last executing test programs:

1.468792707s ago: executing program 1 (id=1990):
r0 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0xfdef)

1.468141474s ago: executing program 1 (id=1992):
syz_emit_ethernet(0x2b, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x9, 0x0, @opaque="8f"}}}}}, 0x0)

1.463452945s ago: executing program 1 (id=1994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x2, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0)

1.400338466s ago: executing program 1 (id=1995):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)

1.399743981s ago: executing program 1 (id=1997):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x1}, 0x18)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4008904}, 0x40841)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448c9, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r9, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES16=r1, @ANYRES64=r8], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000010)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x40000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0)

1.340094709s ago: executing program 1 (id=2000):
r0 = socket(0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000060000000800000008"], 0x48)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000e0f8ffffffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r1, 0x180000000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
socket$key(0xf, 0x3, 0x2)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)

482.115273ms ago: executing program 0 (id=2023):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x765a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff9500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff)
shutdown(r4, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r7 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000440)={<r8=>0x0, 0x100, 0x800000000000005c}, &(0x7f0000000400)=0xa)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={r8, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000780), 0x12)
bind$x25(r9, &(0x7f0000000080), 0x12)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000700)={'bond0\x00'})

301.967375ms ago: executing program 0 (id=2031):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @random="bdd1221610b5"}, 0x14)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x40044)

248.839128ms ago: executing program 2 (id=2032):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

197.618387ms ago: executing program 0 (id=2033):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0x40000000000000}, {0x8d, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@multicast2, 0x1, 0x32}, 0xa, @in6=@local, 0x1502, 0x3, 0x3, 0x39, 0xc36, 0xfffffffd, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)

134.0655ms ago: executing program 0 (id=2034):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0)

131.478696ms ago: executing program 2 (id=2035):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x10001, @ipv4={'\x00', '\xff\xff', @empty}, 0x800}}}, &(0x7f0000000340)=0x84)

118.768686ms ago: executing program 0 (id=2036):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}], 0x1c)

60.273595ms ago: executing program 2 (id=2037):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0)

60.111534ms ago: executing program 0 (id=2038):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
r2 = epoll_create1(0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004})

59.811336ms ago: executing program 2 (id=2039):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1800, 0x3}, 0x20)

269.108µs ago: executing program 2 (id=2040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000002030101000000000000000000000007080003400000000208000340000000050800034000000004080003400000000308000340000000020800010000000000080005"], 0x60}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000)

0s ago: executing program 2 (id=2041):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000180000000000010100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94"], 0x114}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6183' (ED25519) to the list of known hosts.
syzkaller login: [   40.806698][ T5792] cgroup: Unknown subsys name 'net'
[   40.931340][ T5792] cgroup: Unknown subsys name 'cpuset'
[   40.934404][ T5792] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.596028][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.909615][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.912875][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.915976][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.928352][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.931580][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.934612][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.937619][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.941658][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.950047][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.956814][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.959436][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.962142][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.974876][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.981463][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.986145][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.168559][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   46.177078][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   46.189548][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   46.258016][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.261752][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.264709][ T5848] bridge_slave_0: entered allmulticast mode
[   46.267778][ T5848] bridge_slave_0: entered promiscuous mode
[   46.292014][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.295092][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.298089][ T5848] bridge_slave_1: entered allmulticast mode
[   46.301994][ T5848] bridge_slave_1: entered promiscuous mode
[   46.305253][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.308191][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.311459][ T5844] bridge_slave_0: entered allmulticast mode
[   46.314285][ T5844] bridge_slave_0: entered promiscuous mode
[   46.316961][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.319210][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.321809][ T5844] bridge_slave_1: entered allmulticast mode
[   46.324123][ T5844] bridge_slave_1: entered promiscuous mode
[   46.342781][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.345122][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.347388][ T5854] bridge_slave_0: entered allmulticast mode
[   46.349626][ T5854] bridge_slave_0: entered promiscuous mode
[   46.361121][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.372870][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.375829][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.378751][ T5854] bridge_slave_1: entered allmulticast mode
[   46.382388][ T5854] bridge_slave_1: entered promiscuous mode
[   46.386394][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.395859][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.412951][ T5848] team0: Port device team_slave_0 added
[   46.416176][ T5848] team0: Port device team_slave_1 added
[   46.424466][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.451238][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.455817][ T5844] team0: Port device team_slave_0 added
[   46.458722][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.462588][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.473511][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.479740][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.485347][ T5844] team0: Port device team_slave_1 added
[   46.488306][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.491557][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.502267][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.533980][ T5854] team0: Port device team_slave_0 added
[   46.536685][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.539531][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.550472][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.554853][ T5854] team0: Port device team_slave_1 added
[   46.564156][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.566663][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.576630][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.597123][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.600340][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.611275][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.625603][ T5844] hsr_slave_0: entered promiscuous mode
[   46.628527][ T5844] hsr_slave_1: entered promiscuous mode
[   46.637055][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.640548][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.651288][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.665004][ T5848] hsr_slave_0: entered promiscuous mode
[   46.667855][ T5848] hsr_slave_1: entered promiscuous mode
[   46.671316][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   46.673646][ T5848] Cannot create hsr debugfs directory
[   46.711169][ T5854] hsr_slave_0: entered promiscuous mode
[   46.713272][ T5854] hsr_slave_1: entered promiscuous mode
[   46.715305][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   46.717158][ T5854] Cannot create hsr debugfs directory
[   46.830558][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.840887][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.849377][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.854351][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.879156][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.884537][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.892500][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.897097][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.919013][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.923656][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.929441][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.934458][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.937053][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.939458][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.941943][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.946473][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.959429][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.962250][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.964980][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.967286][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.983277][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.985959][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.988477][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.991055][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.022201][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.033670][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.045088][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.047730][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.050823][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.053942][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.056836][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.059393][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.072381][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   47.077848][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   47.085360][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.088283][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.093884][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.098289][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.100956][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.106234][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.108539][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.119127][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.121760][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.134370][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   47.146365][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.148876][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.159821][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.162441][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.272161][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.295650][ T5848] veth0_vlan: entered promiscuous mode
[   47.301210][ T5848] veth1_vlan: entered promiscuous mode
[   47.312265][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.336457][ T5848] veth0_macvtap: entered promiscuous mode
[   47.341720][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.347269][ T5848] veth1_macvtap: entered promiscuous mode
[   47.359048][ T5844] veth0_vlan: entered promiscuous mode
[   47.365860][ T5844] veth1_vlan: entered promiscuous mode
[   47.370381][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.379661][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.396008][ T5710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.401627][ T5854] veth0_vlan: entered promiscuous mode
[   47.406645][ T5710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.409502][ T5710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.418204][ T5710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.422755][ T5854] veth1_vlan: entered promiscuous mode
[   47.432062][ T5844] veth0_macvtap: entered promiscuous mode
[   47.437809][ T5844] veth1_macvtap: entered promiscuous mode
[   47.458541][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.474170][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.480240][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.483682][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.487255][ T5854] veth0_macvtap: entered promiscuous mode
[   47.503271][ T5854] veth1_macvtap: entered promiscuous mode
[   47.505974][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.509422][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.517237][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.523204][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.529320][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.533812][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.543110][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.546782][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.563812][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.567596][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.573534][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.582613][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.587453][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.594513][ T1923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.600462][ T1923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.631750][ T1923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.634742][ T1923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.662615][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.677449][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.708197][ T1923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.712697][ T1923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.744860][ T5925] bond0: (slave bond_slave_1): Releasing backup interface
[   47.757497][ T5929] veth0_to_bond: entered allmulticast mode
[   47.797907][ T5933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   47.826789][ T5937] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   47.842335][ T5937] Bluetooth: MGMT ver 1.23
[   47.941520][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   48.010539][ T5855] Bluetooth: hci2: command tx timeout
[   48.012296][ T5855] Bluetooth: hci1: command tx timeout
[   48.014398][ T5855] Bluetooth: hci0: command tx timeout
[   48.051968][ T5961] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.24'.
[   48.159417][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   48.269630][ T5987] openvswitch: netlink: IP tunnel dst address not specified
[   48.319570][ T5993] netlink: 'syz.1.39': attribute type 46 has an invalid length.
[   48.344071][ T5995] syzkaller0: entered promiscuous mode
[   48.346036][ T5995] syzkaller0: refused to change device tx_queue_len
[   48.374046][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'.
[   48.498526][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.671101][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'.
[   48.765170][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.773396][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'.
[   48.776974][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'.
[   48.829342][ T6056] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET)
[   48.974043][ T6074] syzkaller1: entered promiscuous mode
[   48.975960][ T6074] syzkaller1: entered allmulticast mode
[   50.090618][   T55] Bluetooth: hci0: command tx timeout
[   50.090632][ T5233] Bluetooth: hci2: command tx timeout
[   50.090666][ T5855] Bluetooth: hci1: command tx timeout
[   50.144364][ T6095] sock: sock_timestamping_bind_phc: sock not bind to device
[   50.286494][ T6110] netlink: 3 bytes leftover after parsing attributes in process `syz.0.92'.
[   50.295085][ T6110] tipc: Can't bind to reserved service type 2
[   50.323260][ T6112] netlink: 'syz.0.93': attribute type 21 has an invalid length.
[   50.325787][ T6112] netlink: 128 bytes leftover after parsing attributes in process `syz.0.93'.
[   50.328705][ T6112] netlink: 'syz.0.93': attribute type 4 has an invalid length.
[   50.331867][ T6112] netlink: 3 bytes leftover after parsing attributes in process `syz.0.93'.
[   50.444378][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'.
[   50.447621][ T6124] Zero length message leads to an empty skb
[   50.566444][ T6128] tipc: Started in network mode
[   50.568229][ T6128] tipc: Node identity fa21fa4b2fa5, cluster identity 4711
[   50.571487][ T6128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.574975][ T6130] netlink: 'syz.0.102': attribute type 21 has an invalid length.
[   50.578114][ T6127] tipc: Resetting bearer <eth:syzkaller0>
[   50.596066][ T6127] tipc: Disabling bearer <eth:syzkaller0>
[   50.602975][ T6130] netlink: 'syz.0.102': attribute type 5 has an invalid length.
[   50.606739][ T6130] netlink: 'syz.0.102': attribute type 6 has an invalid length.
[   50.953913][ T6164] netlink: 'syz.0.117': attribute type 12 has an invalid length.
[   50.957547][ T6164] netlink: 'syz.0.117': attribute type 29 has an invalid length.
[   50.962108][ T6161] tipc: Invalid UDP bearer configuration
[   50.962135][ T6161] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   50.995447][ T6156] "syz.2.114" (6156) uses obsolete ecb(arc4) skcipher
[   51.129266][ T6184] netlink: 'syz.0.124': attribute type 10 has an invalid length.
[   51.133111][ T6188] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   51.151897][ T6184] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   51.272153][ T6205] warning: `syz.2.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.364632][ T5879] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   51.368110][ T5879] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   51.376291][ T5879] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   51.379751][ T5879] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   51.717265][   T13] nci: nci_rx_work: unknown MT 0x1
[   52.003042][   T47] IPVS: starting estimator thread 0...
[   52.092013][ T6280] IPVS: using max 134 ests per chain, 321600 per kthread
[   52.171104][   T55] Bluetooth: hci1: command tx timeout
[   52.171170][ T5233] Bluetooth: hci2: command tx timeout
[   52.175352][ T5855] Bluetooth: hci0: command tx timeout
[   52.256741][   T13] IPVS: stop unused estimator thread 0...
[   53.003155][  T963] IPVS: starting estimator thread 0...
[   53.110488][ T6371] IPVS: using max 69 ests per chain, 165600 per kthread
[   53.224303][ T6399] bpq0: entered promiscuous mode
[   53.489279][ T6430] infiniband syz1: set active
[   53.491842][ T6430] infiniband syz1: added macvlan1
[   53.507511][ T6430] RDS/IB: syz1: added
[   53.508885][ T6430] smc: adding ib device syz1 with port count 1
[   53.514134][ T6430] smc:    ib device syz1 port 1 has pnetid 
[   53.677147][ T6435] tipc: Started in network mode
[   53.678837][ T6435] tipc: Node identity 080211000001, cluster identity 4711
[   53.681656][ T6435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.684763][ T6435] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   53.687407][ T6435] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   53.694656][ T6435] tipc: Resetting bearer <eth:syzkaller0>
[   54.250049][ T5855] Bluetooth: hci1: command tx timeout
[   54.255702][ T6459] __nla_validate_parse: 14 callbacks suppressed
[   54.255717][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   54.260063][ T5855] Bluetooth: hci0: command tx timeout
[   54.263816][ T5233] Bluetooth: hci2: command tx timeout
[   54.356107][ T6475] bridge_slave_0: default FDB implementation only supports local addresses
[   54.430355][ T6482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.518641][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.521663][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.596909][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.605880][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.772414][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.775750][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.778956][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.785875][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.813722][    T9] tipc: Node number set to 134418688
[   54.818540][ T6501] nbd: must specify an index to disconnect
[   55.112072][ T6547] dvmrp0: entered allmulticast mode
[   55.175384][ T6558] netlink: 'syz.1.292': attribute type 3 has an invalid length.
[   55.229471][ T6563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.295'.
[   55.281483][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.315182][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'.
[   55.318192][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[   55.327097][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.332683][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'.
[   55.336639][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.340570][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'.
[   55.344234][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.347800][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.373277][ T6585] gtp0: entered promiscuous mode
[   55.477778][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.312'.
[   55.631888][ T6619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'.
[   55.633541][ T6621] bridge_slave_0: left allmulticast mode
[   55.638012][ T6621] bridge_slave_0: left promiscuous mode
[   55.642722][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.646485][ T6621] bridge_slave_1: left allmulticast mode
[   55.648789][ T6621] bridge_slave_1: left promiscuous mode
[   55.652427][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.656685][ T6621] bond0: (slave bond_slave_0): Releasing backup interface
[   55.667096][ T6621] bond0: (slave bond_slave_1): Releasing backup interface
[   55.674348][ T6621] team0: Port device team_slave_0 removed
[   55.693239][ T6621] team0: Port device team_slave_1 removed
[   55.696006][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.699169][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.704895][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.708065][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.720268][ T6621] bond0: (slave wlan1): Releasing backup interface
[   55.730804][ T6627] vlan0: entered promiscuous mode
[   55.738135][ T6627] team0: Port device vlan0 added
[   55.752505][ T6619] smc: net device bond0 applied user defined pnetid SYZ2
[   55.765026][ T6619] smc: net device bond0 erased user defined pnetid SYZ2
[   55.802295][ T6637] netlink: 'syz.0.326': attribute type 21 has an invalid length.
[   55.805499][ T6637] netlink: 'syz.0.326': attribute type 22 has an invalid length.
[   55.808699][ T6637] netlink: 'syz.0.326': attribute type 23 has an invalid length.
[   55.814893][ T6637] netlink: 'syz.0.326': attribute type 25 has an invalid length.
[   55.818141][ T6637] netlink: 'syz.0.326': attribute type 26 has an invalid length.
[   55.821701][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'.
[   55.972917][ T6660] tipc: Started in network mode
[   55.974618][ T6660] tipc: Node identity 961ab356e595, cluster identity 4711
[   55.976984][ T6660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.981425][ T6660] syzkaller0: entered promiscuous mode
[   55.983594][ T6660] syzkaller0: entered allmulticast mode
[   55.992869][ T6660] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   56.003273][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'.
[   56.013945][ T6660] tipc: Resetting bearer <eth:syzkaller0>
[   56.018514][ T6659] tipc: Resetting bearer <eth:syzkaller0>
[   56.032367][ T6659] tipc: Disabling bearer <eth:syzkaller0>
[   56.298100][   T33] audit: type=1800 audit(1755863456.591:2): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.365" name="blkio.bfq.time_recursive" dev="tmpfs" ino=558 res=0 errno=0
[   56.319884][   T33] audit: type=1800 audit(1755863456.611:3): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.365" name="blkio.bfq.time_recursive" dev="tmpfs" ino=558 res=0 errno=0
[   56.339950][ T5855] Bluetooth: hci0: command tx timeout
[   56.354648][ T6726] sctp: [Deprecated]: syz.2.369 (pid 6726) Use of int in max_burst socket option deprecated.
[   56.354648][ T6726] Use struct sctp_assoc_value instead
[   56.597420][ T6765] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[   56.611952][ T6767] netlink: zone id is out of range
[   56.614003][ T6767] netlink: zone id is out of range
[   56.616731][ T6767] netlink: zone id is out of range
[   56.619025][ T6767] netlink: zone id is out of range
[   56.622508][ T6767] netlink: zone id is out of range
[   56.624304][ T6767] netlink: zone id is out of range
[   56.626155][ T6767] netlink: zone id is out of range
[   56.628214][ T6767] netlink: zone id is out of range
[   57.036144][ T6796] siw: device registration error -23
[   57.509092][ T6853] batadv0: entered promiscuous mode
[   57.513145][ T6853] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   57.516539][ T6853] batadv0: left promiscuous mode
[   57.575711][ T6859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   57.622334][ T6864] block nbd0: Unsupported socket: shutdown callout must be supported.
[   57.797019][ T6872] netlink: 'syz.1.435': attribute type 12 has an invalid length.
[   58.035277][ T6912] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   58.431782][ T6927] syzkaller1: entered allmulticast mode
[   58.792415][ T6947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   58.795439][ T6947] IPv6: NLM_F_CREATE should be set when creating new route
[   58.839332][ T6949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.842822][ T6949] syzkaller0: entered promiscuous mode
[   58.845233][ T6949] syzkaller0: entered allmulticast mode
[   58.857448][ T6949] tipc: Resetting bearer <eth:syzkaller0>
[   58.871325][ T6948] tipc: Resetting bearer <eth:syzkaller0>
[   58.879440][ T6948] tipc: Disabling bearer <eth:syzkaller0>
[   59.175597][ T6968] netlink: 'syz.2.477': attribute type 4 has an invalid length.
[   59.517863][ T7009] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   59.524101][ T7009] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   59.677093][ T7018] tun0: tun_chr_ioctl cmd 2147767520
[   59.680387][ T7018] netlink: 'syz.2.500': attribute type 2 has an invalid length.
[   59.682969][ T7018] __nla_validate_parse: 11 callbacks suppressed
[   59.682980][ T7018] netlink: 224 bytes leftover after parsing attributes in process `syz.2.500'.
[   60.074141][ T7042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.512'.
[   60.132130][ T7050] netlink: 92 bytes leftover after parsing attributes in process `syz.1.516'.
[   60.148006][ T7050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.516'.
[   60.224204][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[   60.227587][ T7056] netlink: 84 bytes leftover after parsing attributes in process `syz.1.519'.
[   60.227632][ T7056] netem: invalid attributes len -16
[   60.227638][ T7056] netem: change failed
[   60.446298][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'.
[   61.241240][ T7134] netlink: 80 bytes leftover after parsing attributes in process `syz.0.547'.
[   61.491349][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.563'.
[   61.603697][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.568'.
[   61.984913][ T7220] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   61.989467][   T12] bond0: (slave bond_slave_0): interface is now down
[   62.010157][ T6581] bond0: (slave bond_slave_0): interface is now down
[   62.030890][   T12] bond0: (slave bond_slave_0): interface is now down
[   62.033750][   T12] bond0: now running without any active interface!
[   62.406156][ T7273] gretap0: entered promiscuous mode
[   62.896624][ T7303] batadv_slave_0: entered promiscuous mode
[   62.900493][ T7302] batadv_slave_0: left promiscuous mode
[   62.952500][ T7307] validate_nla: 1 callbacks suppressed
[   62.952515][ T7307] netlink: 'syz.2.615': attribute type 1 has an invalid length.
[   62.957513][ T7307] netlink: 'syz.2.615': attribute type 1 has an invalid length.
[   63.241827][ T7338] syzkaller1: entered promiscuous mode
[   63.245767][ T7338] syzkaller1: entered allmulticast mode
[   63.655821][ T7262] net_ratelimit: 18 callbacks suppressed
[   63.655837][ T7262] Set syz1 is full, maxelem 65536 reached
[   63.904266][ T7411] syzkaller1: entered promiscuous mode
[   63.906488][ T7411] syzkaller1: entered allmulticast mode
[   64.012432][ T7425] netlink: 'syz.2.669': attribute type 13 has an invalid length.
[   64.159229][ T7438] Set syz1 is full, maxelem 65536 reached
[   64.327043][ T7455] openvswitch: netlink: EtherType 0 is less than min 600
[   64.365747][ T7459] netlink: 'syz.0.685': attribute type 4 has an invalid length.
[   64.809227][ T7493] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   65.147263][ T7522] __nla_validate_parse: 15 callbacks suppressed
[   65.147273][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.715'.
[   65.312899][ T7532] IPv6: addrconf: prefix option has invalid lifetime
[   65.409684][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'.
[   65.742758][ T7569] netlink: 144 bytes leftover after parsing attributes in process `syz.2.737'.
[   65.798414][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'.
[   65.866673][ T7581] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[   65.870100][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'.
[   65.873709][ T7581] netlink: 45 bytes leftover after parsing attributes in process `syz.2.743'.
[   65.952223][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'.
[   66.043016][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'.
[   67.047703][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   67.210587][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[   67.724782][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.729071][ T7723] bond0: (slave rose0): Enslaving as an active interface with an up link
[   67.898706][ T7749] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   68.094732][ T7776] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   68.126394][ T7780] netlink: 'syz.0.820': attribute type 83 has an invalid length.
[   68.349996][ T7795] unsupported nlmsg_type 40
[   68.388019][ T7799] netlink: 'syz.2.828': attribute type 1 has an invalid length.
[   69.100494][ T7803] block nbd0: server does not support multiple connections per device.
[   69.104582][ T7803] block nbd0: shutting down sockets
[   69.758638][ T7857] netlink: 'syz.1.853': attribute type 4 has an invalid length.
[   69.968441][ T7876] netlink: 'syz.2.862': attribute type 1 has an invalid length.
[   69.971467][ T7876] netlink: 'syz.2.862': attribute type 1 has an invalid length.
[   70.151794][ T7904] __nla_validate_parse: 12 callbacks suppressed
[   70.151809][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'.
[   70.160812][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'.
[   70.219695][ T7916] netlink: 'syz.2.882': attribute type 1 has an invalid length.
[   70.222529][ T7916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.882'.
[   70.359097][ T7934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.890'.
[   70.423376][ T7938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.448146][ T7938] syzkaller0: entered promiscuous mode
[   70.451819][ T7938] syzkaller0: entered allmulticast mode
[   70.459986][ T7938] tipc: Resetting bearer <eth:syzkaller0>
[   70.477952][ T7937] tipc: Resetting bearer <eth:syzkaller0>
[   70.487426][ T7948] nbd: must specify a size in bytes for the device
[   70.574082][ T7937] tipc: Disabling bearer <eth:syzkaller0>
[   70.581240][ T7957] netlink: 'syz.0.902': attribute type 1 has an invalid length.
[   70.623202][ T7957] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.640829][ T7957] bond1: (slave geneve2): making interface the new active one
[   70.644086][ T7957] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   70.648818][ T7964] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   70.692348][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'.
[   70.794969][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.918'.
[   71.052096][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.054802][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.864985][ T8034] netlink: 'syz.2.938': attribute type 1 has an invalid length.
[   71.874715][ T8034] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.947111][ T8046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   72.012132][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'.
[   72.096210][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.948'.
[   72.922519][ T8161] netlink: 'syz.0.990': attribute type 11 has an invalid length.
[   72.953261][ T8166] rdma_op ffff88803d66e9f0 conn xmit_rdma 0000000000000000
[   73.149929][ T8189] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   73.153186][  T963] IPVS: starting estimator thread 0...
[   73.239980][ T8199] IPVS: using max 76 ests per chain, 182400 per kthread
[   73.265141][ T8208] netlink: 'syz.2.1007': attribute type 10 has an invalid length.
[   73.274678][ T8208] 8021q: adding VLAN 0 to HW filter on device team0
[   73.285249][ T8208] bond0: (slave team0): Enslaving as an active interface with an up link
[   73.290566][   T13] bond0: (slave team0): interface is now down
[   73.326524][   T13] bond0: (slave team0): interface is now down
[   73.340522][   T13] bond0: (slave team0): interface is now down
[   73.343358][   T13] bond0: now running without any active interface!
[   73.413996][ T8218] netlink: 'syz.2.1012': attribute type 9 has an invalid length.
[   73.417498][ T8218] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1012'.
[   73.447520][ T8218] netlink: 'syz.2.1012': attribute type 1 has an invalid length.
[   73.535139][ T8224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'.
[   73.877712][ T8249] trusted_key: syz.1.1027 sent an empty control message without MSG_MORE.
[   74.954067][ T8360] netlink: 'syz.2.1079': attribute type 2 has an invalid length.
[   75.190127][ T8386] __nla_validate_parse: 11 callbacks suppressed
[   75.190145][ T8386] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1090'.
[   75.494266][ T8412] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1101'.
[   75.602930][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'.
[   75.639747][ T8423] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   75.924518][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'.
[   76.095635][ T8449] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   76.259184][ T8470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.304712][ T8476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.308442][ T8476] syzkaller0: entered promiscuous mode
[   76.310596][ T8476] syzkaller0: entered allmulticast mode
[   76.318615][ T8476] tipc: Resetting bearer <eth:syzkaller0>
[   76.319341][ T8478] netlink: 6940 bytes leftover after parsing attributes in process `syz.1.1133'.
[   76.325239][ T8475] tipc: Resetting bearer <eth:syzkaller0>
[   76.331730][ T8475] tipc: Disabling bearer <eth:syzkaller0>
[   76.495591][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'.
[   76.566665][ T8485] pim6reg: entered allmulticast mode
[   76.571422][ T8485] pim6reg: left allmulticast mode
[   76.577606][ T8492] Driver unsupported XDP return value 0 on prog  (id 174) dev N/A, expect packet loss!
[   77.401652][ T8534] netlink: 'syz.2.1152': attribute type 1 has an invalid length.
[   77.404352][ T8534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1152'.
[   77.412317][ T8534] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1152'.
[   77.441539][ T8536] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.1153'.
[   77.463482][ T8538] ieee802154 phy0 wpan0: encryption failed: -22
[   77.484631][ T8540] bond0: (slave team0): Releasing backup interface
[   77.490606][ T8540] bridge_slave_0: left allmulticast mode
[   77.492661][ T8540] bridge_slave_0: left promiscuous mode
[   77.495141][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.499425][ T8540] bridge_slave_1: left allmulticast mode
[   77.503961][ T8540] bridge_slave_1: left promiscuous mode
[   77.506356][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.511801][ T8540] bond0: (slave bond_slave_0): Releasing backup interface
[   77.519371][ T8540] team0: Port device team_slave_0 removed
[   77.526943][ T8540] team0: Port device team_slave_1 removed
[   77.531157][ T8540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.535071][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.539199][ T8540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.542314][ T8540] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.555237][ T8541] team0: Mode changed to "loadbalance"
[   77.696125][ T8555] veth0_to_bridge: entered promiscuous mode
[   77.698765][ T8554] veth0_to_bridge: left promiscuous mode
[   77.724267][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'.
[   77.737496][ T8559] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[   77.742617][ T8559] netlink: 'syz.0.1164': attribute type 2 has an invalid length.
[   77.860761][ T8575] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.865040][ T8575] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.905175][ T8575] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.909359][ T8575] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.951572][ T8575] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.960347][ T8575] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.007649][ T8588] tipc: Enabling of bearer <et:g> rejected, media not registered
[   78.018418][ T8575] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.026111][ T8575] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.068035][ T5879] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0
[   78.071342][ T8530] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   78.071725][ T5879] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.077782][ T5879] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.088445][ T5879] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.119643][ T5879] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.125533][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.139744][ T5879] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.147157][ T5879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.164545][ T5879] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.167918][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.178745][ T5879] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.182507][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.331132][ T8611] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   78.334599][ T8611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.411024][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[   78.688115][ T8646] bridge_slave_1: left allmulticast mode
[   78.691432][ T8646] bridge_slave_1: left promiscuous mode
[   78.693596][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.697367][ T8646] bridge_slave_0: left allmulticast mode
[   78.699635][ T8646] bridge_slave_0: left promiscuous mode
[   78.703232][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.765251][ T8648] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   78.868974][ T8655] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.878664][ T8655] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   78.883429][ T8655] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   78.893942][ T8655] bond0: (slave bond_slave_0): Releasing backup interface
[   78.896999][ T8655] bond0: (slave bond_slave_1): Releasing backup interface
[   78.902167][ T8655] team0: Port device team_slave_0 removed
[   78.904897][ T8655] team0: Port device team_slave_1 removed
[   78.907010][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.909696][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.913734][ T8655] bond2: (slave macvlan2): Releasing backup interface
[   79.045841][ T8682] nftables ruleset with unbound set
[   79.117769][ T8688] team0 (unregistering): Port device vlan0 removed
[   79.290149][ T5855] Bluetooth: hci0: command 0x0401 tx timeout
[   79.675392][ T8731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.678571][ T8731] syzkaller0: entered promiscuous mode
[   79.681475][ T8731] syzkaller0: entered allmulticast mode
[   79.687686][ T8731] tipc: Resetting bearer <eth:syzkaller0>
[   79.693258][ T8730] tipc: Resetting bearer <eth:syzkaller0>
[   79.698246][ T8730] tipc: Disabling bearer <eth:syzkaller0>
[   80.021306][ T8769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.321274][ T8805] netlink: 'syz.1.1275': attribute type 6 has an invalid length.
[   80.416080][ T8819] __nla_validate_parse: 15 callbacks suppressed
[   80.416090][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'.
[   80.449065][ T8825] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1285'.
[   80.745604][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.748352][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.751301][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.754047][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.756708][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.759409][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.762607][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.765247][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.767851][ T8844] netlink: 'syz.2.1293': attribute type 2 has an invalid length.
[   80.842762][ T8850] tipc: Resetting bearer <eth:syzkaller0>
[   80.856092][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'.
[   80.990304][ T8869] syzkaller1: entered promiscuous mode
[   80.992165][ T8869] syzkaller1: entered allmulticast mode
[   81.242395][ T8897] bond2: (slave gretap1): making interface the new active one
[   81.245773][ T8897] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   81.291864][   T10] cfg80211: failed to load regulatory.db
[   81.459046][ T8921] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   81.492918][ T5893] IPVS: starting estimator thread 0...
[   81.590097][ T8926] IPVS: using max 129 ests per chain, 309600 per kthread
[   81.617382][ T8935] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.1327'.
[   81.761975][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'.
[   81.833443][ T8959] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1338'.
[   81.889585][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'.
[   81.893583][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1342'.
[   81.933054][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'.
[   82.323058][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'.
[   83.055019][ T9074] IPVS: length: 148 != 24
[   83.127741][ T9081] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.171045][ T9087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.324662][ T9103] pim6reg1: entered allmulticast mode
[   84.147950][ T9135] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.158606][ T9135] bond3: (slave bridge2): making interface the new active one
[   84.163706][ T9135] bond3: (slave bridge2): Enslaving as an active interface with an up link
[   84.174112][ T9135] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   84.898196][ T9237] sctp: [Deprecated]: syz.1.1465 (pid 9237) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.898196][ T9237] Use struct sctp_sack_info instead
[   85.477476][ T9291] __nla_validate_parse: 11 callbacks suppressed
[   85.477493][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'.
[   85.485615][ T9291] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   85.540489][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'.
[   85.615655][ T9303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.647971][ T9307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.850339][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1504'.
[   86.078907][ T9347] ip6gre1: entered allmulticast mode
[   86.244167][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'.
[   86.251406][ T9369] macvtap1: entered promiscuous mode
[   86.253434][ T9369] batadv0: entered promiscuous mode
[   86.255279][ T9369] macvtap1: entered allmulticast mode
[   86.257301][ T9369] batadv0: entered allmulticast mode
[   86.259648][ T9369] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   86.265505][ T9369] batadv0: left allmulticast mode
[   86.267258][ T9369] batadv0: left promiscuous mode
[   86.568854][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1534'.
[   86.620181][ T9387] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   86.673890][ T9397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1539'.
[   86.676895][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'.
[   86.717231][ T9401] "syz.1.1541" (9401) uses obsolete ecb(arc4) skcipher
[   86.756512][ T9407] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1544'.
[   86.828917][ T9415] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   86.875450][ T9415] batadv_slave_0: entered promiscuous mode
[   86.886166][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'.
[   86.893501][ T9415] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1548'.
[   86.926507][ T9427] tipc: Failed to remove unknown binding: 66,1,1/134418688:759587526/759587528
[   86.932402][ T9427] tipc: Failed to remove unknown binding: 66,1,1/134418688:759587526/759587528
[   87.207664][ T9464] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   87.257632][ T9477] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   87.267316][ T9477] tipc: Enabled bearer <udp:syz1>, priority 10
[   87.433949][ T9499] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   87.437151][ T9499] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   88.172429][ T9620] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   88.257460][ T9630] validate_nla: 49 callbacks suppressed
[   88.257480][ T9630] netlink: 'syz.2.1649': attribute type 7 has an invalid length.
[   88.689624][ T9691] netlink: 'syz.1.1679': attribute type 11 has an invalid length.
[   88.929236][ T9736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.075308][ T9750] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   89.156874][ T9756] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   89.265248][ T9766] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   89.268271][ T9766] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   89.505698][ T9788] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   89.508842][ T9788] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   89.557365][ T9795] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   89.587389][ T5879] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   90.458115][ T9889] netlink: 'syz.2.1759': attribute type 9 has an invalid length.
[   90.625096][ T9898] __nla_validate_parse: 13 callbacks suppressed
[   90.625107][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1763'.
[   90.686454][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'.
[   91.006726][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'.
[   91.036329][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'.
[   91.040060][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'.
[   91.124094][ T9961] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1792'.
[   91.144991][ T9963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'.
[   91.356778][ T9978] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[   91.361116][ T9978] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[   91.492144][ T9994] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1807'.
[   91.537430][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1810'.
[   91.671736][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'.
[   91.944235][T10056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.068141][T10075] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   92.188626][T10096] netlink: 'syz.0.1850': attribute type 15 has an invalid length.
[   92.226683][T10100] netlink: 'syz.0.1852': attribute type 3 has an invalid length.
[   93.364550][T10154] netlink: 'syz.1.1876': attribute type 21 has an invalid length.
[   93.466840][T10180] netlink: 'syz.1.1887': attribute type 5 has an invalid length.
[   94.382452][T10261] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   94.501191][T10275] ieee802154 phy0 wpan0: encryption failed: -22
[   94.561803][T10281] netlink: 'syz.1.1929': attribute type 1 has an invalid length.
[   94.612001][T10290] netlink: 'syz.1.1934': attribute type 5 has an invalid length.
[   94.800931][T10328] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   94.992355][T10368] netlink: 'syz.0.1964': attribute type 2 has an invalid length.
[   95.076039][T10387] IPVS: persistence engine module ip_vs_pe_ not found
[   95.358921][T10434] netlink: 'syz.2.1993': attribute type 3 has an invalid length.
[   95.386699][ T5848] cgroup: fork rejected by pids controller in /syz1
[   95.446169][ T9333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.503298][ T9333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.556569][ T9333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.616514][ T9333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.635171][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.638567][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.642530][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.645704][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.649090][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.703485][T10454] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   95.969529][ T9333] bond0 (unregistering): Released all slaves
[   95.975871][ T9333] bond1 (unregistering): Released all slaves
[   95.983426][ T9333] bond2 (unregistering): Released all slaves
[   96.043702][ T9333] tipc: Left network mode
[   96.045322][T10449] chnl_net:caif_netlink_parms(): no params data found
[   96.104146][T10482] netlink: 'syz.2.2015': attribute type 21 has an invalid length.
[   96.141542][T10487] bridge_slave_0: entered promiscuous mode
[   96.154085][T10449] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.156748][T10449] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.159644][T10449] bridge_slave_0: entered allmulticast mode
[   96.163250][T10449] bridge_slave_0: entered promiscuous mode
[   96.166454][T10449] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.169533][T10449] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.184533][T10449] bridge_slave_1: entered allmulticast mode
[   96.190504][T10449] bridge_slave_1: entered promiscuous mode
[   96.208432][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.216146][T10495] syz.0.2020 uses old SIOCAX25GETINFO
[   96.222686][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.260985][T10449] team0: Port device team_slave_0 added
[   96.271917][T10449] team0: Port device team_slave_1 added
[   96.293908][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.296239][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.307117][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.317273][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.319502][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.329172][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.335487][ T9333] hsr_slave_0: left promiscuous mode
[   96.337454][ T9333] hsr_slave_1: left promiscuous mode
[   96.478620][T10449] hsr_slave_0: entered promiscuous mode
[   96.492626][T10449] hsr_slave_1: entered promiscuous mode
[   96.501217][T10449] debugfs: 'hsr0' already exists in 'hsr'
[   96.503400][T10449] Cannot create hsr debugfs directory
[   96.577046][T10520] netlink: 'syz.0.2031': attribute type 10 has an invalid length.
[   96.772879][T10548] __nla_validate_parse: 16 callbacks suppressed
[   96.772890][T10548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2040'.
[   96.794121][ T9333] IPVS: stop unused estimator thread 0...
[   96.812488][ T9333] ------------[ cut here ]------------
[   96.814279][ T9333] WARNING: CPU: 0 PID: 9333 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[   96.817393][ T9333] Modules linked in:
[   96.818833][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[   96.822698][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.826465][ T9333] Workqueue: netns cleanup_net
[   96.828068][ T9333] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   96.830049][ T9333] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b be 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 7f e1 f7 e8 e4 54 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d6 54 9d f7 90 0f 0b 90 e9 60 fe ff ff
[   96.837833][ T9333] RSP: 0018:ffffc900078f7898 EFLAGS: 00010293
[   96.840647][ T9333] RAX: ffffffff8a22564c RBX: ffff888029930000 RCX: ffff888108508000
[   96.844128][ T9333] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff888108508000
[   96.847410][ T9333] RBP: ffffc900078f79b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   96.850942][ T9333] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f631080
[   96.854817][ T9333] R13: 1ffff92000f1ef40 R14: ffff888029931480 R15: dffffc0000000000
[   96.858040][ T9333] FS:  0000000000000000(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[   96.862034][ T9333] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.864858][ T9333] CR2: 00007fb0f62e56c0 CR3: 000000000df36000 CR4: 00000000000006f0
[   96.867606][ T9333] Call Trace:
[   96.868700][ T9333]  <TASK>
[   96.869683][ T9333]  xfrm_net_exit+0x2d/0x70
[   96.871679][ T9333]  ops_undo_list+0x49a/0x990
[   96.873350][ T9333]  ? __pfx_ops_undo_list+0x10/0x10
[   96.875108][ T9333]  ? do_raw_spin_unlock+0x4d/0x240
[   96.876806][ T9333]  cleanup_net+0x4c5/0x800
[   96.878412][ T9333]  ? __pfx_cleanup_net+0x10/0x10
[   96.880751][ T9333]  ? rcu_is_watching+0x15/0xb0
[   96.882775][ T9333]  ? process_scheduled_works+0x9ef/0x17b0
[   96.885180][ T9333]  ? process_scheduled_works+0x9ef/0x17b0
[   96.887598][ T9333]  process_scheduled_works+0xae1/0x17b0
[   96.890169][ T9333]  ? __pfx_process_scheduled_works+0x10/0x10
[   96.892505][ T9333]  worker_thread+0x8a0/0xda0
[   96.894512][ T9333]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   96.897041][ T9333]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   96.899600][ T9333]  ? __kthread_parkme+0x7b/0x200
[   96.901925][ T9333]  kthread+0x711/0x8a0
[   96.903641][ T9333]  ? __pfx_worker_thread+0x10/0x10
[   96.905795][ T9333]  ? __pfx_kthread+0x10/0x10
[   96.907768][ T9333]  ? rcu_is_watching+0x15/0xb0
[   96.910009][ T9333]  ? __pfx_kthread+0x10/0x10
[   96.911949][ T9333]  ret_from_fork+0x3fc/0x770
[   96.913892][ T9333]  ? __pfx_ret_from_fork+0x10/0x10
[   96.916298][ T9333]  ? __switch_to_asm+0x39/0x70
[   96.918308][ T9333]  ? __switch_to_asm+0x33/0x70
[   96.920514][ T9333]  ? __pfx_kthread+0x10/0x10
[   96.922299][ T9333]  ret_from_fork_asm+0x1a/0x30
[   96.924031][ T9333]  </TASK>
[   96.925222][ T9333] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   96.927600][ T9333] CPU: 0 UID: 0 PID: 9333 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[   96.931184][ T9333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.934524][ T9333] Workqueue: netns cleanup_net
[   96.936409][ T9333] Call Trace:
[   96.937792][ T9333]  <TASK>
[   96.939011][ T9333]  dump_stack_lvl+0x99/0x250
[   96.940850][ T9333]  ? __asan_memcpy+0x40/0x70
[   96.942799][ T9333]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.944888][ T9333]  ? __pfx__printk+0x10/0x10
[   96.946741][ T9333]  vpanic+0x281/0x750
[   96.948382][ T9333]  ? __pfx__printk+0x10/0x10
[   96.950373][ T9333]  ? __pfx_vpanic+0x10/0x10
[   96.952352][ T9333]  ? is_bpf_text_address+0x292/0x2b0
[   96.954621][ T9333]  panic+0xb9/0xc0
[   96.956226][ T9333]  ? __pfx_panic+0x10/0x10
[   96.958096][ T9333]  __warn+0x31b/0x4b0
[   96.959768][ T9333]  ? xfrm_state_fini+0x26d/0x2f0
[   96.961883][ T9333]  ? xfrm_state_fini+0x26d/0x2f0
[   96.963926][ T9333]  report_bug+0x2be/0x4f0
[   96.965744][ T9333]  ? xfrm_state_fini+0x26d/0x2f0
[   96.967884][ T9333]  ? xfrm_state_fini+0x26d/0x2f0
[   96.969977][ T9333]  ? xfrm_state_fini+0x26f/0x2f0
[   96.972058][ T9333]  handle_bug+0x84/0x160
[   96.973790][ T9333]  exc_invalid_op+0x1a/0x50
[   96.975694][ T9333]  asm_exc_invalid_op+0x1a/0x20
[   96.977765][ T9333] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   96.980114][ T9333] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b be 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 7f e1 f7 e8 e4 54 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 d6 54 9d f7 90 0f 0b 90 e9 60 fe ff ff
[   96.987857][ T9333] RSP: 0018:ffffc900078f7898 EFLAGS: 00010293
[   96.990268][ T9333] RAX: ffffffff8a22564c RBX: ffff888029930000 RCX: ffff888108508000
[   96.993505][ T9333] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff888108508000
[   96.996849][ T9333] RBP: ffffc900078f79b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[   97.000175][ T9333] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f631080
[   97.003505][ T9333] R13: 1ffff92000f1ef40 R14: ffff888029931480 R15: dffffc0000000000
[   97.006770][ T9333]  ? xfrm_state_fini+0x26c/0x2f0
[   97.008908][ T9333]  ? xfrm_state_fini+0x26c/0x2f0
[   97.011056][ T9333]  xfrm_net_exit+0x2d/0x70
[   97.012909][ T9333]  ops_undo_list+0x49a/0x990
[   97.014827][ T9333]  ? __pfx_ops_undo_list+0x10/0x10
[   97.016964][ T9333]  ? do_raw_spin_unlock+0x4d/0x240
[   97.019156][ T9333]  cleanup_net+0x4c5/0x800
[   97.021064][ T9333]  ? __pfx_cleanup_net+0x10/0x10
[   97.023142][ T9333]  ? rcu_is_watching+0x15/0xb0
[   97.025153][ T9333]  ? process_scheduled_works+0x9ef/0x17b0
[   97.027530][ T9333]  ? process_scheduled_works+0x9ef/0x17b0
[   97.029920][ T9333]  process_scheduled_works+0xae1/0x17b0
[   97.032177][ T9333]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.034658][ T9333]  worker_thread+0x8a0/0xda0
[   97.036586][ T9333]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.039196][ T9333]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   97.041688][ T9333]  ? __kthread_parkme+0x7b/0x200
[   97.043778][ T9333]  kthread+0x711/0x8a0
[   97.045467][ T9333]  ? __pfx_worker_thread+0x10/0x10
[   97.047577][ T9333]  ? __pfx_kthread+0x10/0x10
[   97.049488][ T9333]  ? rcu_is_watching+0x15/0xb0
[   97.051411][ T9333]  ? __pfx_kthread+0x10/0x10
[   97.053344][ T9333]  ret_from_fork+0x3fc/0x770
[   97.055297][ T9333]  ? __pfx_ret_from_fork+0x10/0x10
[   97.057449][ T9333]  ? __switch_to_asm+0x39/0x70
[   97.059472][ T9333]  ? __switch_to_asm+0x33/0x70
[   97.061446][ T9333]  ? __pfx_kthread+0x10/0x10
[   97.063414][ T9333]  ret_from_fork_asm+0x1a/0x30
[   97.065472][ T9333]  </TASK>
[   97.067529][ T9333] Kernel Offset: disabled
[   97.069328][ T9333] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:51:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900078f7030
R8 =ffff888107060237 R9 =1ffff11020e0c046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb8df R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb0f62e56c0 CR3=0000000028ef6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00000000ff000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b72aaaf RBX=ffff8880244e6100 RCX=ffff888108f85640 RDX=0000000000000000
RSI=000000000000000e RDI=0000000000000007 RBP=ffffc900083a75d0 RSP=ffffc900083a73f8
R8 =ffff888108f85640 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000000
R12=0000000000000007 R13=dffffc0000000000 R14=ffff8880286a1800 R15=ffff8880286a1880
RIP=ffffffff81bfab67 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5783a9f6a8 CR3=000000010992e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
