.106506][T20594] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  414.179811][T20596] netlink: 'syz.1.4324': attribute type 29 has an invalid length.
[  414.182258][T20598] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  414.186781][T20598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.187481][T20596] netlink: 'syz.1.4324': attribute type 29 has an invalid length.
[  414.307056][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  414.310731][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  414.319932][T20600] netlink: 'syz.2.4326': attribute type 1 has an invalid length.
[  414.319937][T20602] netlink: 'syz.2.4326': attribute type 1 has an invalid length.
[  414.366212][T20602] 8021q: adding VLAN 0 to HW filter on device bond19
[  414.498643][T20620] 
[  414.499632][T20620] ======================================================
[  414.502249][T20620] WARNING: possible circular locking dependency detected
[  414.504842][T20620] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  414.508009][T20620] ------------------------------------------------------
[  414.511477][T20620] syz.2.4329/20620 is trying to acquire lock:
[  414.513764][T20620] ffffffff8f6745d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  414.517279][T20620] 
[  414.517279][T20620] but task is already holding lock:
[  414.520087][T20620] ffff888034ef4570 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  414.520704][T20624] netlink: 'syz.1.4331': attribute type 4 has an invalid length.
[  414.523535][T20620] 
[  414.523535][T20620] which lock already depends on the new lock.
[  414.523535][T20620] 
[  414.523546][T20620] 
[  414.523546][T20620] the existing dependency chain (in reverse order) is:
[  414.523554][T20620] 
[  414.523554][T20620] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  414.523580][T20620]        lock_acquire+0x120/0x360
[  414.538067][T20620]        _raw_spin_lock_bh+0x36/0x50
[  414.540060][T20620]        nr_rt_device_down+0x12a/0x720
[  414.542107][T20620]        nr_device_event+0x137/0x150
[  414.544111][T20620]        notifier_call_chain+0x1b6/0x3e0
[  414.546285][T20620]        __dev_notify_flags+0x18d/0x2e0
[  414.548408][T20620]        netif_change_flags+0xe8/0x1a0
[  414.550505][T20620]        dev_change_flags+0x130/0x260
[  414.552654][T20620]        dev_ioctl+0x7b4/0x1150
[  414.554660][T20620]        sock_do_ioctl+0x22c/0x300
[  414.556718][T20620]        sock_ioctl+0x576/0x790
[  414.558670][T20620]        __se_sys_ioctl+0xfc/0x170
[  414.560617][T20620]        do_syscall_64+0xfa/0x3b0
[  414.562574][T20620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.565009][T20620] 
[  414.565009][T20620] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  414.567964][T20620]        lock_acquire+0x120/0x360
[  414.569896][T20620]        _raw_spin_lock_bh+0x36/0x50
[  414.571955][T20620]        nr_rt_device_down+0xa9/0x720
[  414.574129][T20620]        nr_device_event+0x137/0x150
[  414.576156][T20620]        notifier_call_chain+0x1b6/0x3e0
[  414.578312][T20620]        __dev_notify_flags+0x18d/0x2e0
[  414.580418][T20620]        netif_change_flags+0xe8/0x1a0
[  414.582482][T20620]        dev_change_flags+0x130/0x260
[  414.584520][T20620]        dev_ioctl+0x7b4/0x1150
[  414.586388][T20620]        sock_do_ioctl+0x22c/0x300
[  414.588365][T20620]        sock_ioctl+0x576/0x790
[  414.590234][T20620]        __se_sys_ioctl+0xfc/0x170
[  414.592163][T20620]        do_syscall_64+0xfa/0x3b0
[  414.594027][T20620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.596468][T20620] 
[  414.596468][T20620] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  414.599403][T20620]        validate_chain+0xb9b/0x2140
[  414.601377][T20620]        __lock_acquire+0xab9/0xd20
[  414.603350][T20620]        lock_acquire+0x120/0x360
[  414.605293][T20620]        _raw_spin_lock_bh+0x36/0x50
[  414.607375][T20620]        nr_rt_ioctl+0x390/0xd50
[  414.609294][T20620]        sock_do_ioctl+0xdc/0x300
[  414.611269][T20620]        sock_ioctl+0x576/0x790
[  414.613177][T20620]        __se_sys_ioctl+0xfc/0x170
[  414.615177][T20620]        do_syscall_64+0xfa/0x3b0
[  414.617128][T20620]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.619561][T20620] 
[  414.619561][T20620] other info that might help us debug this:
[  414.619561][T20620] 
[  414.623464][T20620] Chain exists of:
[  414.623464][T20620]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  414.623464][T20620] 
[  414.628764][T20620]  Possible unsafe locking scenario:
[  414.628764][T20620] 
[  414.631634][T20620]        CPU0                    CPU1
[  414.633728][T20620]        ----                    ----
[  414.635979][T20620]   lock(&nr_node->node_lock);
[  414.637867][T20620]                                lock(nr_node_list_lock);
[  414.640553][T20620]                                lock(&nr_node->node_lock);
[  414.642873][T20620]   lock(nr_neigh_list_lock);
[  414.644309][T20620] 
[  414.644309][T20620]  *** DEADLOCK ***
[  414.644309][T20620] 
[  414.647055][T20620] 2 locks held by syz.2.4329/20620:
[  414.649064][T20620]  #0: ffffffff8f674638 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  414.652773][T20620]  #1: ffff888034ef4570 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  414.656593][T20620] 
[  414.656593][T20620] stack backtrace:
[  414.658959][T20620] CPU: 1 UID: 0 PID: 20620 Comm: syz.2.4329 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  414.658980][T20620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  414.658991][T20620] Call Trace:
[  414.659000][T20620]  <TASK>
[  414.659008][T20620]  dump_stack_lvl+0x189/0x250
[  414.659034][T20620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.659051][T20620]  ? __pfx__printk+0x10/0x10
[  414.659069][T20620]  ? stack_trace_save+0x9c/0xe0
[  414.659095][T20620]  print_circular_bug+0x2ee/0x310
[  414.659118][T20620]  check_noncircular+0x134/0x160
[  414.659139][T20620]  validate_chain+0xb9b/0x2140
[  414.659165][T20620]  __lock_acquire+0xab9/0xd20
[  414.659182][T20620]  ? nr_rt_ioctl+0x390/0xd50
[  414.659198][T20620]  lock_acquire+0x120/0x360
[  414.659212][T20620]  ? nr_rt_ioctl+0x390/0xd50
[  414.659228][T20620]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  414.659249][T20620]  ? nr_rt_ioctl+0x390/0xd50
[  414.659264][T20620]  _raw_spin_lock_bh+0x36/0x50
[  414.659287][T20620]  ? nr_rt_ioctl+0x390/0xd50
[  414.659301][T20620]  nr_rt_ioctl+0x390/0xd50
[  414.659316][T20620]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  414.659339][T20620]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  414.659358][T20620]  ? apparmor_capable+0x137/0x1b0
[  414.659381][T20620]  ? capable+0x89/0xe0
[  414.659397][T20620]  ? nr_ioctl+0x1b1/0x3b0
[  414.659419][T20620]  sock_do_ioctl+0xdc/0x300
[  414.659437][T20620]  ? __pfx_sock_do_ioctl+0x10/0x10
[  414.659451][T20620]  ? __lock_acquire+0xab9/0xd20
[  414.659470][T20620]  sock_ioctl+0x576/0x790
[  414.659485][T20620]  ? __pfx_sock_ioctl+0x10/0x10
[  414.659500][T20620]  ? __fget_files+0x2a/0x420
[  414.659512][T20620]  ? __fget_files+0x3a0/0x420
[  414.659524][T20620]  ? __fget_files+0x2a/0x420
[  414.659536][T20620]  ? bpf_lsm_file_ioctl+0x9/0x20
[  414.659554][T20620]  ? __pfx_sock_ioctl+0x10/0x10
[  414.659568][T20620]  __se_sys_ioctl+0xfc/0x170
[  414.659585][T20620]  do_syscall_64+0xfa/0x3b0
[  414.659600][T20620]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.659616][T20620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.659630][T20620]  ? exc_page_fault+0x9f/0xf0
[  414.659645][T20620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.659659][T20620] RIP: 0033:0x7f31edb8e9a9
[  414.659674][T20620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.659689][T20620] RSP: 002b:00007f31eea0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  414.659706][T20620] RAX: ffffffffffffffda RBX: 00007f31eddb5fa0 RCX: 00007f31edb8e9a9
[  414.659719][T20620] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000010
[  414.659729][T20620] RBP: 00007f31edc10d69 R08: 0000000000000000 R09: 0000000000000000
[  414.659738][T20620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.659748][T20620] R13: 0000000000000000 R14: 00007f31eddb5fa0 R15: 00007ffc946c27d8
[  414.659765][T20620]  </TASK>
[  414.790257][T20619] caif:caif_disconnect_client(): nothing to disconnect

VM DIAGNOSIS:
17:43:13  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff9200073ff3c RBX=ffffc900039ff9ec RCX=55278bb2c7a24200 RDX=dffffc0000000000
RSI=ffffffff8222078e RDI=ffffc900039ff9e0 RBP=1ffff9200073ff3e RSP=ffffc900039ff8d8
R8 =ffffc900039ff9f0 R9 =0000000000000000 R10=ffffc900039ff978 R11=ffffffff81ad03a0
R12=0000000000000000 R13=1ffff9200073ff3d R14=ffffc900039ff9e8 R15=1ffff9200073ff3d
RIP=ffffffff81ad0442 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555583c68500 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffead994b18 CR3=0000000029274000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe8c4611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000187b RDI=000000000000187c RBP=00000000000003f8 RSP=ffffc90020e77150
R8 =ffff888107118237 R9 =1ffff11020e23046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8a0 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f31eea0a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f31eea09fc8 CR3=00000001070dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f31edd86478 00007f31edd86450 XMM03=00007f31edd86488 00007f31edd86480
XMM04=00007f31ee8ed100 00007f31edd86440 XMM05=00007f31edd86458 00007f31edd864a0
XMM06=00007f31edd86498 00007f31edd86490 XMM07=00007f31edd86488 00007f31edd86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f31edc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
